I maintain a small LAN (192.168.1.0/24
) on which we have several untrusted machines, where the users of those machines have administrative rights or are able to connect their own machines to the network.
The server is also on that network (192.168.1.200
) and I need to prevent an IP conflict from taking down network services when the user sets his machine's IP the same as the server (possibly maliciously).
I've though about breaking the netowrk into two (something like 192.168.1.0/25
and 192.168.1.128/25
).
What's the best way to keep services up?