Re: [OT] ish Router Advice (dual network isolation)

["Tim Hawes" <timsyahoo@xxxxxxxxxxxxxx>]

Kevin,

I haven't tried it myself, but have been reading a lot on the Draytek
site. I also couldn't find your specific router, but found one close
to it and found this half way down on the following page:
http://www.draytek.co.uk/products/vigor2910.html

Virtual LAN (VLAN)
The Vigor 2910's VLAN facility enables you to segment each of the
router's four RJ45 Ethernet ports, so that each is a separate virtual
LAN. You can create VLAN groups which include or exclude any of the
ports so that groups, departments and companies can communicate with
each other, or not. For example, two companies could share the same
broadband feed, without having access to each other's networks. For
more details of VLAN, see here. For the wireless models, wireless
VLANs can also be specified, with groups common/exclusive to wired and
wireless clients.

It seems to offer what you were looking for - totally separate networks :-)

The "see here" link was dead for me but maybe the FAQ/VFAQ would
have
some more info.

HTH,

Tim.
(p.s. how's your wireless range from the Vigor?)


On 6/2/07, Kevin Hawkins <lists@xxxxxxx> wrote:
> Having never needed so far to do this before... I'll ask...
>
> I have a visitor staying for a few months who would like to use the
> internet and has a couple of PC's / devices . I would like to
> 'absolutely' isolate my home intranet from his by putting him on a
> totally separate subnet such that he can't see or access any of my
> devices (and vv)  but so he can still access the internet via my cable
> connection. He wont have physical access to my wired segment but he
> would prefer his own wired segment to wireless.  He's quite
technically
> savvy and so well capable of altering his configured Ip or subnet to
> broaden it so can I do this securely using fairly standard routers and
> switches - or do I need a specific dual network interface type ?
>
> Current setup: I have a cable modem which attaches to a Vigor 2900VG
and
> then I distribute to either some NetGear FSM726S managed switches or
> Dell PowerConnect 2724 Managed switches.  I use WiFi from the 2900VG
> too. I use NAT provided by the cable router and I do have a spare
> Linksys router BEFSR41 if that helps.
>
> If he want's VPN does that cause an issue ?
>
>  K