Security

Ask something
Discussion Locked

PC access &ip-address range restriction

0 helpful
3 replies

by ssp2000

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all

I have setup windows 2000 domain server. I installed two NIC. I bound
one IP Net address 192.168 25.X to one NIC and 192.168.30.X Network
to other NIC. Both Subnet PCs can Login to my Domain server having IP
address 192.168.25.1.

The IP Network 192.168.30.X user can access other IP Network
192.168.22..X. I want to Block /restrict them to access any PC on
192.168.25.x Network. While I want to allow the user from 192.168.25.X
to access the Network 192.168.30.X

How can I achive this by using windows 2000 O/S features only. I want to
apply IP-filtering by using windows 2000 in-buit features.(Like group Policy ,
routing etc if possible)

Any reference on web will also helpful to me.

Thanks in advance.

ssp2000

3 replies

by rkreuzburg

You could setup your 2000 server like a firewall using Routing and Remote access. Using the filters on the 'Inside' and 'Outside' NIC's you could allow specific or a range of ports access or deny access from one side to the other. You would have to be careful not to block the restricted sides access to the server itself. Remember when you block a port this way the server won't respond at all to it.

Unfortuneatly due to the way your network is setup this scenerio will be extremely difficult to get working properly. You should seriously consider using 2 domains, 1 for each subnet. Then you could use policys to allow one domain access to the other while restricting it in the other domain.

by mert gülsoy (mgulsoy

You can also configure your routing table to make that. use these commands with command prompt:
for printing routes: route print
for help: route /?

This discussion is closed to new replies.