Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have about a Netgear WGR614 router and a few CentreCom FS708 switches.

Is there a way to create a home network so every safe an secure computer can access the internet and another network where I would fix machines that have virus's or machines that I don't want to access the home network.

How would I go about doing this? Or do I need a better router with DD-WRT installed on it?

share|improve this question
    
Why don't you unplug them? –  LaLeX Oct 26 '11 at 6:28
    
If a PC was infected, say with a trojan horse, why would you want to connect that PC to the internet? –  sawdust Oct 26 '11 at 6:34
    
Ah I should better explain myself, I guess that was a bad example. I'm restoring two computers and I'm not sure what could be on my home network, I don't want them to get any virus's or anything else from any other computers on the network. –  Mike Hagstrom Oct 26 '11 at 6:56

3 Answers 3

up vote 2 down vote accepted

The proper way to do this is to have two networks and a firewall to protect the networks from eachother. For example, most computers would be on 192.168.0.0/24, while the under-repair PC's are in the 10.0.0.0/8 network. Since your router doesn't support multiple networks, you could pick one of your PC's to do Internet connection sharing; let's call it Bob. You could also pick up another cheap router to do the same thing and call it Bob as well.

So the 10.0.0.0/8 network would be behind Bob and should be isolated from the other PC's in the network but still able to get out to the Internet after going through two sessions of NAT.

share|improve this answer

That Netgear WGR614 router has a feature called ¨Default DMZ server¨.

DMZ is a special logical zone located between the Internet and your Intranet, I mean your home network.

Theory says that DMZ computers can access the Internet but cannot access the Intranet: Intranet computers can access the Internet and also they can interact with DMZ-located computers (the firewall allow communications DMZ->Intranet when they are answers to questions issued from the Intranet, otherwise traffic originated at DMZ with destination the Intranet is blocked).

So, if you define a default DMZ server address that is located inside your home network address space but

  • is not already assigned to any existing, "good" computer
  • is not included in the DHCP address space

then you can assign that IP address to any virus infected or unreliable computer you are working on, in the knowledge that it will not interact with the rest of the computers at home.

This is easy to do (page 6-8 of the config manual for the router) and you need special HW.

It will give you the chance to have just ONE unreliable computer online, in case you need more than one unreliable computer online, next to the rest of your hardware..... think twice!

Hope this helps, regards.

Alfonso.

share|improve this answer

You could create two subnets in your network. So for example the 'clean' and 'infected' would be on the same physical network, but on two seperate logical networks.
PC 1 IP/Subnet
192.168.0.1/255.255.255.0

PC 2 IP/Subnet
192.168.0.2/255.255.255.128

As always, Wikipedia offers a very good explanation of what subnets are, and how they are used:
http://en.wikipedia.org/wiki/Subnetwork

After a quick Google search I turned up the following link, which could help out in calculating a subnets bits:

http://www.subnet-calculator.com/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.