1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

adding a subnet?

Discussion in 'Networking Issues' started by wt77, Oct 21, 2007.

  1. wt77

    wt77 Guest

    Greetings,

    I have a major networking issue that I'm requesting assistance with. I work with a local church and helped them more or less cobble together a network using mostly pre-existing equipment. It looks like this

    ---

    Church office: the DSL enters the building via modem and WRT54G (192.168.1.1) in this office. Office computers and how they connect to the network:

    * Church administrator PC (ethernet)
    * Storage Link (ethernet)
    * Copy machine (ethernet)
    * After school program PC (wireless)
    * Pastor laptop (wireless)
    * Church administrator laptop (wireless)

    Computer lab:

    * 6 iMacs networked together via 8-port desktop switch
    * The desktop switch connects to router via WAP54G running in repeater mode
    * 1 Linksys print server (awaiting new printer) connected to same switch

    Downstairs lecture hall:

    * 1 WAP54G running in repeater mode

    Wireless is running WEP and MAC address filtering for security.

    ---

    The church's plan is to have meetings, conferences, and the like in the lecture hall. However:

    1. Constantly adding the MAC addresses of visitors may be tedious and the church does NOT have an IT staff to think of, in order to add the addresses each time.

    2. The Church administrator wants to "isolate" all of the office equipment on a separate network segment so that visitors --in case they may be running Network Magic or some other software that would let them "snoop" on the network-- would not be able to see the copier or the storage link.

    I'm not quite sure how to accomplish this. I've heard that it would be possible, though cumbersome, to have another router daisy-chained behind the current WRT54G to create the new segment.

    In that case, the office computers could connect to possibly the 192.168.2.x network, while the other ones could connect to the pre-existing 192.168.1.1 network, and devices on the respective segments would not be able to "see" eachother.

    Is this pretty much the case? Am I off-base? Is there another possible solution to the administrator's wish? Would it be possible to point me in the direction of a tutorial that would help me set things up?

    Thanks very much in advance for all the help you may offer.
     
  2. Guyfromhe

    Guyfromhe Network Guru Member

    What you want to do could get very completx. There are purpose built devices that will segreate an office lan, a public lan and a wireless lan usually used in internet cafes. If you want to do this yourself you will need a great understanding of networking and subnetting and firewalling. Subnetting is not security, but it's possible to use it in combination with other methods to secure systems. Also, you'll probably want some sort of open AP in the confrence room unless they want one of those Cafe/Hotel type devices which are simple enough for a front desk secratry to authorize the adding of new clients.
     

Share This Page