Best way to keep people out of networked comps?

[antyler]

If there is a large number of users with access to free wi fi,

what is the best way to deny access to the local area network and the shared computers on the network, and only allow the connected wireless users to access the internet?

edit:: to clarify, is there a simple way to allow multiple wifi users internet access, but not access to other networked computers?

Also assuming that the networked computers have no shared folders or drives, i still want them to be untouchable to the wifi users. Only internet access.

How can i achieve this? Jack mentioned showed one way in a reply, but i do not think it is going to work on the setup im working with.

is there a program, or some settings on the router perhaps?

 

[JackMDS]

Network Segregation - http://www.ezlan.net/shield.html

 

[RebateMonger]

Another option is employing a second router using a second public IP address given you by your ISP. But that second IP option (using two Static IP addresses) isn't very common today with home-class Internet accounts.

 

[RebateMonger]

Originally posted by: JackMDS
Network Segregation - http://www.ezlan.net/shield.html

JackMDS,

Have you run into any problems with that configuration and the double-NAT that results for the most-inside clients? I used to not worry about this, since I use double-NAT all the time with my SBS servers. But I've had several clients where the equipment hated double-NATs. Some web sites (such as MSN, Yahoo, and SSL sites) didn't work properly. Some research pointed to probable MTU-size issues, but I didn't dig into it very deeply.

 

[antyler]

Originally posted by: JackMDS
Network Segregation - http://www.ezlan.net/shield.html

that just might work jack, thanks alot. i mean it will work if we can get it set up that way.

 

[antyler]

Originally posted by: JackMDS
Network Segregation - http://www.ezlan.net/shield.html

If i decide not to go this way, and just run the regular WAP or WEP encryption on the router, what is the chances the the server running the network can be comprimised?

Can files only be messed with if they are shared on the network, or can someone who knew what they were doing, get in and mess up the server if nothing is actually shared.

 

[Fullmetal Chocobo]

Marked for later. I have 3 routers to play with, so this looks like a good config.