UNSOLVED

grayloon

updated

18 years ago

G

grayloon

11 Posts

0

8193

April 29th, 2008 17:00

2748 + VLAN Basics

I'm configuring a small company network as such:

Internet -> T1 router -> PE700/Linux Firewall -> PC2748 Switch -> Servers/Desktops/Printers

 

The firewall has 2 interfaces: eth0 with a public IP + eth1 with 192.168.1.1

The firewall will also do basic internal DNS.

I only have this 1 firewall to work with.

 

I want to set up 2 VLANS:

1 - 192.168.1.x range for desktops + printers

2 - 192.168.2.x range for publicly available servers

 

In this case, would VLAN2 be considered a DMZ? If not, do I need to connect another switch to the firewall and act as a DMZ?

  • bh1633

    909 Posts

    205

    0

    Posted April 30th, 2008 13:00

    You can do this with a single switch.  Put half the ports in vlan 1 and half the ports in vlan 2 and the vlans will not be able to communicate with eachother through the switch.

  • grayloon

    11 Posts

    205

    0

    Posted April 30th, 2008 14:00

    But VLAN's 1 & 2 would be able to communicate with each other by leaving the switch, going out to the internet, and coming back into the switch?
  • DRNO10

    184 Posts

    205

    0

    Posted May 2nd, 2008 15:00

    The may not need to go as far as the internet, depending how your t1 router is configured.