1711 Router to isolate two different networks

[utoyo]

I've got a 1711 modular access router and I am wondering if it would be possible to use a port on the 4 port switch in the device to isolate another network from the network connected to another port but both networks still have access to the interenet. The reason for doing this is that we are going to have someone renting an office but want to provide internet access but prevent them from accessing our network. (The 1711 connects to DSL and then one of the ports on the switch connects to larger switches which the machines connect to.)

Is this possible?
Would there be a better way to do it?

Thanks in advance.

 

[voltron1011]

I don't know enough about the 1711 specifically, but most DSL access routers only allow one network behind it. The built in 4 port switch is only there to connect several devices in the same network. You would need to get a 2600 series that has 2 ethernet interfaces to do that. You can probably find one for pretty cheap on Ebay.

 

[watchguardmonkey]

simple put a secondary IP on your LAN interface, this will be for the new network, then config a an access list blocking the new network from hte old one.

 

[JOAMON]

It has a four port switch built in, you could probably do something with VLANS also.

 

[utoyo]

Watchguardmonkey, so you mean I should put a secondary IP on one of the switch ports that I'm not using?

Thanks.

 

[watchguardmonkey]

no you put the secondary Ip on the ethernet interface, so you have something like;

interface e0
ip 10.10.10.1 255.255.255.0
ip 192.168.1.1 255.255.255.0 secondary

then define and access-list blocking the 192 network from the 10.10.10. network