Sunday, July 26, 2009

On a C Class network, how many DHCP servers would be required if using 2 subnets?

I will have 2 departments. One department needs to be able to access an internal website, which the other department is not allowed to access. How can it be set up for one department to access the site, while the other department has access denied?

On a C Class network, how many DHCP servers would be required if using 2 subnets?
If you want to denied access on few department, all you have to do is configuring your Web Server to receive request only from department that have access.
Reply:You can use 1 DHCP server for multiple subnets.





This could be done by adding an ACL or Access Control List to the router that limits one of the subnet's access to the internal site.





Or you could set up 2 Vlans on a switch and put the department that can access the site on one Vlan and the other department on another.





-Dweebs On Duty
Reply:woa rather than using DHCP servers u should use a serverbased ACL on that subnet dude honeslty moving ur DHCP config to support access to a webserver isn't ideal.


If ur using Apache u can use simple directoy directives


%26lt;directory%26gt;


deny all


allow 172.16.32.xxx


%26lt;/directory%26gt;





if ur using IIS use whatever feature they provide for that. =)


and a DHCP server can serve 2 subnets


with only 2 subnets on a Class C the people who set up the net should have just made 2 vlans rather than 2 subnets. =)
Reply:I can't do your homework for you, but a few things you can look into:





If you want to block them at the network level:





- DHCP servers (One server can serve more than one subnet, but you will have to look into how)


- Ip Addressing, Routing, and Subnet masks.





Once you have basic handle on these things, you should be able to see how ip addresses can be assigned to the two different groups such that you can distinguish between the machines in them, and grant or deny access accordingly.





If you want to go the password protection route:





Assign passwords only to those you need to give access to...


No comments:

Post a Comment