Want to share broadband, but not the LAN.

MegaVectra · Post by **MegaVectra** » Sat Feb 28, 2004 7:02 pm

I should know how to do this, but just never had this kind of situation before.

I want to share my cable connection with two different LANs, but don't want the LANs to see one another. I'm using Smoothwall for my firewall/router. What would be the easiest and most secure way to do this?

smb · Post by **smb** » Sat Feb 28, 2004 7:59 pm

use a different subnet mask for each segment of the network.

MegaVectra · Post by **MegaVectra** » Sat Feb 28, 2004 9:19 pm

ohhhh duhhhh I'm a dumbass.

Thanks!

Pugsley · Post by **Pugsley** » Sun Feb 29, 2004 2:31 am

or get a managed switch. and have it set so that the port that goes to lan A only sees the uplink port and port B only sees the uplink port. I have a MDU switch that was default set up that way. all 24 of the 10 meg ports only saw the 100 meg uplink port. the 10 megs couldent talk to eachother.

MegaVectra · Post by **MegaVectra** » Mon Mar 01, 2004 11:31 am

Here is the deal. I want to share my cable coonection with the apartment I am renting on the backside om my house. Would just using a different subnet on my machines be secure enough?

[align=center]Cable Modem
||
||
Smoothwall router
||
||
My House===Switch===Apartment[/align]

smb · Post by **smb** » Mon Mar 01, 2004 12:30 pm

Post by **FlyingPenguin** » Mon Mar 01, 2004 12:39 pm

Unless you have a techie renting the apartment.

For additional protection I would make sure that guest accounts are disabled on all your computers, and that you have secure passwords setup for any shared resources. Just use the same password for all user accounts and you can setup WinXP & 2K to auto-logon using TweakUI so you and your family doesn't have to worry about remembering a password.

smb · Post by **smb** » Mon Mar 01, 2004 2:53 pm

My thinking is that some joe is going to rent the apartment. in any case, to join a network or access another networks resources, you have to have the password to access those resources. (as mentioned)

MegaVectra · Post by **MegaVectra** » Mon Mar 01, 2004 11:36 pm

I killed two birds with one stone witout actually meaning to. I installed Mitel Networks SME Server 6.0 which will act as a domain controller for my subnet, so even if a techie moves outback I will feel more secure.

http://www.pcabusers.com/forums/showthr ... post209654

smb · Post by **smb** » Tue Mar 02, 2004 11:04 am

yep, you can do that too. We use Micosoft ISA server at work. for a somewhat similar setup.