I have about a Netgear WGR614 router and a few CentreCom FS708 switches.

Is there a way to create a home network so every safe an secure computer can access the internet and another network where I would fix machines that have virus's or machines that I don't want to access the home network.

How would I go about doing this? Or do I need a better router with DD-WRT installed on it?

  • Why don't you unplug them?
    – LaLeX
    Oct 26, 2011 at 6:28
  • If a PC was infected, say with a trojan horse, why would you want to connect that PC to the internet?
    – sawdust
    Oct 26, 2011 at 6:34
  • Ah I should better explain myself, I guess that was a bad example. I'm restoring two computers and I'm not sure what could be on my home network, I don't want them to get any virus's or anything else from any other computers on the network. Oct 26, 2011 at 6:56

3 Answers 3


The proper way to do this is to have two networks and a firewall to protect the networks from eachother. For example, most computers would be on, while the under-repair PC's are in the network. Since your router doesn't support multiple networks, you could pick one of your PC's to do Internet connection sharing; let's call it Bob. You could also pick up another cheap router to do the same thing and call it Bob as well.

So the network would be behind Bob and should be isolated from the other PC's in the network but still able to get out to the Internet after going through two sessions of NAT.


That Netgear WGR614 router has a feature called ¨Default DMZ server¨.

DMZ is a special logical zone located between the Internet and your Intranet, I mean your home network.

Theory says that DMZ computers can access the Internet but cannot access the Intranet: Intranet computers can access the Internet and also they can interact with DMZ-located computers (the firewall allow communications DMZ->Intranet when they are answers to questions issued from the Intranet, otherwise traffic originated at DMZ with destination the Intranet is blocked).

So, if you define a default DMZ server address that is located inside your home network address space but

  • is not already assigned to any existing, "good" computer
  • is not included in the DHCP address space

then you can assign that IP address to any virus infected or unreliable computer you are working on, in the knowledge that it will not interact with the rest of the computers at home.

This is easy to do (page 6-8 of the config manual for the router) and you need special HW.

It will give you the chance to have just ONE unreliable computer online, in case you need more than one unreliable computer online, next to the rest of your hardware..... think twice!

Hope this helps, regards.



You could create two subnets in your network. So for example the 'clean' and 'infected' would be on the same physical network, but on two seperate logical networks.
PC 1 IP/Subnet

PC 2 IP/Subnet

As always, Wikipedia offers a very good explanation of what subnets are, and how they are used:

After a quick Google search I turned up the following link, which could help out in calculating a subnets bits:


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .