Tech Support > Computers & Technology > Networking > how to share internet among offices but keep security intact?
how to share internet among offices but keep security intact?
Posted by SteveWa@wwwplanet.net on May 12th, 2006


i have a bldg that will have 3 different companies in 3 different
offices within one bldg.

can we use 1 dsl modem to share an internet connection amongst these
offices?

how do i separate the networks, so one office cannot be on the same
internal networks as the others, but they will all have the same
gateway through the dsl modem?

is this possible using a ruoter, and what features of the router should
I look for?

thanks

Posted by Bob Willard on May 13th, 2006


SteveWa@wwwplanet.net wrote:

on its WAN port; then, use one secondary router per company with its WAN
port cabled into a LAN port on the primary router.

--
Cheers, Bob

Posted by SteveWa@wwwplanet.net on May 15th, 2006


and then what? can you explain how you would setup different networks
to prevent the traffic on the main router from "seeing" the other
traffic on the secondary router? if i used different subnet values ie.
10.0.0.1 versus 192.168.1.1 to separate the networks, would that work?
can I do that, and still tell each pc on ech network to use the ip of
the dsl modem as it's gateway, or not, beacuse i am thinking the
gateway value must be inside subnet values, i.e. can't use 10.0.0.1 as
the gateway if your subnet is 192.168... or can you do some tricky
mapping inside the router to make it associate 10.0.0.1 to the value of
192.168.1.1 for the dsl moedm on the main router?

Posted by Yousuf Khan on May 16th, 2006


SteveWa@wwwplanet.net wrote:

You would make the LAN port of the primary router, 192.168.0.x, while
all secondary routers would have LAN ports of 192.168.1.x.

If you want to get creative, then you can make the LAN port of the first
office 192.168.1.x, the second office 192.168.2.x, etc. But this is not
necessary, but you can do it, to keep the network topology clear and
distinct in your own head if you will need to service these routers for
these offices afterwards.

I would also suggest getting a non-wireless router for your primary
router, as you would not want anyone in any of the offices to be able to
directly connect to your primary router via a laptop wireless feature.
Similarly, if you're going to be enabling wireless access via the
secondary routers, then make sure they are all secured separately via
different WEP or WPA passwords, and make sure that each router
broadcasts a different SSID name so people aren't confused about which
office network they are connecting to.

Yousuf Khan

Posted by Bob Willard on May 16th, 2006


Yousuf Khan wrote:
Yep. I concur.
--
Cheers, Bob


Similar Posts