New Use of TP-LINK R460 Router

Dozens of computers in the office building of the unit form a LAN and share the broadband on the Internet. The computers in the network form the same network segment, and each computer allocates a fixed IP address to access the Internet. The network topology 1 shows.
Due to some factors, the network equipment in the network is not of high grade, and some management functions are lacking. Although the network works normally after Internet sharing, management is inconvenient. Not long ago, A colleague from department A asked that their computers could access the Internet, access enterprise OA, VOD, and query the legal system, you must be able to access public resources within the enterprise.
Www.2cto.com
However, unauthorized computers in the enterprise network cannot see their computers in their network neighbors, nor access their computers. To some extent, they can protect their computer information security.
This is a difficult but reasonable requirement! How can we achieve this without increasing funds or equipment?

I think about it, but I cannot find a good solution. I went to department A to ask them how they used to access the Internet. I learned that ADSL was used to access the Internet. The device was the TP-LINK R460 router and H3C S1016R switch, the router is idle.
I am not very familiar with the TP-LINK R460 router, so the router back to the central data center. Find information on the official website, download and read the user manual, and learn about the features of the Broadband Router. The data flow from the LAN to the WAN is not restricted by the router by default, by default, data streams from the WAN to the LAN cannot pass through the router. At the same time, we know that the TP-LINK R460 router also has firewall function. If these features and functions of A vro can be fully utilized, they can meet the special requirements of Department.
Www.2cto.com
Put the TP-LINK R460 router on the front end of the H3C S1016R switch, the WAN port of the router is connected to the wall module (A lanport of the floor switch), and the LAN port of the router is connected to a LAN port of the H3C S1016R switch, as shown in connection 2, the ports are configured as follows:

Vrowan WAN port settings: Select static IP for the connection type, and set the IP address to 192.168.2.19 (same as the cen cidr Block and allocated IP address to 19), subnet mask to 255.255.255.0, and gateway to 192.168.2.1, the address provided by DNS for the operator, as shown in 3.

Router LAN port settings: the IP address is 176.16.1.1, And the subnet mask is 255.255.255.0. The IP address of the computer connected to H3C S1016R is 176.16.1.X (X is 2 ~ 254). The subnet mask is 255.255.255.0, the gateway is 176.16.1.1, And the DNS is the address provided by the operator.
Www.2cto.com
New Use of TP-LINK R460 Router
After the TP-LINK R460 router is added and the proper configuration is made, other computers in the enterprise intranet cannot access the computer in department A through the network neighbors, department A's computers can still access the Internet, access internal enterprise OA servers, and other shared resources, basically meeting the requirements of Department. If you configure the firewall of TP-LINK R460, the Computer Information Security of Department A will be further enhanced.

In this paper, the TP-LINK R460 router is used to meet the requirements of Department A, but the application of the specific environment is obviously not A good way. However, it may be a good attempt to temporarily solve some problems in practical applications when funds and equipment are limited.