Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I a computer on my local network that I want to have accessible from any computer on the local network as well as from the internet, but I don't want it to be able to connect to other computers. I plan on giving access to this computer to an "untrusted" party, but I don't want them meandering all over my local network. Is this possible? I need windows solutions.

share|improve this question
up vote 1 down vote accepted

You would:

  1. Get a router/switch infrastructure that supports VLANs and routing
  2. Tag the computer off to its own broadcast domain -- i.e. set the switch port to tag all incoming traffic
  3. Set your LAN up as VLAN 0 -- i.e. untagged
  4. Set the untrusted computer up on its own network - for ex
  5. Your LAN should be its own existing network -
  6. Set the router up to NAT traffic from and out to the Internet
  7. Set the router up to allow packets creating connections from (private LAN) into (untrusted LAN) but not vice versa.
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .