• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 356
  • Last Modified:

How do I prohibit unauthorized computers in our network / prevent getting IP

We need to secure our internal network so that unauthorized (non company) computers cannot connect to Internet / Shares / etc. Is there a way to do this in Windows Small Business 2008 server?
1 Solution
Setup a seperate vlan on your router for a guest network.
AgrippaSenior IT ConsultantAuthor Commented:
But how does that prevent the new computer from getting an IP from the already existing LAN? The "intruder" patches his / her laptop on a free ethernet socket and receives IP settings. That is what we need to prevent.
you'd need some sort of dynamic vlaning dhcp software. It would allow access to internal network resources only to mac addresses on your vlan allowed list, and either deny, or just internet to everything not on your allowed list.

this is alot of management, and not easily implimented. good luck
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

You could always just set up an audit log and then have you notified through email.

AgrippaSenior IT ConsultantAuthor Commented:
I thought there would be a more simple solution in the standard options of the MS SBS server software. Ik have called with some IT friends of mine and they suggested reserving IP adresses on the DHCP scope OR allowing only verified MAC adresses on the network switch (manageable switch).

Maybe someone has other suggestions?
setup a dhcp server
and share ips just among trusted  mac address.

all macs out of your list wont get conneceted to your networl
AgrippaSenior IT ConsultantAuthor Commented:
Hello Nickt25,

is there somewhere a special feature to make a list of trusted macs?
create a reservation for an individual MAC address have to be manually
if you have an small organization.
is  a good solution.
and if is a a big organization will be a lot of work do this manually
is the only way i can think at this moment.
i dont know at this point any 3 party software that make this for you

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now