VOIP and internet access

[alitster]

I've been tasked with desiging a network to allow users internet and VOIP services.

The users will each have one network connection to their rooms, from there they'll have a VOIP phone with a mini switch built in to allow them to hang a computer off the back. We've got a universal subscriber gateway that allows users access to the internet, they have to register to be allowed access, and then we've got a SIP proxy server.

One concer I have is that a registered user could run a http proxy on their machine and allow users to access the internet through their computer.

My question is how can you prevent unregisted users from accessing registered users machine but also all for the option of SIP.

There are four options we're offering:

No Service - They plug anything in and they get a sign up page

Internet

VOIP

Internet + VOIP

I think we are going to have to separate the internet and VOIP traffic using VLAN's or something?

Regards,

Alan

[k.poplitz]

The only thing I can think of that would allow you to deny the non-registerd users is to use a MAC address access-list. I think you have to have bridging or IRB configured for that to work though.