Keep Computers Seperate On Same Network

Question

I have about a Netgear WGR614 router and a few CentreCom FS708 switches.

Is there a way to create a home network so every safe an secure computer can access the internet and another network where I would fix machines that have virus's or machines that I don't want to access the home network.

How would I go about doing this? Or do I need a better router with DD-WRT installed on it?

Answer 1

The proper way to do this is to have two networks and a firewall to protect the networks from eachother. For example, most computers would be on 192.168.0.0/24, while the under-repair PC's are in the 10.0.0.0/8 network. Since your router doesn't support multiple networks, you could pick one of your PC's to do Internet connection sharing; let's call it Bob. You could also pick up another cheap router to do the same thing and call it Bob as well.

So the 10.0.0.0/8 network would be behind Bob and should be isolated from the other PC's in the network but still able to get out to the Internet after going through two sessions of NAT.

Answer 2

You could create two subnets in your network. So for example the 'clean' and 'infected' would be on the same physical network, but on two seperate logical networks.
PC 1 IP/Subnet
192.168.0.1/255.255.255.0

PC 2 IP/Subnet
192.168.0.2/255.255.255.128

As always, Wikipedia offers a very good explanation of what subnets are, and how they are used:
http://en.wikipedia.org/wiki/Subnetwork

After a quick Google search I turned up the following link, which could help out in calculating a subnets bits:

http://www.subnet-calculator.com/