How to set up a private LAN

[grimreeper132]

Pretty simple I have two networks which I wanna connect to,

Network 1 is a public network with lots of people using it, many I don't know. and has access to the internet.

Network 2 will be a private LAN which will not have my file servers and printer, maybe other systems as well. Which will not have access to the internet.

The questions are,

A) how do I set network 2 up, do I need something like a router you have at home or can you just use a Ethernet switch. 

B) how do I connect a computer to both network 1 and 2 without connecting the two networks and keeping them separate so people on 1 can't access 2. I imagine windows automatically sets them up this way

 

Network diagram type thingy

 

 

(there is a fast link between main PC and NAS 1 because I only have a 100Mbps switch and that connection will be 1000Mbps,cause that will probably cause issues and isn't as easy to set up as the rest, Also the laptop will be getting switched between networks 1 and 2, so won't be connected to either permanently and will need to sway with no issues, as well as other networks at different location with no issues, and me not needing to set shit up. (both connections to 1 and 2 will be ethernet ones though, cause I can't be bothered dealing with wifi ones, but the laptop will be connecting to other ones through wifi)

 

any extra info needed just ask, I will reply, hopefully quickly

[manikyath]

you set up the second router in a different subnet, and you're done.

[grimreeper132]

Just now, manikyath said:

you set up the second router in a different subnet, and you're done.

is there a way to do it without a router or. As I dinny really want to buy one for it cause me skint

[manikyath]

Just now, grimreeper132 said:

is there a way to do it without a router or. As I dinny really want to buy one for it cause me skint

you can just set up satic IP addresses on all devices and just do with a switch.

[GDRRiley]

2 minutes ago, grimreeper132 said:

is there a way to do it without a router or. As I dinny really want to buy one for it cause me skint

if you have an extra pc you can make a router for free

[grimreeper132]

Just now, manikyath said:

you can just set up satic IP addresses on all devices and just do with a switch.

ok right that is a good idea but the NAS has a web GUI so I can't give it a static without connecting to it first, (yes I know I am being awkward here)

[grimreeper132]

Just now, GDRRiley said:

if you have an extra pc you can make a router for free

aye I could do that, I will look into it and leave it at that at the moment then

[manikyath]

1 minute ago, GDRRiley said:

if you have an extra pc you can make a router for free

at that point.. there's also software you can put on a pc to run in the background and mimic router functionality.

 

besides, all he'd really need is a switch and something that can give out DHCP.

[GDRRiley]

Just now, manikyath said:

at that point.. there's also software you can put on a pc to run in the background and mimic router functionality.

 

besides, all he'd really need is a switch and something that can give out DHCP.

yeah 

[grimreeper132]

5 minutes ago, manikyath said:

at that point.. there's also software you can put on a pc to run in the background and mimic router functionality.

 

besides, all he'd really need is a switch and something that can give out DHCP.

making a router sounds fun, so I maybe will do that cause why not. I can't see a reason why you can't to this so yea, can and how do you turn a basic wifi card into a wifi receiver thingy for the laptop etc.

 

(I wanna try new things as well and so sorta wanna try to do it as I haven't made a router before)

[manikyath]

1 minute ago, grimreeper132 said:

making a router sounds fun, so I maybe will do that cause why not. I can't see a reason why you can't to this so yea, can and how do you turn a basic wifi card into a wifi receiver thingy for the laptop etc.

 

(I wanna try new things as well and so sorta wanna try to do it as I haven't made a router before)

making a router is several layers worth of "not worth it" even if you have some old hardware laying around.

[Dujith]

I would not go with a different subnet as anyone even a bit tech savy can get on your subnet by just changing their ip adress by hand. vlan are the way to go for this BUT you will need a router that supports that and a switch that supports vlans id's

[grimreeper132]

Just now, manikyath said:

making a router is several layers worth of "not worth it" even if you have some old hardware laying around.

