Configure two different networks to our ADSL broadband

Hello,
Today we have a network with ip-pool 192.168.0.0 to our local LAN and our
ADSL modem having and dynamic ip from our ISP.
We are now planning to take in one company within office but we don't want
them to access our network "192.168.0.0", they should only be able to access
their own network (example 192.168.123.0) and the internet!
Can someone please help me how I can setup this two network so they can't
connect between the two different network's!?
We don't have the money to buy firewalls but if there is enough we routers,
switch, etc.. it would be greate!!

// Kenneth

If your ISP can provide at least two IP addresses, then you can connect the
modem to a cheap switch and then connect a NAT router for each network to
the switch and use one public IP for one network and the other public IP for
the other network. Another possibility is to use a switch that can do port
isolation such as the HP Procurve 2512 which can be purchased used on Ebay
for around $200. Port isolation is not easy for novice users to setup
however and you would have to use a NAT router that can be configured with
route tables since you would be using the same default gateway for two
different networks which can work but a static route would need to be added
to the router to forward traffic from the other network [that is not the
same lan network as the router] back to it via the lan side IP of the
router. I believe there are routers that can provide internet access and
have isolated ports on the lan side but I am not aware of a particular model
offhand and the cost. Maybe someone else will have advice on that. --- Steve


"news" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
> Today we have a network with ip-pool 192.168.0.0 to our local LAN and our
> ADSL modem having and dynamic ip from our ISP.
> We are now planning to take in one company within office but we don't want
> them to access our network "192.168.0.0", they should only be able to
> access
> their own network (example 192.168.123.0) and the internet!
> Can someone please help me how I can setup this two network so they can't
> connect between the two different network's!?
> We don't have the money to buy firewalls but if there is enough we
> routers,
> switch, etc.. it would be greate!!
>
> // Kenneth
>
>

"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:eP%(E-Mail Removed)...
> If your ISP can provide at least two IP addresses, then you can connect
the
> modem to a cheap switch and then connect a NAT router for each network to
> the switch and use one public IP for one network and the other public IP
for
> the other network. Another possibility is to use a switch that can do port
> isolation such as the HP Procurve 2512 which can be purchased used on Ebay

The simplest thing there is to just split the switch into "two switches"
with VLANs. Many switches are VLAN capable. I did this in a situtation where
I had machines in a particular part of a building where half the machines
were inside our private system and half were on the public side of the
system, but I only had one switch to use. I just create two VLANs on the
switch and plugged each "half" into the proper network, then plugged the
machines each into their proper "half" of the switch.

It has been done away with since then, but worked fine at the time.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Thanks for your answer.
I will now try' it and get back to you is I have any questions!!

// Kenneth


"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:eP%(E-Mail Removed)...
> > If your ISP can provide at least two IP addresses, then you can connect
> the
> > modem to a cheap switch and then connect a NAT router for each network
to
> > the switch and use one public IP for one network and the other public IP
> for
> > the other network. Another possibility is to use a switch that can do
port
> > isolation such as the HP Procurve 2512 which can be purchased used on
Ebay
>
> The simplest thing there is to just split the switch into "two switches"
> with VLANs. Many switches are VLAN capable. I did this in a situtation
where
> I had machines in a particular part of a building where half the machines
> were inside our private system and half were on the public side of the
> system, but I only had one switch to use. I just create two VLANs on the
> switch and plugged each "half" into the proper network, then plugged the
> machines each into their proper "half" of the switch.
>
> It has been done away with since then, but worked fine at the time.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>