I have a Cisco ASA 5505 that is right now servicing 30 or so machines all on 10.10.0.X.
I want to segregate a few of these machines to a VLAN, so that they can't initiate traffic to all the other computers that aren't part of the restricted VLAN.
Computers that are not part of the segregrated group should still be able to initiate connections with the segregated machines.
So this is pretty much like a DMZ except I am hoping that I don't have to put the segregated machines on a different subnet.
Is this possible or do I need to have each VLAN on a different subnet?
Please excuse my novice status with this stuff. I'm trying to learn.