RE: what's best way to allow a part of ip range to access lan server ?

["David Gillett" <gillettdavid () fhda edu>]

  No, but since these ranges are on the same subnet, it might be the
only option.  One of the justifications for splitting a network into
subnets/VLANs is to segregate machines with different security 
requirements....

David Gillett


> -----Original Message-----
> From: FM [mailto:dist-list () LEXUM UMontreal CA]
> Sent: Wednesday, December 01, 2004 8:16 AM
> To: Mailing List Security-Basic
> Subject: what's best way to allow a part of ip range to access lan
> server ?
>
>
> our stations have their IP with DHCP (using MAC address).
> 192.168.x.50 -- 192.168.x.134
>
>
> Other station (laptop from customer) received a ip from a range of :
> 192.168.x.135 -- 192.168.x.253
>
> I'd like to disallow access from those stations to our lan server.
>
> is host-allow the best way / easy way  ?
>
> thanks !