I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN.

I want to isolate my work PC from accessing my home PC internet use; is there an easy way to acheive this? From what I understand I can isolate my work PC from the network which will effectively hide my home PC's history, what would be the easiest way to do this?

  • 1
    You can effectively create two VLANs, but what makes you think that your work PC can access your home PCs browsing history? – MechMK1 Jul 8 '19 at 17:25
  • 2
    What's your threat model? Your work spying on your personal internet usage through the PC? Something on your home PC compromising your work PC? – Fund Monica's Lawsuit Jul 8 '19 at 19:02
  1. Buy a small OpenWRT router with a WAN ethernet port and LAN wifi and/or LAN ethernet port.

  2. Plug the WAN port of your OpenWRT router on your home network.

  3. Plug your work computer on the LAN port of your small OpenWRT router.

  4. Configure OpenWRT router's firewall with a strict ruleset allowing only internet access and denying every access to your LAN.

And that's it. This is basically the cheapest and simplest solution for a poor-man network isolation ;-) A manageable switch with VLAN support would be the ultimate solution, but the price isn't the same (a small OpenWRT router with dual ethernet and wifi will cost you about 20$).

| improve this answer | |

You may find your home router/access point has this functionality built-in in the form of a Guest Wi-Fi network which is isolated from the rest of your LAN. Take a look at your router's documentation etc.

| improve this answer | |

If you fear that people from your workspace will access your home PC, then VPN with the usual settings does not allow communication between your home network and your workplace's network. When you connect to your workplace with your VPN client, your home network becomes hidden for your computer and people from your workplace cannot access any computer from your home network. It works by design this way. Even if soembody could see your home PC from your workspace, they would not be able to access it unless you have a server application running on it. For example Windows file shares, FTP server, etc. are needed to see anything. And even if they can see these servers they need to guess their password. Ofc. it is possible to monitor traffic, especially if it is not encrypted, but it would be a little bit paranoid to think that your employer would break into your network and spy on you. But if you insist then many routers nowadays have guest network, so you can add your work PC to that and keep everything else on your local network.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.