1
For simplicity, let's say my network looks like this:
[Internet/Modem]
|
[Standard home wi-fi Router]
|
[Windows/Mac PCs] [NAS Drive] [XBOX] [Printer]
As it is set up now, everyone can talk to each other and the internet, but I'd like to restrict it as follows:
- The PCs should not be able to talk to the XBOX
- The XBOX should not be able to talk to the Printer or the PCs
- The NAS drive and the Printer should not have internet access and should not be able to initiate a connection to any device on the network.
Trying to figure out how to do this, I've been looking at routers, managed switches, smart switches, VPN firewalls, unmanaged plus switches, etc. and I'm suffering from information overload without enough of the right keywords to search for what I need.
What is a typical way to configure these kind of communication flow policies for a small home/office network?
2You don’t do this in SOHO. Simple as that. For this to work, devices need to be on physically separate networks. A router with a firewall will do the rest. – Daniel B – 2014-11-10T21:20:02.290
Sorry, I'm a noob and it doesn't seem as simple as that. Is this not a more secure configuration? Regarding "physically separate networks" - will a router with the ability to create VLANs suffice? Which devices go in each VLAN if so? Regarding "a router with a firewall" doing the rest, my router has a firewall installed, but I don't see any options for controlling communication flow between different vlans. What kind of router and firewall are you referring to? I've seen so many different types of router and firewall devices out there...looking here for help to get started. – None – 2014-11-11T01:48:12.740
Secure, huh. I’d say it’s borderline paranoid. Yes, port-based VLANs would certainly do the job, though your router won’t do this unless loaded with some aftermarket firmware like OpenWrt. – Daniel B – 2014-11-11T06:22:58.163