|
Posted by Bob Vaughan on January 24, 2006, 7:22 am
If you were Registered and logged in, you could reply and use other advanced thread options
>
>> Wayne wrote:
>>
>>>
>>>>Any suggestions on how to connect multiple LANs to one cable modem
>>>>Internet
>>>>connection? Each LAN has 4 PCs (max) must remain isolated from the other
>>>>LANs. One LAN requires the ability to limit what PC's can connect to the
>>>>Internet.
>>>
>>>
>>> Copy and paste into notepad.
>>>
>>> ---------
>>> | Cable |
>>> | Modem |
>>> ---------
>>> |
>>> | <-WAN Port
>>> ------------------
>>> | Broadband |
>>> | Router |
>>> ------------------
>>> LAN Ports -> | | | 192.168.100.0 /24
>>> __________| |______ |__________________
>>> | | |
>>> | | |
>>> | <-WAN Port | <-WAN Port | <-WAN Port
>>> ------------------ ------------------ ------------------
>>> | Broadband | | Broadband | | Broadband |
>>> | Router | | Router | | Router |
>>> ------------------ ------------------ ------------------
>>> LAN Ports | | | | LAN Ports | | | | LAN Ports | | | |
>>> | | | | | | | | | | | |
>>> | | | | | | | | | | | |
>>> 192.168.100.0 /24 192.168.101.0 /24 192.168.102.0 /24
>>
>> There are two 192.168.100/24 nets, which is probably not
>> a good idea.
>
>Actually yeah, that's not a good idea. Typo on my part!
>
>> Best is to randomly assign the third octet of a 192.168 address,
>> or the second and third of a 10.x.y/24 address. If you join a VPN
>> it reduces the change of having to change all the addresses.
>>
>> Otherwise, yes, this is probably the best, and with routers down
>> to $10, a very affordable solution.
>>
>> -- glen
>>
>> -- glen
>>
>
>Yeah, we could get into something like a PIX 515 with a VLAN-capable switch,
>but that would be expensive and unnecessary.
>
>
You could roll your own with a spare PC and a few NIC cards, using
freebsd or linux.. any old pentium box would work, or you could use one
of the soekris boards..
I have a setup similar to this, with 3 lans, and a dsl line.. mapping to
3 static addresses on the dsl side, using freebsd, ipfw, and natd.
--
-- Welcome My Son, Welcome To The Machine --
Bob Vaughan | techie @ tantivy.net |
| P.O. Box 19792, Stanford, Ca 94309 |
-- I am Me, I am only Me, And no one else is Me, What could be simpler? --
|