+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, Computer Science Lab in Technical; I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9

    Computer Science Lab

    I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and network, the computers will be unsecures so they will have access to control panel etc. They will have python and scratch installed on the PCs, but I do want the students to have access to the internet. How can i do this without them also having access to other parts of the curriculum network?

    Many thanks
    Sean

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,998
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106
    Do you have VLANs in place? If you haven't just don't set a default gateway. If you have block them at your firewall or use ACLs on your switches.

  3. #3

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9
    No we don't have any VLANs. Don't set a default gateway on the PC or the switch?

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,998
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106
    On the PC.

  5. #5
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    420
    Thank Post
    43
    Thanked 66 Times in 61 Posts
    Rep Power
    18
    That isn't really security though. A smart student will just static on in...

    You need a firewall or switch and a vlan.

  6. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,628
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    ^ That. You'll be attracting (based on course content) the very kids who can go "oh, gateway is missing, I'll just add it".

    Not to mention the other shenanigans they'll get up to in the spirit of "What happens if I.......?"

    Using a VLAN is the easiest method.

  7. #7

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,618
    Thank Post
    845
    Thanked 881 Times in 731 Posts
    Blog Entries
    9
    Rep Power
    326
    Set up a hardware firewall/router to join this separate LAN to your existing LAN only allowing traffic through on Port 80 redirected to your proxy server. An old PC with a couple of NIC's running Linux should do it. I'd also think about using something like Deep Freeze on the PC's so any configuration changes students make in the control panel, etc, are lost on reboot.

  8. #8

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9
    Thanks for the advice guys, but I have got a old 3Com 4200 switch to use for this which doesn't allow for VLANS.

  9. #9


    Join Date
    May 2009
    Posts
    2,916
    Thank Post
    259
    Thanked 771 Times in 586 Posts
    Rep Power
    270
    If you have an old PC with two network ports you could set it up as a firewall. There are several ready rolled linux distributions to choose from.

  10. #10

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    152
    Thank Post
    20
    Thanked 3 Times in 3 Posts
    Rep Power
    9
    Cheers mate, do you know of any good documents on how to set this up?

  11. #11


    Join Date
    May 2009
    Posts
    2,916
    Thank Post
    259
    Thanked 771 Times in 586 Posts
    Rep Power
    270
    It's quite a few years since I used the open source smoothwall, but it was reasonably easy to set up. Physically, you are just putting the firewall between the switch and your network and routing any traffic from the lab straight to your main firewall (and then out to the big bad internet).

SHARE:
+ Post New Thread

Similar Threads

  1. Khan Academy: Computer Science
    By DaveP in forum Links
    Replies: 0
    Last Post: 15th August 2012, 06:46 PM
  2. Replies: 6
    Last Post: 11th July 2012, 03:51 PM
  3. Computer Science in Wales
    By garethedmondson in forum General Chat
    Replies: 0
    Last Post: 22nd June 2012, 02:52 PM
  4. Replies: 1
    Last Post: 26th March 2012, 04:03 PM
  5. Replies: 0
    Last Post: 31st October 2010, 03:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •