How do I point my browser to a specific NIC on my machine

Question

I am on a local area network that has no external access to the internet. However I have been tasked to find a way to allow certain machines to access the web (HTTP, HTTPS, etc) via a wireless card on their laptop. So my question is, is there a way to tell the browser which NIC it should be using. Such as setting up IE for the local LAN, and say FireFox for the WAN? The browser setup doesn't really matter all that much just that one browser is LAN only and one browser is WAN only.

Solution 1

It's rather question of routing. Default route through WiFi, while route with your local LAN mask through Ethernet.

Assuming, that WiFi card has IP 12.34.56.78 and Eth card 192.168.1.123 you'd have routing table something like:

Network Address   Netmask          Gateway Address  Interface       Metric
0.0.0.0           0.0.0.0          12.34.56.1       12.34.56.78     1
192.168.1.0       255.255.255.0    192.168.1.1      192.168.1.123   1

See MS KB article on basic routing.

Solution 2

What kind of environment are we talking about? The problem here is introducing an internet connected host practically bridged into your isolated local network. I doubt finding a way to access the internet included uncontrolled access from those machines across both networks at the same time?

If the wifi-connected clients gets compromised or even just slightly misconfigured you'd open up the entire local network for grabs depending on its configuration (do you use domain isolation and require ipsec and isolate all clients from eachother?).

It sounds better to just set up a firewall (and/or a proxy as suggested) on the local network that allow whatever http traffic you need for the specific clients only. That way you're still in control.

But if not, then I'd simply disconnect the client from the local network and only use the internet-facing wifi when needed - with no local network access available. That'd feel a tiny bit more secure if it was me anyway. The local client firewall could be configured to lock things down when not connected to the domain/local network. It's still scary though ^^

Solution 3

You don't tell the browser, this is done at OS level.

Just make sure there is a gateway specified for the wireless card in the TCP/IP settings and not for the Ethernet card.

That way it'll route LAN traffic over the Ethernet and anything it doesn't know about over the wireless.

Solution 4

Nathan is right about it being OS level. Can you not instead put a proxy server in place? That's one of the big main purposes for them.

Solution 5

This is really a routing question ... Just make sure the default route is set for the wireless gateway

View more solutions

Comments

[John Saunders]

Do you even need to make the default route through the WiFi? If the WiFi has the route to the Internet, and the LAN does not, then the WiFi should be chosen as the path for any IP address on the Internet, shouldn't it?

[Misha Narinsky]

You meant like some magical auto-discovery? I'm not sure how well would that work. With static routing there's no need for guessing.

[Sumeet Kashyap]

+1 - this sounds like a management-imposed security failure. If the wireless isn't properly locked down and a malicious person gets onto it, they can then hack one of the clients and get onto the network which isn't connected to the internet. You'd be better off banning wireless and having a proper firewall and/or proxy on the wired network.