Hello,

I have a PowerConnect 3348 that I am need to configure with multiple vlans to seperate out the domain controllers, web server and SQL servers.

Here is what I need:

All servers need to access the Domain Controllers for Authentication and DNS queries.  The web servers need to have port 80 and 443 accessible to all workstations.   The SQL servers only need to be accessible from the web servers on port 1433.  The web server computers will have dual network cards on both VLAN 3 and VLAN 4.

VLAN 2 - Domain Controllers

  ip address 192.168.1.1

  service-acl input vlan2

exit

VLAN 3 - Web Servers

  ip address 192.168.2.1

  service-acl input vlan3

exit

VLAN 4 - SQL Servers and internal adapter of web servers

  ip address 192.168.3.1

  service-acl input vlan4

exit

 

ip access-list vlan2

  permit any any any

exit

ip access-list vlan3

  permit-tcp any any 192.168.2.0 0.0.0.255 80

  permit-tcp any any 192.168.2.0 0.0.0.255 443

exit

ip access-list vlan4

  permit-tcp 192.168.2.0 0.0.0.255 any 192.168.3.0 0.0.0.255 1433

exit

 

After entering the above and assigning the appropriate port to the correct vlan I still cannot access anything across the vlans.  There is a single workstation on VLAN 1 for configuring the device and the ip address of the device is 192.168.0.2, with a default-gateway of 192.168.0.1 which will be my external router.

Also, what ports do I need to open up to allow authentication to the domain controllers from the web servers and/or SQL servers?

Any help would be appreciated.

Thanks,

Brandon