Its my first post on serverfault and my first time to setup this kind of network, so my apologies in advance if it is not well formed.
I'm planning a small (education center) network that has about 20-30 windows Student PCs, tablets and employee laptops.
- create two security zones which separate students and employees. Students have restricted (denied) internet access. employees can see all.
- ghost a windows image to all the student PCs
- keep track of student files
- serve student resources via a web server
- Use FOG to ghost a windows image and maintain and update the student PCs.
- Use Samba to centralize student files (their isn't much of them). Plan to have one general login for all students, then write a script and gui that uses dirsyncpro to sync student files to their own subdirectory.
- use apache to serve web resources.
I'm not really sure how to go about making a restricted zone for the students. My guess is that I need to set up 2 subnets for students and employees, but I'm not sure how to serve both of them. Do I just have to configure my services to listen to both subnets? Would I need 2 NICs for this? Is it correct to call my server a gateway in this case? I'm thinking the structure should look something like this:
Internet | Modem | Router | | | | Ubuntu Server Employee Employee etc.. | Router | | | Student student etc...
I this a good way to go about it? or can I implement the subnets somehow that its all on the same router. I have never used subnets or iptables before, but it's something I'm trying to learn while doing this.
Afterwards, I'm going to admin it all remotely via ssh or VPN
Edit: I forgot to mention that we're not in a position to invest into windows servers. I Know I will miss out on the benefits of Active directory, but wouldn't it be great to find a linux sulution for windows client administration?
Thanks in advance,