Need help with configuring a particular setting on SF300-08

Question

I work for a small business and we have a couple computers that we want to share a ethernet enabled copier/printer with, but for security reasons want to block those computers from internet access.  How would one go about allowing that?
Thanks in advance,
Mark Davis

Answer 1

Hello Mark,
I can't support the netopia router/modem, but I would think there should be an admin guide for the configuration. If it is a modem/router and you said there is rules for allowing or blocking services, which sounds like access list you should be able to create a rule for the client you want to block on the modem/router to prevent it from talking to the internet.
If you want to insure no outside security threats can make it to the computer staticly assign an IP address but don't give it a default gateway address. The client will not be able to talk to any other network but its own. It sounds like you only have one vlan or a flat network so this should work, but if you need to be able to have this computer in the future talk to other networks internally then it isn't a viable solution. Blocking at the modem/router would be the only solution.
The SG300-08 Switch you could setup an ACL to block that client from talking to the modem/router, but the potential for causing valid traffic from being blocked in your own network grows.
To create this rule you would first
go to Access Control
Create a MAC Base ACL (give it a meaning full name)
Create 2 a MAC BASE ACE
Rule 1
Priority 10
Action Deny
Destination Any
Source User Defined
MAC address of client wanting to be blocked
Apply
Rule 2
Priority 20
Action Permit
Destination Any
Source Any
Apply
Bind the ACL to a port
Make sure to only bind the ACL to the port that connects to the router/modem.
Cisco Small Business Support Center
Randy Manthey
CCNA, CCNA - Security