Disable LAN but keep the Internet accessible ?

2011-04-04 4:52 am
Hello people,
My school implemented a new restriction in the networks: disable LAN (meaning that we cannot play LAN games, nor even PING others in LAN but the IPs of computers show that we are still in the same 'LAN') while leaving the Internet accessible.
How is this possibly done ? The following is the rough structure (at least I think it is) of my school network:

Individual computers -(LAN)-> router in each house -> ICT dep. (Where the school proxy lies) -> Internet

Can somebody please tell me or direct me how this can be possible ?
I'm not trying to break this restriction, I'm purely curious in techie stuff.
Thanks in advance !
更新1:

Thanks loads for that speedy replies ! One fact I know is that our computers belong to us thus it is impossible to put firewall rules on our computers. I think it is a configuration of the wireless routers in each house. So there's no way to counter this ? (Again, I'm not interested in doing so because I don't play LAN games but I'd like to know if there's any possibility other than physically hacking the routers) The reason they blocked LAN games was because they thought LAN games would slow down the speed of connecting to outer Internet, is that even true ?

回答 (6)

2011-04-04 4:58 am
✔ 最佳答案
I would think it's probably just a firewall that doesn't allow intra-network communication.

If you want to talk to other computers on your network then you have to go through the router. If the router is disallowing this type of communication then you get the result you described.

I'm not really sure how they set it up to do that, but it's just a matter of configuring the router such that it will route the internet to each computer, allow the computers to send data back (to the internet) but when you try to say ping somebody at 192.168.1.2, this type of communication would be disallowed.

Edit:

No, I'm pretty sure intra-network communications should have no effect on internet speeds.

The only issue, is if it's a large LAN. Basically, the communication has to go through the router, so if the router is busy all of the time, then YES you will see a performance drop.

Basically, your LAN (ethernet) should run at 100Gb speeds (or greater). That's at least 100 times faster than what your internet can provide. So the data being sent shouldn't slow down the network...again, unless you're running like 10 computers through a single router and doing some serious LAN gaming. Then it would likely overwork the router and you get network congestion in the LAN...I think.

So it's not actually the internet that's slowing down, it's just the ability of the router to serve the internet to all of the computers...because it's trying too hard to serve up data for the LAN game.

I would base my final analysis on empirical data. If when y'all are gaming, the network slows down, then I would agree that it's likely the LAN-party that's causing the network congestion.
2011-04-04 4:56 am
Create an access list in which each computer is only allowed to access the internet. You guys are behind a firewall, and the only traffic that the firewall allows through it is that going to the internet.
參考: IT major.
2016-10-27 1:37 pm
he's in search of a psp, no longer computer.... besides.. i imagine you go with a converter, convert it to a commonly used mp3 or maybe with.... and then if want be to a psp format, notwithstanding for music i imagine mp3 works. i imagine you want to remodel video to a psp format. do not bear in mind bought mines...
2011-04-04 7:22 am
LAN chat/messenger/conference is disabled.
=
Used in some auditoriums/wi-fi hot spots/etc for the same effect at on your campus.
-
2011-04-04 5:02 am
There are quite a few different ways. The simplest way is simply to place a firewall rule on each computer that blocks all traffic to or from other computers on the LAN. Another way is to put each computer in its own VLAN and configure the router not to route between VLANs.

Yet another way is to place a firewall rule on each computer that blocks all ARP replies. Then you just statically configure in the router's MAC address. This way, the computer cannot determine the Ethernet hardware address of the other computers on the LAN and so cannot address packets to them on the wire.

Update: Oh, you didn't mention that it was wireless. Wireless access points have an option to disable host-to-host traffic. They've simply enabled this option. And you are right, LAN gaming won't affect Internet access. So whoever disabled it is either misinformed or gave you a lame excuse. But I think you are mistaken. You can't tell if two computers are in the same LAN by looking at their IPs. If they're wired to different routers, odds are they're not in the same LAN at all. (But in two different LANs that use the same IPs.)
2011-04-04 4:53 am
Hook up just your modem.


收錄日期: 2021-04-20 22:17:37
原文連結 [永久失效]:
https://hk.answers.yahoo.com/question/index?qid=20110403205244AAgL7I2

檢視 Wayback Machine 備份