Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I administer a small network (10 users). I'm getting ready to deploy a internal webapp that will be hosted and accessed locally only. There are about 10 users on the network (, a win2k3 server, apache (RHEL), and Mysql (RHEL), and various miscellaneous peripheries. I'd like to isolate the apache and sql boxes into a seperate area of the lan to keep things easier to maintain/grow.

I've been reading about vlans, subnets, etc.. I'm not clear, however, which would be the best solution for our setup. Thanks for any tips and or advice.

share|improve this question
up vote 0 down vote accepted

It sounds like you're trying to completely section off the web app from the rest of the network. If that's the case, a VLAN is probably what you want – it will give you a firm line between your webapp network and the regular network.

Subnets would give you a far more permeable barrier. Going that route would still allow the machines to talk to each other – with a bit of difficulty.

share|improve this answer
Thanks. Yes, I would like to segment the web apps from the rest of the network, but have them still accessible. The web apps will only be used locally- not external access. – stormdrain Apr 7 '10 at 17:14
So, yes, it sounds like you want a VLAN. It will require people who need to access the webapp to re-connect to a separate network, but I think you're saying that's what you want? – joeybaker Apr 9 '10 at 16:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.