Announcement

Collapse
No announcement yet.

Need to separate Lans

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Need to separate Lans

    Hi;

    I have been asked to help setup wireless for a club that has existing small Lan with pcs, a server etc.
    Lan is - 4 port router, Speedstream 6520 with DSL internet.

    I thought that I could simply setup a second router with wireless with a different subnet and that would prevent club wireless users on this 2nd router from seeing the Lan. Not so.

    I setup a test with my existing network.

    R1 is 4 wire Sympatico Lan 192.168.8.1 with internet connection.
    R2 is 2nd router, older Dlink 524. 192.168.0.1
    R2's wan port is dhcp connected to R1 lan port

    PCs on either router get internet but also can ping each other. The nature of routers I guess.

    Is there a simple-ish way to keep em separated without installing major extra hardware or installing extra firewalls etc on pcs on either lan?

    The pcs on R2 will be public wireless...cafe style usage and they are not to have ability to see the Lan pcs as one would expect...

    I've read about ap separation but that seems to only mean that each wireless pc are blind to each other, not to other pcs on different lan.

    Thanks

  • #2
    Re: Need to separate Lans

    Configuring the firewall on the DLink would be the easiest way to block the "public" subnet from the private LAN. What you'll want to do is block all traffic to the 192.168.8.0/24 subnet except for the gateway.

    Add a rule like the one in the attached pic and test it out.
    Click image for larger version

Name:	BlockLAN.png
Views:	1
Size:	158.5 KB
ID:	463972
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: Need to separate Lans

      Yes that makes sense . I will try it out. Thanks!

      Travis

      Comment


      • #4
        Re: Need to separate Lans

        Glad to!
        Let us know how you get on.
        Regards,
        Jeremy

        Network Consultant/Engineer
        Baltimore - Washington area and beyond
        www.gma-cpa.com

        Comment


        • #5
          Re: Need to separate Lans

          It works as expected on my test rig. It should work on the job.
          Isn't this internet thingy wonderful!!!
          Thanks;
          Travis

          Comment

          Working...
          X