PC isolation ?"

[J741]

I would like to configure multiple computers to access the internet via a broadband internet connection. No problem right, just use any standard SOHO broadband internet router.

The problem is that I do not want the individual computers to be able to access each other. If I plug in a computer to LAN port 1 on the router, and I plug in another computer on LAN port 2 on the router, I do not want the two computers to know about each other; No ping, no packet transfers, no communications at all. I want complete computer isolation, but with outgoing internet access.

Now as I understand it, all currently available SOHO broadband internet routers have a standard multi-port network switch on the LAN side which is then connected to the router's processor before the WAN port. Now it seems to me that this would mean that all computers attached to the LAN side of the SOHO router would have an unfiltered, direct connection between them (which is not what I want).

So does anyone know of an inexpensive broadband internet router which can completely isolate or filter each physical port on the LAN side?

- James.


My memory is not as good as it should be, and neither is my memory.

I have forgotten more than I can remember

 

[J741]

So does no one have any ideas about this?

My memory is not as good as it should be, and neither is my memory.

I have forgotten more than I can remember

 

[bcastner]

IPSEC

 

[bcastner]

SP SP2 would also be advised to block pings.
Most decent firewalls would permit this as well.
You can shut things down pretty effectively.

 

[J741]

Thanks Bill, but not quite appropriate for our situation.

Our situation is one where we are a small PC service company. Customer's often bring their computers to us infected with virii. Normally we use a boot CD with ati-virus software which is updated weekly to scan the PCs before attaching them to the internet to do the Windows Updates, and other processes which require internet connectivity. Now on a work bench where 10 or more computers are connected to the internet via our broadband internet router and a network switch, if an employee forgets to do scan a computer for virii prior to connection, or if our virus scanner does not detect something new, it is currently very easy for all connected computers to be affected. This is what I am trying to avoid.

- James.

My memory is not as good as it should be, and neither is my memory.

I have forgotten more than I can remember

 

[jasonswan]

Private VLANs or PVLAN port isolation will do that for you.

http://jason.swan.net