Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm setting up a PC & Phone network, and want to ensure that the PC's do not use the Phones internet connection.

Is it possible to setup a Group policy statement ensuring they don't use the phones internet connection?

share|improve this question
Dupe:… @MikeT505: Edit your existing question rather than opening a new one, please. – Evan Anderson Dec 3 '09 at 19:06
Merged duplicate into original - editing your question should give it a bump for added visibility, exactly as if you'd asked a new question. So it's a win-win! – Kara Marfia Dec 3 '09 at 20:48
up vote 1 down vote accepted

If you don't need any communcation between the "phone network" and the "PC network" just put the client devices and their servers/routers in different VLANs and be done with it.

In your dupe question you mention prioritization of traffic. Unless you've got serious amounts of traffic you'll be able to get by fine on a small network running 100Mb or gigabit Ethernet w/o any prioritization of VoIP traffic. When you get into lower bandwidth links, or high network bandwidth utilization overall, you'll start to need to worry about prioritization.


If you need communication between the networks you're going to need a router with interfaces in both VLANs, then.

It could be a layer 3 entity on an Ethernet switch (if you have at least one layer 3 capable switch), or it could be one of your edge routers.

Keeping the phones and phone servers using their own Internet connection and the PC's using theirs is really pretty easy-- that only depends on having the right default gateway set on those devices.

Each edge router should also have a static route to the "other network" (via whatever router you decide to route between the networks with) and then you'll have communication between the VLANs.

share|improve this answer
We need the phone server and the PC's to communicate unfortunately. – MikeT505 Dec 3 '09 at 19:17
I'll drop on a short edit. – Evan Anderson Dec 3 '09 at 19:33

I think we need to know a bit about your setup. If the phones and PCs eventually go the same router , and you have multiple internet connections on the router, you could put the PCs in a different ip network and use a route-map to do source based routing (if your router is a cisco device, although other routers can do that too).

If you have different routers, just set the default gateway on the PCs to use the router you want them to use. And if you really want to be sure, put an Access Control List on the phone router not to allow traffic from the PC network.

share|improve this answer

What is the reasoning behind having any shared network resources? My first instinct would be to put the phones and the computers on completely separate networks, then you don't have to worry about prioritization because they don't compete for any resources and there is no way they can go out through the wrong router. If you need them on the same network for some reason then the trick is going to be to make sure that they have different default routes. Phones should have a default route through the phone router, computers should have a default route through the computer router. You can do this by statically assigning routers, or by using DHCP groups to hand out the right configs to the right devices.

share|improve this answer
Thanks Catherine, would I just setup a new Scope in SBS 2008, for the different DHCP group? *Query - how would the phones know which scope to go for? – MikeT505 Dec 3 '09 at 19:53
Unfortunately I am more familiar with Unix DHCP then Windows DHCP. The basic concept is that you create two scopes with different router options. Then you take advantage of the vendor-class-identifier string in the DHCP request to separate your computers and your phones into two classes. You then allow the scopes to answer queries only from the "right" class. I can't imagine it is impossible to do in Windows, but I also can't tell you exactly how. Hope that helps. – Catherine MacInnes Dec 3 '09 at 21:42
Thanks Catherine :-) That made it much easier to understand! – MikeT505 Dec 4 '09 at 0:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.