Page 1 of 1
Want to share broadband, but not the LAN.
Posted: Sat Feb 28, 2004 7:02 pm
by MegaVectra
I should know how to do this, but just never had this kind of situation before.
I want to share my cable connection with two different LANs, but don't want the LANs to see one another. I'm using Smoothwall for my firewall/router. What would be the easiest and most secure way to do this?
Posted: Sat Feb 28, 2004 7:59 pm
by smb
use a different subnet mask for each segment of the network.
Posted: Sat Feb 28, 2004 9:19 pm
by MegaVectra
ohhhh duhhhh I'm a dumbass.
Thanks!
Posted: Sun Feb 29, 2004 2:31 am
by Pugsley
or get a managed switch. and have it set so that the port that goes to lan A only sees the uplink port and port B only sees the uplink port. I have a MDU switch that was default set up that way. all 24 of the 10 meg ports only saw the 100 meg uplink port. the 10 megs couldent talk to eachother.
Posted: Mon Mar 01, 2004 11:31 am
by MegaVectra
Here is the deal. I want to share my cable coonection with the apartment I am renting on the backside om my house. Would just using a different subnet on my machines be secure enough?
[align=center]Cable Modem
||
||
Smoothwall router
||
||
My House===Switch===Apartment[/align]
Posted: Mon Mar 01, 2004 12:30 pm
by smb
yes.
Posted: Mon Mar 01, 2004 12:39 pm
by FlyingPenguin
Unless you have a techie renting the apartment.
For additional protection I would make sure that guest accounts are disabled on all your computers, and that you have secure passwords setup for any shared resources. Just use the same password for all user accounts and you can setup WinXP & 2K to auto-logon using TweakUI so you and your family doesn't have to worry about remembering a password.
Posted: Mon Mar 01, 2004 2:53 pm
by smb
My thinking is that some joe is going to rent the apartment. in any case, to join a network or access another networks resources, you have to have the password to access those resources. (as mentioned)
Posted: Mon Mar 01, 2004 11:36 pm
by MegaVectra
I killed two birds with one stone witout actually meaning to. I installed Mitel Networks SME Server 6.0 which will act as a domain controller for my subnet, so even if a techie moves outback I will feel more secure.
http://www.pcabusers.com/forums/showthr ... post209654
Posted: Tue Mar 02, 2004 11:04 am
by smb
yep, you can do that too. We use Micosoft ISA server at work. for a somewhat similar setup.