I have a DIR-655, with all the security stuff enabled, WLAN partition, no routing between the zones, WPA, NAT (both options for it---enabled) SPI enabled, etc etc... Just the other day I started sharing my internet connection with a neighbor. We ran a 25 meter ethernet cable from one of my LAN ports to his Dell PC with XP Media Center edition. I run a mac. He told me just recently he's been having trouble with viruses/malware, but he thinks now he has it taken care of. I run the latest version of Mac OSX with the firewall set to the strictest---block all incoming connections--all file sharing services are disabled as a result). I don't want to take any chances, but I still want to offer my internet connection for him to use, unless separating our traffic is out of the question or ends up costing too much. I now know from the help of another member on here, that the LAN ports on the back of the router are interconnected, that this router does not allow LAN segments. So me being on the wireless and him being on the LAN, our traffic is not separated, our computers are actually connected... So does anyone know any switch or other network device, or any way whatsoever to isolate traffic, to where he can still have his wired connection from my main connection, and I can be on wired or wireless and be completely separate from his? To, create like 2 virtual connections from my single network connection? Anything I can do so I can be assured I'm not going to be getting any isolated packets of data, malware, or anything from his side of things by being connected to my network.
Author
Topic: Sharing Network with a neighbor---how to separate network: LAN segment or VLAN? (Read 2833 times)