Networks

Ask something
Question Locked

Sharing a DSL connection / keeping them separate.

0 helpful
8 replies

by mdphoenix 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Since a VLAN obviously won't do what I want - I think it's because of the Layer 3 Router that's at the head of the LAN - let me explain exactly what I want to do....

I have a 10 user network with a Windows 2000 PDC. The PDC is a Proliant.

We also have a wireless access point which is encrypted for use by my users. We have three offices over 50 miles apart from each other, so our mobile users come and go as they please and use the WAP.

Here?s what I WANT to do. I have a Netgear Wireless Router. I want to configure it so our clients can come in and use it freely without an encryption key, yet not have access to our LAN resources. Where the new server comes in to play is this ? The unit has been purchased for another of our offices. I want to configure it here, then move it to it?s permanent home later. While configuring it here, I don?t want it to see the current PDC, either, as I don?t want any issues with the two domains seeing each other. ? So if I can establish a ?public? segment on my LAN for clients, then I could use that for the new server as well.

So the bottom line ? I need to create a segment of my LAN for public use with no access to company resources except the broadband connection.

Now, instead of me saying I want a VLAN to do this, I will ask you, the experts, how I would accomplish this? Do I need a hardware appliance of some sort? There?s a spare NIC in the Proliant, can I create a segmented LAN from that? I?m open to anything? really. Once I establish this segment here, I need to do this at my other two locations as well.

Thanks for all your help!

8 replies

by bogdan.botezatu

You will have to buy another NIC (If the server is one of the HP PROLIANT series, you need a PCI-X network adapter). This NIC will host the wireless router. Since this NIC will be assigned a different network, the users connected to it will not have access to the shared resources in your corporate network.

by mdphoenix

But the router is the NAT device. Am I going to be configuring Routing and Remote access just on the second NIC to give Internet access to the WAP?

by bogdan.botezatu

yes, that's right. But watch out, because, as far as I know, the second NIC is in fact a iLO port (integrated lights out) that allow you to control your server remotely.

by mdphoenix

It's actually an add-on card that I installed a while ago.

I'll give it a shot. Thanks!

by mdphoenix

This has all been a waste of time. I apparently need the appropriate hardware device to handle this.

by bogdan.botezatu

Actually, I have recently accomplished something like that in the company I am working for. Just create another network, with different IP classes (10.0.0.1/255 - subnet 255.255.255.0 or 192.168.0.1/255 with the same subnet). Do not use the same IP class on both networks. This really works and i have implemented it in a print works (in order to keep newspapers' FTP separate, not to be able to see each other's resources on FTP).

by mdphoenix

Quite honestly, I've been slammed with the installation of a new server and haven't had a chance to jack with this much past the initial attempt. I'll work on it again in a couple weeks.

Thanks for your support!

This discussion is closed to new replies.