Internet only in selected classrooms

Hi,

All our classrooms need continous access to the student's domain
controller (with DHCP, DNS etc...), and in addition, internet access
*only when needed*.

How can we avoid connecting ALL classrooms to the internet once the
gateway cable is connected to the domain controller net in one of the
classrooms?

The router / firewall IP is on the same subnet as the domain controller.
A small sketch of a similar system is available here (with separate
switches for internet and domain controller):

http://www.kuntigi.net/download/ClassroomLAN.jpg

Connecting / disconnecting the internet for classrooms would be by
connecting /disconnecting the blue connection in each classroom in the
above sketch.

I'm aware that this could probably be achieved by setting a gigabit
router in the domain controller cable for each classroom, but I hoped to
avoid the cost of this. The sketch' 'Domain controller subnet switch'
is a Linksys SRW2016.

Thanks if someone have some bright ideas and suggestions ;-)

/geir

I hope this is a school project and not a real world problem. Re-design this
and make it administratively easy for you and transparent to the end user.
Use a proxy server to control the internet access. You're trying to separate
"policy" by using a switch and dual connections to the access layer, always
a bad idea.


"Geir Holmavatn" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> All our classrooms need continous access to the student's domain
> controller (with DHCP, DNS etc...), and in addition, internet access
> *only when needed*.
>
> How can we avoid connecting ALL classrooms to the internet once the
> gateway cable is connected to the domain controller net in one of the
> classrooms?
>
> The router / firewall IP is on the same subnet as the domain controller.
> A small sketch of a similar system is available here (with separate
> switches for internet and domain controller):
>
> http://www.kuntigi.net/download/ClassroomLAN.jpg
>
> Connecting / disconnecting the internet for classrooms would be by
> connecting /disconnecting the blue connection in each classroom in the
> above sketch.
>
> I'm aware that this could probably be achieved by setting a gigabit
> router in the domain controller cable for each classroom, but I hoped to
> avoid the cost of this. The sketch' 'Domain controller subnet switch'
> is a Linksys SRW2016.
>
> Thanks if someone have some bright ideas and suggestions ;-)
>
> /geir

Actually is you just want a on/off switch for internet access, and aren't
concerned about bandwidth monitoring/student activity then the setup is
really easy.

You do not want to be plugging or unplugging cables!!! Get a managed switch.
You identify which port is connected to which class. Its just a matter to
telnet into the switch from anywhere and enable/disable the classroom
connected port.

You set dhcp to give the student pcs ip which have the gateway set for the
internet router. If enabled at the internet switch they get internet. If
not enabled they don't get internet.