Block Internet Access without affecting LAN services on a LAN - TechRepublic
Question
August 14, 2009 at 12:16 AM
drew_viii

Block Internet Access without affecting LAN services on a LAN

by drew_viii . Updated 16 years, 11 months ago

Hi, need some help here and ideas as well! im new here, 1st post as well! 🙂

Scenario:
10 Workstation, 1 of the 10 workstation has apache tomcat server on it running a web based program.

7 workstations including the server should not have internet access, including p2p programs as well and IM

3 workstations should have full internet access

all 10 should have perfect LAN features, sharing files etc etc… and of course accessing the server

set up currently, a router connected to a modem, a switch connected to the router, all 8 pcs connected on the switch, while 2 on the router ports

ok, generally ive tried mac address filtering with the belkin router, but obviously this blocks all network traffice, hence no LAN then, so it wont work

seconrd i tried, ip client address filter, which states which ip and which port to block, tried that, but they can get over with this by doing automatic ip address acquiring, this will only work if i put static, and i know they can change the static ip to automatic ip, why, cuz router running on DHCP, why DHCP? because it needs wifi access for multiple users during meetings

is there a better way to do this? i couldn’t protect my server when it has internet access, and i need to restrict 7 pcs with net access in order not to wast bandwidth with p2p programs, IM and browsing.

im trying to figure out by making 2 LAN with them, but still i cant make it work, i tried to, but its just a normal belkin wireless router, i couldnt manually assign each port for access or with IP address as well, if i have a cisco router i could configure it easily but with this, it has its limits, but i hope there is a way to sort this out with out purchasing another extra router, plz help or simply suggest what can i do in order to have access with LAN but restrict internet access with them? thanks!!!!

This discussion is locked

All Comments