+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, Computer Science Lab in Technical; I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and ...
  1. #1

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10

    Computer Science Lab

    I am setting up a Computer Science Lab with 19 standalone PCs. The room will have its own server and network, the computers will be unsecures so they will have access to control panel etc. They will have python and scratch installed on the PCs, but I do want the students to have access to the internet. How can i do this without them also having access to other parts of the curriculum network?

    Many thanks
    Sean

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109
    Do you have VLANs in place? If you haven't just don't set a default gateway. If you have block them at your firewall or use ACLs on your switches.

  3. #3

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    No we don't have any VLANs. Don't set a default gateway on the PC or the switch?

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,007
    Thank Post
    124
    Thanked 286 Times in 263 Posts
    Rep Power
    109
    On the PC.

  5. #5
    MordyT's Avatar
    Join Date
    Sep 2012
    Location
    In a computer
    Posts
    506
    Thank Post
    44
    Thanked 75 Times in 70 Posts
    Rep Power
    22
    That isn't really security though. A smart student will just static on in...

    You need a firewall or switch and a vlan.

  6. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226
    ^ That. You'll be attracting (based on course content) the very kids who can go "oh, gateway is missing, I'll just add it".

    Not to mention the other shenanigans they'll get up to in the spirit of "What happens if I.......?"

    Using a VLAN is the easiest method.

  7. #7

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    6,069
    Thank Post
    902
    Thanked 1,013 Times in 825 Posts
    Blog Entries
    9
    Rep Power
    350
    Set up a hardware firewall/router to join this separate LAN to your existing LAN only allowing traffic through on Port 80 redirected to your proxy server. An old PC with a couple of NIC's running Linux should do it. I'd also think about using something like Deep Freeze on the PC's so any configuration changes students make in the control panel, etc, are lost on reboot.

  8. #8

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Thanks for the advice guys, but I have got a old 3Com 4200 switch to use for this which doesn't allow for VLANS.

  9. #9


    Join Date
    May 2009
    Posts
    3,396
    Thank Post
    301
    Thanked 917 Times in 684 Posts
    Rep Power
    346
    If you have an old PC with two network ports you could set it up as a firewall. There are several ready rolled linux distributions to choose from.

  10. #10

    Join Date
    Mar 2010
    Location
    Gloucestershire
    Posts
    189
    Thank Post
    23
    Thanked 3 Times in 3 Posts
    Rep Power
    10
    Cheers mate, do you know of any good documents on how to set this up?

  11. #11


    Join Date
    May 2009
    Posts
    3,396
    Thank Post
    301
    Thanked 917 Times in 684 Posts
    Rep Power
    346
    It's quite a few years since I used the open source smoothwall, but it was reasonably easy to set up. Physically, you are just putting the firewall between the switch and your network and routing any traffic from the lab straight to your main firewall (and then out to the big bad internet).



SHARE:
+ Post New Thread

Similar Threads

  1. Khan Academy: Computer Science
    By DaveP in forum Links
    Replies: 0
    Last Post: 15th August 2012, 07:46 PM
  2. Replies: 6
    Last Post: 11th July 2012, 04:51 PM
  3. Computer Science in Wales
    By garethedmondson in forum General Chat
    Replies: 0
    Last Post: 22nd June 2012, 03:52 PM
  4. Replies: 1
    Last Post: 26th March 2012, 05:03 PM
  5. Replies: 0
    Last Post: 31st October 2010, 04:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •