I hope I can ask this question simply. I have been asked to administer a computer network for a Christian school that has two campuses. There are 32 computers in the computer lab and another 30 computers for teachers and administration at one campus. The network was down and I had to troubleshoot the problem. There were two problems The modem/router was connected to a 4 port router and from there, it went to switches. The router was bad and there was a computer in the computer lab that had to be disconnected. To get everyone back on the network and working I connected the modem/router to the switch and that changed the IP address to 10.1.10.x. The other campus was already wired that way so I left this one the same way. The computer lab has a router that changes the IP Address to 192.168.11.x. I'm trying to make sure that the computer lab is separate from the rest of the computers in the building. I can see that when I search for network attached printers I can't find any, but I can ping them. The main thing I'm trying to prevent is a student from getting a computer in the lab infected and spreading to the teachers network. I was under the impression that if you can't "see" what's connected to the other network, you can't harm it. I'm not so sure now that I know that I can ping it. I would really like to separate the computer lab.
Is there anything I can do to absolutely separate the two networks. I do know which Ethernet cable runs back to the computer lab. Money is a real issue here, so I can't spend very much at all. There are other issued that I would like to discuss too.