Help a newbie setting up a WAN

[yatolik]

hey guys,

got a newbie question here (again!). so I hooked up my Dlink DI-614+ to my Dlink DCM-100 Cable modem, and connected my computer to it through port 1 (the router has 4 ports).

So I have several complicated questions:

Key:
Level 1 - internet access only
Level 2 - access to some files and applications on my computer
Level 3 - full access to my computer (connected through port 1)

1) I'm gonna run a cable upstairs to another desktop. How do I ensure different degrees of password protection return different access to files on my computer (i.e. is this somehow done through windows)? In addition, I want the upstairs computer to recieve NO access without level one password, including NO internet or file access on my computer.

2) How do I assure that anyone attempting to connect wirelessly has to SSH in and how do I assign passwords. As before, I want some username/password combos to be given L1 access, some to be given L2 access, and some to have L3 access. (E.g. say a friend comes over with his laptop. I'll want to create a custom user/pass for him with L1 access).

3) I have various applications I would want to run on computers with L2 and L3 access (all files on mycomp), on MY computer which is on port 1. How would this be done? I pretty much understand how to do it through PC Anywhere, but say I want to wow a friend with access to WinTV application on his laptop which has level 2 access (allowing access to WinTV), could I do this without expensive software? I don't mind using PC Anywhere on the upstairs desktop, but I was thinking more along the lines of doing this without major software. As before, I want different applications to be part of different layer password protection. And this would all be done through the router, I don't need anyone accessing my computer over the internet, only over the LAN.

I know this is a pretty complex thing, so if anyone has time, please explain to me what to do. I've never setup a windows network before. I also know that my questions are needlessly complex (I didn't know how else to phrase them) so please ask for clarification.

I can understand some jargon, so shoot. Also, a major point to keep in mind is that I want all wireless connections to be forced to SSH in to access ANYTHING including even L1 access, I don't want some puny software encryption. Also, nobody but admin level should have access to upstairs computer if they are not accessing from mycomp. Also, I don't plan on getting a hardware firewall, this is just a home network and everything I'm doing is really just for fun.

Please keep non-free legal software recommendations to only things that would go on the desktops.

To wrap up, network will consist of: 1) D-Link DCM-100 modem 2) D-Link DI-614+ 3) D-Link DWL-650+ (still looking)
4)any wireless card that a friend happens to bring.

Two desktops, and x<10 laptops, and x<5 PDAs with CF wireless cards. also, possibly laptops will be connected to ports 3,4 if they don't have wireless cards, these should also be forced to play by the rules. All computers will be running WinXP Home, WinXP Pro, Win2kPro. Mycomp is currently running WinXP home. If I need to upgrade to WinXP Pro, that's not a problem just tell me.

Thanks a million.


so far i've figured out that the only way my dlink router can successfully block/allow access is if I force every user to sign up their mac id with me. this still doesn't solve my question of blocking/allowing internet access to specific people on a non-protected desktop, but its a start.

thanks for the basic networking faq type thingee

 

[JackMDS]

Looking at the scope of your questions, you will be better upgrading to WinXP. Some of your issue can be achieved through WinXP native Help.

Work on Basic Networking first, some of your concerns should be addressed at a later stage.

Here is a collection of Links that have answers to some of your concerns.

Basic Networking.

 

[lobadobadingdong]

yes, or if you're impatient, find a local buddy, or make a friend at a local (not best buy or circuit city type place) computer shop. sometime if you pester them with enough questions and they get annoyed or amused, they will help you out for cheap, or sometimes for beer 😉.

 

[dnoyeb]

I think your solution is going to be sort of hacky. Port blocking in an SMC router can achieve this type of levelled access based on computers though, and not passwords. If you want password protected internet access you likely need a password protected proxy.

anyone that connects wirelessly will be physically attached to your network. what services you expose on that network is a matter of software.

Again, you can limit access by IP#s, but by login ID will be tough unless you have a domain login, and your services are dolled out by the server.

Try physicall seperation of networks based on netmasks and such. its not divided in the level fashion you want, but I think its the most practical. Unless you are just out for network education/practice.