[macpo]

Hello,
I work for a company that has a small office network. Its basically 5 desktops all in the same workgroup that can see and share each others files. We run services for the building next door (coffee shop) and they would like to share our wireless signal to provide public wireless internet (wifi). How would I go about keeping our private business file sharing in tact while blocking all public access from the wifi users?

Here is a detailed configuration..
Private Business network has..
5 desktops (two running windows 7, two running Vista, one running XP)

Our networking equipment..
Comcast Cable Modem, that plugs into -
Linksys 4 port Router (no wireless, couple printers connected to this), that plugs into -
8 Port Switch (computers connected to this)
DLINK 4 port wifi router (connected to 8 port switch)

So far I have changed the DLINK wifi router to be at 192.168.2.1 (while our private computers are at 192.168.1.1) but I can still access the shared files if I type in the IP address of the other computers.

Thanks for any insight. :wave:

 

[2xg]

Hi macpo and welcome to TSF!

I would enable password protect on all your computers, by default on Windows and Vista they shd be password protected but you may always check the settings.

1.In the Sharing and Discovery section of the Network and Sharing Center window, click the down arrow next to Password protected sharing.

2.Within the Password protected sharing settings, make sure password protected sharing is on.

 

[macpo]

passwords will work great! Thanks 2xgrump. Is there a way to automate the login so they don't have to type it everytime? I also have a networked backup drive (Dlink 323). Any thoughts on how to lock down access to that?

 

[2xg]

If it's password protected they'll have to type in the password, you might try giving one Admin permission locally as a test and see if this helps.

As for your backup drive, you may only give access to the people that are going to access the drive and the rest that are not permissable won't be able to access it.

You can do a lot more restrictions if you have a Domain Controller using a GPO (Group Policy Objects). Maybe, something to think about in the near future :grin:

 

[macpo]

Another question, couldn't I just change the subnet for the router providing the wifi? Wouldn't that restrict access to my private network that is on a different subnet?

 

[johnwill]

Changing the subnet is not really protection.

I'd do it with two routers. The router that is directly connected to the ISP connection is used to provide wireless service to the "public" connection. A second router is connect to the primary router and it services the "secure" network.