DHCP and single IP Address scopes

[John Smith]

Hi,

Just a little background: we have a network that provides access to the
internet for our students. A Windows 2000 server provides proxy and DHCP
services. There is a D-link router to provide internet access. Port
blocking is set up in the router to mandate that students use the proxy
server. Students connect to this network and get an ip address from the
server that has a subnet mask of 255.255.255.0.

Example
IP Address: 192.168.0.125
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.1

However, in the interest of providing security against viruses, I would like
to prevent the client computers on this network from being able to talk to
each other. What I would like to have happen is that each client computer
gets an IP address with a subnet mask 255.2555.255.255 and a gateway address
the same as the IP address. (Much like what happens with RAS and VPN.)

Example:
IP Address: 192.168.0.125
Subnet Mask: 255.255.255.255
Default Gateway: 192.168.0.125

I tried to create this in DHCP, but the smallest subnet mask I could create
was 255.255.255.254, which allowed two IP address per mask.

Does anyone know if DHCP or RAS can do this?

Thanks

John

 

[Doug Sherman [MVP]]

You cannot do this with DHCP. In fact, you cannot even manually configure
an ethernet adapter with a 255.255.255.255 mask. If you managed to do this,
clients would not be able to reach the proxy server.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[John Smith]

Is there anyway to configure the client machine to only talk to the server,
and not be able to talk to other client machines?

John