+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, Computer Science Lab in Technical; I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10

    Computer Science Lab

    I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and network, the computers will be unsecures so they will have access to control panel etc. They will have python and scratch installed on the PCs, but I do want the students to have access to the internet. How can i do this without them also having access to other parts of the curriculum network?

    Many thanks
    Sean

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,013
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    108
    Do you have VLANs in place? If you haven't just don't set a default gateway. If you have block them at your firewall or use ACLs on your switches.

  3. #3

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    No we don't have any VLANs. Don't set a default gateway on the PC or the switch?

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,013
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    108
    On the PC.

  5. #5
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    483
    Thank Post
    44
    Thanked 74 Times in 69 Posts
    Rep Power
    21
    That isn't really security though. A smart student will just static on in...

    You need a firewall or switch and a vlan.

  6. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,649
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224
    ^ That. You'll be attracting (based on course content) the very kids who can go "oh, gateway is missing, I'll just add it".

    Not to mention the other shenanigans they'll get up to in the spirit of "What happens if I.......?"

    Using a VLAN is the easiest method.

  7. #7

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,707
    Thank Post
    855
    Thanked 901 Times in 746 Posts
    Blog Entries
    9
    Rep Power
    329
    Set up a hardware firewall/router to join this separate LAN to your existing LAN only allowing traffic through on Port 80 redirected to your proxy server. An old PC with a couple of NIC's running Linux should do it. I'd also think about using something like Deep Freeze on the PC's so any configuration changes students make in the control panel, etc, are lost on reboot.

  8. #8

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Thanks for the advice guys, but I have got a old 3Com 4200 switch to use for this which doesn't allow for VLANS.

  9. #9


    Join Date
    May 2009
    Posts
    3,127
    Thank Post
    276
    Thanked 843 Times in 634 Posts
    Rep Power
    333
    If you have an old PC with two network ports you could set it up as a firewall. There are several ready rolled linux distributions to choose from.

  10. #10

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Cheers mate, do you know of any good documents on how to set this up?

  11. #11


    Join Date
    May 2009
    Posts
    3,127
    Thank Post
    276
    Thanked 843 Times in 634 Posts
    Rep Power
    333
    It's quite a few years since I used the open source smoothwall, but it was reasonably easy to set up. Physically, you are just putting the firewall between the switch and your network and routing any traffic from the lab straight to your main firewall (and then out to the big bad internet).

SHARE:
+ Post New Thread

Similar Threads

  1. Khan Academy: Computer Science
    By DaveP in forum Links
    Replies: 0
    Last Post: 15th August 2012, 06:46 PM
  2. Replies: 6
    Last Post: 11th July 2012, 03:51 PM
  3. Computer Science in Wales
    By garethedmondson in forum General Chat
    Replies: 0
    Last Post: 22nd June 2012, 02:52 PM
  4. Replies: 1
    Last Post: 26th March 2012, 04:03 PM
  5. Replies: 0
    Last Post: 31st October 2010, 03:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •