How can I add computer to network, but not allow internet?

Trojan76

Honorable
Jan 13, 2014
6
0
10,510
Ok, I have a home wireless network and I need to add another computer, however I do not want this computer to have internet access.This newest computer is close to the router and a cable connection would be fine. I just don't know much about networking. A colleague told me to run a static ip address and not allow it to enter the default gateway but I have not done either of these before. Any helps or links would be great for this newbie.
 
Solution
If your other computers are on the internet and you are connecting the computer you will be using for video to that network with those computers, that computer is also vulnerable to attack. Viruses get to one system then try to get to every other system on the network. You have to know pretty well how to "harden" a system from attack even if it's not on the internet, but is connected to others that are.

Why do you want that isolated system even on the same network? You may want to think about setting up two switches. One is the router with internet connection hooked up to your modem. Then a switch that is internal to the house (not on the other router or modem). If you need to share files to the isolated system, hook up the...

Urumiko

Distinguished
Dec 28, 2013
505
0
19,160
Theres a few ways you could potentially do this.
Could you explain a little more what you are trying to achieve?
What do you still want it to be able to do once you block the internet.
Do you want it to be beyond the wit of a family member to bypass it. etc
Also what router do you have this may or may not have useful features for this.?
 

Trojan76

Honorable
Jan 13, 2014
6
0
10,510
I am a videographer and need to ingest tape to digital. I have learned over the years the best way to do this without any dropped frames is to have ABSOLUTELY nothing running in background, including firewalls, antivirus and internet. That said, I have setup a desktop in my office that will be solely for ingesting so its not about security, I have another desktop next to it and run around the house with 2 laptops. the ingesting laptop needs to network with the other computers and I typically use a 50' cable for speed to accomplish this. I also have backup drives connected, so basically this ingesting desktop needs to be networked to my other machines but not have internet access so I can leave it free of firewalls and antivirus programs.

Router is a Actiontec MI424WR used with my Verizon.
 
Your router should allow access lists via MAC addresses. You can get the mac address of that computer by dropping to a command prompt and typing in

ipconfig /all

You will see your network card along with it's IP address and MAC (physical address). login to your router's admin page and find where to use this mac address to block it.
 

Urumiko

Distinguished
Dec 28, 2013
505
0
19,160
I understand your desire to avoid software antivirus etc, I think you would be best acheiving what you want by actually leaving the windows firewall turned on, you can use this to block all traffic except local network traffic and restrict down ports if you need to.
It will be more important to kill services such as search indexer, and windows update i would have thought...

To be honest if you are not going on the net with that pc as long as you have a strong password and antivirus etc on the other pc's you should be ok.

Other options would be a basic router with access lists etc.. as in intermediate firewall device



 
If your other computers are on the internet and you are connecting the computer you will be using for video to that network with those computers, that computer is also vulnerable to attack. Viruses get to one system then try to get to every other system on the network. You have to know pretty well how to "harden" a system from attack even if it's not on the internet, but is connected to others that are.

Why do you want that isolated system even on the same network? You may want to think about setting up two switches. One is the router with internet connection hooked up to your modem. Then a switch that is internal to the house (not on the other router or modem). If you need to share files to the isolated system, hook up the computer to that other system. Keep in mind the risk (although small) of a virus hopping to it even over that connection. You can also turn off the virus protection on the system when it's in use only, after you disconnect it from the internet.

 
Solution