Board index Linux Networking

Dialup access to local LAN but not Internet ??

Dialup access to local LAN but not Internet ??

Post by Denni » Wed, 21 Jun 2000 04:00:00



Hi all...

Is it possible to setup a single Linux PPP Dialup server to allows access to
our company LAN but not allow "selective" users access to route to the
internet ?

This my be a requirement for staff/studnts that should have access to there
email but are not allowed to use the company dialup service as there ISP.

Other users, eg.. management, will need full acces to the LAN and the
Internet.

Does anyone have any idea's on how this might be accomplished on a single
Linux dialup server ?

Thanks
Dennis

 
 
 
Top

Dialup access to local LAN but not Internet ??

Post by Stephan Effert » Wed, 21 Jun 2000 04:00:00




Quote:> Hi all...

> Is it possible to setup a single Linux PPP Dialup server to allows access
to
> our company LAN but not allow "selective" users access to route to the
> internet ?

> This my be a requirement for staff/studnts that should have access to
there
> email but are not allowed to use the company dialup service as there ISP.

> Other users, eg.. management, will need full acces to the LAN and the
> Internet.

> Does anyone have any idea's on how this might be accomplished on a single
> Linux dialup server ?

> Thanks
> Dennis

Hi Dennis,

I think you can make it this way:

Assign a default ip for the remote client (lets say its 192.168.254.254).
Any client calling your dial-in server gets this ip assigned. For this ip
define ipchain-rules to disable access to the Internet.

For those user how need full access make them use a different ip (disable
dynamic ip assigned on the client) and define appropriate ipchain rule.

Use chap user identification to be able to bind username/password to
specific ip's. If you use pap there's no way to make sure that a student's
username/password is not used in conjuntion with one of those special ip's.

Students are only told username and password.  They get an ipaddress
assigned.
The managers get a username/password  and  a _special ipaddress_ .

Untested, but should work.

best regards,
Stephan

 
 
 
Top

1. Can someone answer some question on setting up a small home lan and dialup internet access

Hi,

I have a few questions for those in the know on Solaris 2.6 x86. I
have been trying to setup a small home base lan and dialup internet
access. The lan is peer-to-peer with two other win95 machines.

1) If I use an ip address like 192.168.0.1 for my main host named
'gateway' and 192.68.0.2 for my notebook named 'thinkpad', 192.168.0.3
for my other workstation named 'kidsroom' how do I setup a dynamically
assigned ip address for the main host 'gateway' on the dialup side?

2) Does my main host machine have to be named the smae as my login
name I use for my dialup internet access?

3) How do I use my host file to list the other peer-to-peer clients
and still have DNS for the internet?

4) Why does my modem dial when the system is booting up, even before I
log into the system?

5) Why does the modem dial but then either looses the connect for
fails to log into my internet provider?

6) Is there a way to find out what chat script I should use for
uswest.net?

7) Where do I place my logiun name and password for my ISP?

8) Because I am trying to use a small lan, will the system send the
login name I use for the lan to my ISP, which is different than my ISP
login name?

I have read a lot of the messages here and learn quite a bit, but also
manage to get quite confused in other areas. I went to stokely.com and
the same happen there. Is there a file or program that will configure
these things, prompt for settings, then edit the necessary files?

Why does SUN claim to be the network computer company, but make it so
hard to configure a workstation for dialup internet access? I mean how
many home computers out there have hayes compatable modems on com2?
Probably most of them.

I realize they offer their services to corporations that employ
brilliant network administators, but as a end user I find it very
frustrating to setup their products. I might sound dumb here so bare
with me, but one would think if they are really trying to gain market
share against Microsoft, one would think they could at lease make the
PPP interface easy to setup. I think this is why OS/2 never caught on
as a main stream OS, it was to hard to setup devices. Microsoft makes
it easy, granted they aren't dealing with the complexities of scaling
and power SUN and other UNIX OS companies tackle. I bet this is the
main reason WIN NT is gaining market share, the interfaces make it
more appealing than the cryptic commands found in Solaris.

James

2. how do I disable Zmailer version display

3. Setting Up Small Lan and Dialup Internet Access

4. URGENT: Help! Need to add Apache Server Extension

5. Need Help RH5.2, Lans and Dialup Internet Access

6. OS5: Increased buffer cache size -> not enough low buffers?

7. small local Lan seeks internet access!

8. Librerie C

9. determine throughput from LAN to Internet, Durchsatz vom LAN ins Internet berechnen

10. Lan <=> Linux PPP dialup <=> Internet, is this possible?

11. Sharing dialup internet connection over lan?

12. Please Recommend Easiest OS to Share One Internet Dialup for Home LAN

13. Local Network DNS and dialup Internet problems


All times are UTC
Board index