<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"Brush Script MT";
panose-1:3 6 8 2 4 4 6 7 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:windowtext'>Good morning all,<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>My plan is to have the laptop hardwired into a docking station, at least I assume they are going to be sending me a docking station.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>The router is an ASUS RT-AC68U with the latest update applied. I suspect that it can create a separate LAN for the laptop.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>My current theory is that a network switch (as opposed to a hub) placed between the cable modem and the router with three connections (the cable modem, router and laptop) will provide the security that I want, an extra port (which I also need) and a very easy setup for the cost of a switch that was sitting in my cabinet gathering dust.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>If this solution isn’t as secure or has some other issues that in my ignorance I’m unaware of please let me know.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>Andy<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='color:windowtext'>From:</span></b><span style='color:windowtext'> Hidden-discuss <hidden-discuss-bounces@lists.hidden-tech.net> <b>On Behalf Of </b>Donald M Stevens via Hidden-discuss<br><b>Sent:</b> Sunday, March 03, 2019 8:15 AM<br><b>To:</b> Aaron E-J <the@otherrealm.org><br><b>Cc:</b> hidden-discuss@lists.hidden-tech.net<br><b>Subject:</b> Re: [Hidden-tech] Separate lan for company laptop<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:windowtext'>Good morning andy,<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>If your current router offers WiFi, you could just use the company laptop, connect to your home WiFi “Guest” network, then your business laptop will have access to the internet, but not anything on your internal network. (of course you won’t be able to print to your home network printer if you have one).<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>The “Guest” WiFi network be default on most routers works this way.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>Can you post the make / model of your home router? That will give us some idea of the options you might have. (unless you don’t want anyone to know that)<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>Are you planning on connecting your work laptop with a wire and not wireless?<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'>There may also be an option for DMZ, this allows you to create an area where you laptop can sit, outsiders like your work, will have access, your business laptop will have internet access, but no access to the rest of your home network.<o:p></o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:14.0pt;font-family:"Brush Script MT";color:windowtext'>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:14.0pt;font-family:"Brush Script MT";color:windowtext'>Don<o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:16.0pt;color:#002060'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span style='font-size:16.0pt;color:#002060'>TFI Technologies<o:p></o:p></span></b></p><p class=MsoNormal><i><span style='font-size:14.0pt;color:#002060'>“we are here to help you….”<o:p></o:p></span></i></p><p class=MsoNormal><span style='color:#002060'>329 Pease Road<o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>East Longmeadow, MA 01028<o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>Office: 413.308.4511</span><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#222222'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>Cell / Text: 860.614.4153<o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>Email:</span><span style='color:#212121'> <a href="mailto:dstevens@tryandfindit.com">dstevens@tryandfindit.com</a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>LinkedIn:</span><span style='font-size:12.0pt;color:windowtext'> </span><span style='color:windowtext'><a href="https://www.linkedin.com/in/don-stevens-504aa6b?lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_contact_details%3Bzo%2BD4wDfQ%2FCDVF26QLPsXw%3D%3D"><span style='font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#4034B0;border:none windowtext 1.0pt;padding:0in;background:white'>linkedin.com/in/don-stevens-504aa6b</span></a><o:p></o:p></span></p><p class=MsoNormal><span style='color:#002060'>Skype: tryandfindit<o:p></o:p></span></p><p class=MsoNormal><span style='color:#212121'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='color:windowtext'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='color:windowtext'>From:</span></b><span style='color:windowtext'> Hidden-discuss <<a href="mailto:hidden-discuss-bounces@lists.hidden-tech.net">hidden-discuss-bounces@lists.hidden-tech.net</a>> <b>On Behalf Of </b>Aaron E-J via Hidden-discuss<br><b>Sent:</b> Saturday, March 02, 2019 10:22 PM<br><b>To:</b> <a href="mailto:hidden-discuss@lists.hidden-tech.net">hidden-discuss@lists.hidden-tech.net</a><br><b>Subject:</b> Re: [Hidden-tech] Separate lan for company laptop<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-family:"Times New Roman",serif'>Most routers have the ability to set up a guest network (I know that Netgear does and I think that other companies have similar things). If you login to the router, look for something that has 'guest' or 'subnet" in its name, enable it and uncheck "Allow guest to access My Local Network" (at least that is what you do on Netgear). I would keep a firewall in place though, because the firewall is mainly preventing malicious incoming traffic from getting in. There isn't much that you can do to prevent them from knowing that things are coming from the same place unless you set up a VPN but placing your work computer in a different subnet will allow you to share files in your personal network without risking it being seen by your employer.</span><o:p></o:p></p><pre>Aaron E-J<o:p></o:p></pre><pre>The Other Realm LLC<o:p></o:p></pre><pre><a href="http://otherrealm.org">http://otherrealm.org</a><o:p></o:p></pre><pre><a href="http://theotherrealm.org">http://theotherrealm.org</a> (Blog)<o:p></o:p></pre><div><p class=MsoNormal>On 2019-03-02 5:46 PM, Andy Klapper via Hidden-discuss wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I’ve spent a lot of time working remotely for various companies but I just got a new job where I am being issued a company laptop (in the past I’ve been a consultant and provided my own hardware). Because this is company hardware they can put anything they want on the laptop and I not only have zero say on it but they don’t even have to tell me what they put on the laptop. I would like to structure my home network so that this laptop sits outside of the firewall that surrounds my home network. How do I go about doing that? Is it as simple as putting a small inexpensive router between my cable modem and my primary house router? Do I need to do more to secure my home network from my foreign hardware?<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Thanks,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Andy.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Andy Klapper<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Asgard Technology Group, LLC<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Making Complex Software Simple<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="mailto:AndyTK@Asgard-Tech.com">AndyTK@Asgard-Tech.com</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>(860) 805-1189 (cell)<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><pre>_______________________________________________<o:p></o:p></pre><pre>Hidden-discuss mailing list - home page: <a href="http://www.hidden-tech.net">http://www.hidden-tech.net</a><o:p></o:p></pre><pre><a href="mailto:Hidden-discuss@lists.hidden-tech.net">Hidden-discuss@lists.hidden-tech.net</a><o:p></o:p></pre><pre><o:p> </o:p></pre><pre>You are receiving this because you are on the Hidden-Tech Discussion list.<o:p></o:p></pre><pre>If you would like to change your list preferences, Go to the Members<o:p></o:p></pre><pre>page on the Hidden Tech Web site.<o:p></o:p></pre><pre><a href="http://www.hidden-tech.net/members">http://www.hidden-tech.net/members</a><o:p></o:p></pre></blockquote><p class=MsoNormal><o:p> </o:p></p></div></body></html>