isolate an IP Address

[Guest]

[ekelley]

So I was wondering if it was possible on the Green network to isolate 1 IP Address. I want it so it cannot talk to any other systems on the green network or servers and the only thing it can get to is the Internet. Has anyone tried this and if so how did you configure it??

Thank you
Eric

[dda]

Sounds like you need to put it in another zone.

[kieronrob]

Hi,

I agree with dda - why not put the machine into the Orange (DMZ) zone? You can then use the interzone firewall to allow machines from the green zone to access it but block access from it to the green network.

[ekelley]

I agree I have all my zones filled! I have my servers on my orange zone and Blue is my Wireless network.

Ok so maybe you guys can give me a suggestion here is what I have going on this is a small office-
 
I have my green network that connects to a switch that is connected to few more systems and then connects to another switch that connects to 3 more systems that I want to isolate. I was thinking about putting a router in place instead of the second switch and maybe give that an ip address that is isolated. I don't have a managed switch with L3 so vlans could be a issue and I cannot run lines. I do have a small ddwrt router that I can use any suggestions are welcome! I have thought of different things but just cant decide.  



What do you guys think??

Eric

[ekelley]

dropbox.com/s/m0rsyb1jseiedfc/network.JPG