I have core2duo systems which can't really be used for much anyways and as I said I sorta wanna as it sounds interesting and fun, or isit too much of a pain in the arse to do

 

2 minutes ago, Dujith said:

I would not go with a different subnet as anyone even a bit tech savy can get on your subnet by just changing their ip adress by hand. vlan are the way to go for this BUT you will need a router that supports that and a switch that supports vlans id's

I thought there was a way to prevent network pass through between the two networks to prevent that

[Dujith]

Just now, grimreeper132 said:

I thought there was a way to prevent network pass through between the two networks to prevent that

Yes, either a router that can provide 2 lans on separate ports and blocks inter lan traffic. Or via the vlan route.

As soon as both subnets are on the same switch you will not have any control over it.

[grimreeper132]

Just now, Dujith said:

Yes, either a router that can provide 2 lans on separate ports and blocks inter lan traffic. Or via the vlan route.

As soon as both subnets are on the same switch you will not have any control over it.

my main PC has 3 ethenet ports (1 on the board and 2 on a Ethernet card, so I can just do it there can't I)

[Lurick]

So long as the only time LAN A to LAN B could touch is through your PC, then you'll probably be alright. If at any point in time the two LANs connect to a common device (eg: switch, router, etc.) then all bets are off on keeping access to LAN B private.

[Dujith]

If you run server software yes, Windows 10 isnt really made for that. It has a internet share option but is pretty limited.

[grimreeper132]

Just now, Lurick said:

So long as the only time LAN A to LAN B could touch is through your PC, then you'll probably be alright. If at any point in time the two LANs connect to a common device (eg: switch, router, etc.) then all bets are off on keeping access to LAN B private.

aye it's only on my main PC using two separate ethernet ports on the same ethernet card

[Lurick]

1 minute ago, grimreeper132 said:

aye it's only on my main PC using two separate ethernet ports on the same ethernet card

Then you setup addresses on the second port, connected to LAN B, and don't put a default gateway on there.

You can either run a DHCP server on the NAS (depending on the software support) and hand out addresses that way, or you have to go in and setup everything with static addresses, or setup another device to act as a router, DHCP server, etc.

[grimreeper132]

Just now, Dujith said:

If you run server software yes, Windows 10 isnt really made for that. It has a internet share option but is pretty limited.

right uuuum I will look into seeing how I can fix that then I think if it's possible

 

[grimreeper132]

Just now, Lurick said:

Then you setup static addresses on the second port, connected to LAN B, and don't put a default gateway.

You can either run a DHCP server on the NAS (depending on the software support) and hand out addresses that way, or you have to go in and setup everything with static addresses, or setup another device to act as a router, DHCP server, etc.

right I will look into working out how to do that when I am actually setting it up then (still a few days away from doing it, I was more seeing if I need to buy anything to do it, and it sounds like getting a cheap router might be a good idea to make life easy

[Dujith]

Just now, grimreeper132 said:

right uuuum I will look into seeing how I can fix that then I think if it's possible

 

Hold a sec

I'm re-reading your post and i think i was looking at this from the wrong side.

You want to connect to 2 existing networks? if so then just plugging them in should work fine.

[Lurick]

1 minute ago, Dujith said:

Hold a sec

I'm re-reading your post and i think i was looking at this from the wrong side.

You want to connect to 2 existing networks? if so then just plugging them in should work fine.

Agreed.

So long as nothing on the Private LAN needs to get out to the internet, then it's pretty easy to setup for the most part, no need for Windows Server  

[grimreeper132]

Just now, Dujith said:

Hold a sec

I'm re-reading your post and i think i was looking at this from the wrong side.

You want to connect to 2 existing networks? if so then just plugging them in should work fine.

I need to make network 2, (that's file servers etc. that I haven't set up yet) but yes, essentially, and good I think. So there is no issues then of connecting the two networks then if I use two different ports on my PC

[grimreeper132]

Just now, Lurick said:

Agreed.

So long as nothing on the Private LAN needs to get out to the internet, then it's pretty easy to setup for the most part.

nah nothing does, guessing I still need a router to connect everything together then (as I have servers with web GUIs rather than ones on a screen (I think that's called a graphical GUI I think, correct me if I  am wrong))