Need Networking Advise

[YTech]

I am in search of some network advice, this is for a local YMCA.

Here is our current setup.

We are connecting threw a DSL line, which is connected to a router and hubs from there.

We have a total of 12 computers, 6 of which are lab PC's, and the other 6 being frontdesk and offices.

In this mix on the same network we have two public access PC's.

We are currently looking for advice as to what we could or should do to this network, like adding a server for added security etc.

Some information is critical to the organization, YMCA database being one.

It would be great to here from others, on how are current setup is, how to improve it or what we should look at doing. Security is becoming an issue as we do have the public access computers and employees who do not exactly know what can happen when you do something like share your whole C: drive of a computer.

Thanks for any advice you may have 🙂

 

[rustyjeep]

my first thought:

have a router connected to the dsl, with the two public access computers hooked to it - your public / open to all network

hook up another router to the first (a wireless router would be nice and cheap). Setup dhcp, and put these computers on a different subnet (so they don't interact with the public computer).

 

[YTech]

Thx for the information.

I have found out that our ADSL provider allows us to use two dynamic IP's.

Would a setup like this work.

|
|
|ADSL|
|
|Hub|
|
|Router||Router|

|Staff| |Public|

(sorry for the bad drawing)

A setup like that should work right? Each Router would get an IP from the ISP, or maybe I am missing something that will not allow that setup.

Thanks

 

[Zucarita9000]

Well, the most secure solutions would be setting up vlans, so the public pc's don't interact at all with the private network. You should allow only internet access and some printer (maybe) on the public pc's.

You can have a router or layer 3 switch to bind the VLANs and managed them from the private network. However, it will not be as cheap as the solution Rustyjeep gave you.

You can also set something up like this:

Internet > DSL Modem > Router 1 > Private PC's
Router 2 > Public PC's

Using two different subnets for each network and setting the 2º router to static routing.

 

[Monoman]

personally, I would setup a smoothwall box as the router and put the public plcs on the DMZ and the important computers on the LAN line. they would be on different vlans as described above. PM more for more details.