Malware

Ask something
Question Locked

Non domain computer network access.

0 helpful
4 replies

by kirk.roberts 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
what do people use to prevent network access to non domain computers? everyone that visits our offices wants access to the internet. most of the time i can check out their computers for upto date virus protection and then allow them to connect to the network but some people just come in and plug in there computers without asking. is there a program or hardware device that would prevent unauthorized connections?

4 replies

by smartacew0lf

Running on the assumption that those you speak of that 'come in and plug in their computers' are doing so by utilizing an R45 drop somewhere within the building, I imagine your best bet would be to use MAC address filtering on the router. Were we speaking of Wireless access this would be easily effected by locking down the wifi portion of the network. (A thing that should be done already if it is not currently) There are other considerations requiring proper hardware and considerable expense.
Would help to know the number of nodes on the LAN, the types of operating systems attached to the LAN and make/model of router used within the network.

by kermit1

Disable all ports on router that are not in use and enable them when you allow access to that particular port, or enable access based on MAC on all ports.
I guess that you have DHCP, change that to fixed IP so anyone who want access to your network should now IP and subnet.

All of that depend on how large your network is.

Solution is not elegant, but will do the job.

by jpelectron

VLANs is how you accomplish this.

Put a public/guest wireless access point, and some physical network ports in the lobby/common area - all memebers of a separate VLAN, make this VLAN route to the Internet and nothing else - thus protecting your network from foreign machines.

This discussion is closed to new replies.