Secure file and print sharing

By Texaus
Jul 3, 2009
  1. I currently have a 4 pcs networked through inthernet cable and router. All of these pcs share files and printers. I want to put a wireless access point on this network. I want users to be able to use the wireless for internet access only; I do not want them to have access to files on hardwired pcs on network. Is this possible? Preferably I'd like the hardwired pcs to be fully insulated from any nasty that might come in through wireless access point.
  2. raybay

    raybay TS Evangelist Posts: 7,241   +9

    You need a good Network installation manual... available on eBay... takes too much space and time to deal with on this site... but what you want to do is do-able.
  3. Texaus

    Texaus TS Rookie Topic Starter Posts: 50

    Thansk Raybay, I'll look in to that.

    Since my original post I think I've found a simple solution: Basically turn on the Guest account for each hardwired computer and set a password. Each time a shared folder/device is accessed xp will prompt for a password. This will affectively secure my shared files and only grant access to those with the password, correct?

    Not really sure how foolproof this is, or if it will even work. Found it using good ole google. Thoughts anyone?

    Here's a question: Assuming this does work, will the person accessing a shared file have to enter this password multiple times or can it be entered once and access is granted until pc is turned off?
  4. jobeard

    jobeard TS Ambassador Posts: 9,143   +597

    you can use routing to isolate the WiFi from the Wired Lan; if you can't route, then that's better that NTFS perms/WPA or any thing else :)

    like this
    modem --(*WAN*)wired Router#1(x.y.0.1) --- simple 4x switch --- your existing LAN systems (all dhcp from router#1)
               (x.y.0.z)wifi router#2(x.y.1.1) .... wifi connections (getting ip from router#2)
    Each system will have a default route to the closest router
    Configure router#2 to have a gateway of the *wan* (if possible) to ensure no routes to the existing lan. The default gateway from #2 will be #1.

    the inverse setup should also work
    modem --wifi router#2(x.y.1.1) .... wifi connections (getting ip from  (all dhcp from router#1)router#2)
               (x.y.1.z)wired Router#1(x.y.0.1) --- your existing LAN systems
    here the wifi default route will be to the modem -- I think this is the better choice
  5. Texaus

    Texaus TS Rookie Topic Starter Posts: 50

    Thanks Jobeard. Unfortunately, that reads like greek to me! Is this something I should probablly pay a professional for, or can that be simplified (without too much effort on your end) into directions I might be able to follow?

    Here is what I have set-up now:
    DSL modem > Linksys Router
    Out of Linksys router:
    1) 4 pcs networked through ethernet cable
    2) linksys wireless access point
  6. jobeard

    jobeard TS Ambassador Posts: 9,143   +597

    those are just wiring diagrams.
    the only thing to 'configure' is the unique router address and to allow each to be a DHCP server.

    AFTER you have Internet access for everyone (wired + wifi), then add encryption to keep your neighbors off your network.

    here's how to test for isolation;

    1) each system attached to a given router should be able to ping every over system attached to the same router

    2) no system on one router should be able to ping a system on the other router.

    Ping WHAT and how?

    document the ip-address of every system
    use run->cmd and then enter ipconfig
    the reply is the ip-address of that system​
    Once you have the addresses of all systems;

    in that same CMD prompt window enter ping where is the address of some other system

    if you get 'request timed out' then This system can not reach That one.

    if you get Reply from ... then This system can reach That one.
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...