شبکه من!!!

[Lisa Rose]

Interesting point and tompology, i would really use a VLan capable switch, along with a squid server.
This way i have master two devices only with small acl files. then i would use wccp on the witch/router or
have the connection straight to the squid and do the filtering there.
i would use some Samba server (could be the same machine with with squid) and limit the users for not
chaning there network settings or do file sharing etc.
even a L2 switch would do it i gues incase i have some user policy set on each client.

اقای NetMaster
اونجوری که فهمیدم یعنی شما پیشنهادتون اینه که دیگه Subnet و scope تعریف نکنم. و از ISA Server استفاده نکنم؟ ونیز (با توجه به نقشه) بجای روتر از VLan capable switch استفاده کنم و تمام سویچهای هر اتاق را به این سویج وصل کنم و بعد VLan capable switch را به یک squid server ای که Samba server هم باشه،وصل کنم ولیمیتیشن را انجا انجام دهم؟؟.... درسته...؟؟

با توجه به اینکه فرمودید Samba serve کار محدودیت واینا را انجام میده وبا توجه به شبکه من که هر اتاق
حداکثر 10 سیستم داره ٍ، میتوان بجای Samba server از ISA Server استفاده کرد؟

با تشکر

[NetMaster]

Sure you can do it with ISA,if you can administor ISA.

Simplicity is what i am trying to advice, since you have more GUI otions in ISA

Using IP Tables for security along with Squid maybe more advanced, but at least there are no turn arrounds

to be more honest, i didn't work with ISA in advanced mode, and idon't support it, this is why i don't advice it

Good Luck

[Lisa Rose]

من جند تا سوال دارم میخواهم دونه دونه تایید یا عدم تایید انرا بدانم اگه ممکنه:

1- منظور شما از Samba server نصب لینوکس میباشد؟

2- با این شرحی که دادید یعنی اگر از VLan capable سویچ استفاده کنم دیگه نیازی به ساختن و تعریف Subnet و scope
ها مختلف نیست؟

3- VLan capable سویچ چه قابلیتهایی دارد؟

4- در نهایت هر دو روش این درسته: (لطفا تایید بفرمایید تا خیالم راحت بشه)
که سرور مرکزی من Windows2000 Advanced Server باشه و از ISA Server در ان نصب کنم.
یا
سرور مرکزی من لینوکس باشه (یعنی Samba server) و در آن squid server نصب کنم؟

با تشکر

[Lisa Rose]

no idea!!!

[NetMaster]

I am sorry that i was away... and didn't read your question!

Ok, So you need a VLAN when you have to seperate lan segments from each other on the same switch

this way you make sure that they are seperated.

Use a Domain controller with some group policy to make sure what you wnt to allow your users to use

Since you well need routing between your lan's then you need a router, this maybe either on the switch

or on the Domain controller.

Your domain controller, maybe windows or linux, then from your router/domain controller you may set

the permition for users on what to access and when to access as well as how to access.

[Lisa Rose]

I completely catch you all.. Thanks for your help and support