0

The problem:

Family members use the A network with their devices; I want to connect a Single board computer (SBC) to the internet, but i can not compromise the private network. If my server is taken over, things can go ugly.

Possible scenarios:

Guest Wifi It Would be possible to use the guest wifi network with port forwarding , where the pool of addresses is not shared and i can't find the other machines by running nmap -sP 192.168.1.1/24 ;

The downside is limited speeds when i would prefer to have full blown 150 mbps with ethernet cable (All this assuming the router has secured this functionality, some haven't); price: wifi dongle 10$

DMZ This one would be obvious for what i've been reading, if i was using wifi on the SBC, but the problem arises when i connect the eth cable, magically i can see everyone in the network again with the router i'm using; price: Don't know any cheap home grade router with real DMZ capabilities when using eth.

Defining 2 different subnets This would set apart the different networks, hopefully not allowing devices from each to connect between them. Unfortunately my router is a crappy one full of limitations imposed by the ISP, not giving me routing options; price: 30$-50$ Any cheap router with routing capabilities

Run a Virtual Machine Not practical considering the SBC has a weak A20 processor under the hood.

One of the reasons i'm trying to configure the setting on my own (instead of buying an hosting account) is to learn, so if i have made any incorrect assumptions above in my statements, please correct me. Thank you!

6
  • 1
    You could get a second router that you connect to the first. Then you connect the SBC to the first router and everything else in your home to the second.
    – Tesseract
    Aug 16, 2017 at 20:42
  • 1
    The only way to have an isolated network is to have two networks. One connected to the internet and one that isn't
    – Ramhound
    Aug 16, 2017 at 20:48
  • @SpiderPig Didn't thought of that, and it seems a good option. Any downsides to this approach you suggest? Maybe bottle necking the speeds for the whole family, but they don't need it fast anyway!
    – Souza
    Aug 16, 2017 at 20:48
  • @Ramhound I understand that, but is there any option that would make things a little bit more secure, and still have a doorway (port 80 at least) to the internet?
    – Souza
    Aug 16, 2017 at 20:50
  • Why should that bottleneck the speed? As long as the second router is not a really slow and cheap model it should be fine.
    – Tesseract
    Aug 16, 2017 at 20:50

0

You must log in to answer this question.