Block a computer from the LAN network

[vertigo262]

I was wondering if there was a way to block a computer from a LAN.

I am using a windows network with AD servers and windows DHCP

I can only think of a couple of scenarios, one would be in the switch level
although I have a dell switch 2848, and I don't see any type of access control in the interface.

The other I would guess would maybe be something with windows ipsec, but I'm not sure.

If anyone knows any ways of doing this, I'd be curious. Weather it be hardware, software, or configurations.

[Rabbit]

Most routers come with mac filtering. Or you could use a proxy server.

[vertigo262]

I'm assuming my router/firewall will block the computer from lan to wan networking, but I don't think it will block a computer from using the internet lan network

[zmbd]

- You've given very little information about your network setup.

- How is the computer you want to block linking into your network.

[vertigo262]

there is a main switch, a dell switch 2848, bringing wires to all the offices, in some offices there are smaller switches.

So I want the ability to be able to see an unwanted computer on the network internally and block the IP or mac address.

Nowmally routers will block lan to wan, but what controls all the internal traffic?

In my mind, the only way to do this is in the main switch, or maybe something in windows IPSEC

[zmbd]

Rabbit has a good basic solution for you and is how I control the small home network (in fact, the router acts as my DHCP and I have rules that block Internet access for anything without a logged MAC, secured the wireless (I don't even let it broadcast), the firewall has a program component that I can install on each authorized PC, and so forth)

SysInternals has some of the better freeware type tools:
http://technet.microsoft.com/en-us/s.../bb795532.aspx is one page for active directory. You can do a search for others there and they have some networking stuff too... and there is some pay-for commercial suites.

Then there is this article http://www.techrepublic.com/blog/fiv...42?tag=nl.e550 mind you it's just one person's opinion

Switches are normally like coax-cable splitters so maybe not so much help... however the managed ones should allow you to at least shunt or kill a specific connection:
http://www.netgear.com/business/prod...e/default.aspx

Much past this and someone with more current understanding than I have will have to help you.