SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Security > General Network Security

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-07-2013, 07:07 AM
ray bright ray bright is offline
New Member
 
Join Date: Feb 2013
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
ray bright is just starting out
Default Help please with security on a small network

Hi

I have a hotel with two different internet feeds, one I use for my office and the other for public access via hot spots.
I have now been able to order fibre with a fast feed and so want to only use the one feed for both jobs.
I want to know the best way of isolating my computers from the other public side.

Can any one help.

Thanks
Reply With Quote
  #2  
Old 02-07-2013, 11:32 AM
thiggins's Avatar
thiggins thiggins is offline
Mr. Easy
 
Join Date: May 2008
Posts: 9,246
Thanks: 166
Thanked 638 Times in 542 Posts
thiggins is just starting out
Default

Easiest way is to use a router or smart switch that supports VLANs.
Go to the Router Finder, scroll down to the LAN section and check the VLAN filter.
__________________
Tim Higgins
Managing Editor,SmallNetBuilder.com
Reply With Quote
  #3  
Old 02-07-2013, 09:50 PM
stevech stevech is offline
Very Senior Member
 
Join Date: Mar 2010
Location: San Diego
Posts: 4,910
Thanks: 1
Thanked 353 Times in 340 Posts
stevech is just starting out
Default

The business side of your ISP can provide and can maintain a router supporting either dual ethernet NICs, or one NIC with VLANs.
The latter is more complex than the former.
Reply With Quote
  #4  
Old 02-26-2013, 03:13 PM
rquared rquared is offline
New Member
 
Join Date: Feb 2013
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
rquared is just starting out
Smile

Quote:
Originally Posted by ray bright View Post
Hi

I have a hotel with two different internet feeds, one I use for my office and the other for public access via hot spots.
I have now been able to order fibre with a fast feed and so want to only use the one feed for both jobs.
I want to know the best way of isolating my computers from the other public side.

Can any one help.

Thanks
One issue you will have is your guest network overrunning your business network on a shared line. The only way to stop that, is for your ISP to segment your line into two VLANs (stated in earlier post) and do traffic shaping to dedicate bandwidths for each VLAN. The issue with that is configuration on your side will be a bit more complex. As far as your question goes regarding isolation, if you do not believe (atleast initially) that your guest network will consume a ton of bandwidth, then simply put up a firewall on your guest network with your business network behind it. Treat the guest network like the 'Internet' since it is 100% untrusted, just route out to the 'net using the same router as the guest. Easy peasy.
Reply With Quote
  #5  
Old 02-27-2013, 03:09 AM
Nerre Nerre is offline
Very Senior Member
 
Join Date: Oct 2012
Posts: 312
Thanks: 0
Thanked 32 Times in 30 Posts
Nerre is just starting out
Default

Wouldn't one way be to use two routers:

First router connected to the internet and hosting the guest network (and using QoS to manage bandwidth). Since I guess the hotspots are separate access points this router does not need WiFi

Second router put into the DMZ of the first router and serving the office network.

I know the VLAN solutions probably are a better solution, but I think the two router solution is easier to set up.
Reply With Quote
  #6  
Old 02-27-2013, 11:36 AM
rquared rquared is offline
New Member
 
Join Date: Feb 2013
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
rquared is just starting out
Default

As I posted, I would use a firewall not a router. But yes, essentially you have the idea I was trying to present.
Reply With Quote
Reply

Tags
network, network help, security

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


All times are GMT -4. The time now is 03:44 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  430
azazel1024  125
john9527  96
L&LD  95
htismaqe  79
ColinTaylor  70
stevech  64
hggomes  63
sfx2000  58
Anzaia  49
RMerlin  6274
john9527  447
stevech  352
ryzhov_al  289
TeHashX  252
L&LD  242
RogerSC  202
sinshiva  146
sfx2000  136
joegreat  127
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  48104
Old RT-AC68 -...  22559
Old RT-AC68P...  7153
Old Moderate Nat...  4836
Old ASUS RT-N66U...  4343
Old iOS 8.1...  3998
Old RT-AC87U -...  2475
Old WiFi...  2434
Old RT-AC68P QOS...  1998
Old AC68U,...  1792
Old Asuswrt-Merli...  216
Old RT-AC68 -...  137
Old Review: 24...  35
Old RT-AC68P...  33
Old iOS 8.1...  33
Old Moderate Nat...  31
Old WiFi...  27
Old RT-AC87U -...  26
Old RT-AC68P QOS...  24
Old How to flash...  24


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.