Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a network set up as shown in the diagram below:

Internet --> Router --> Managed Switch 1 --> Switch -> C1 and C2
                    |                  |--> Multiple PCs
                    |
                    |-> Managed Switch 2 --> Multiple PCs
                    |-> Managed Switch 3 --> Multiple PCs
                    |-> Managed Switch 4 --> Multiple PCs

If the crappy diagram doesn't make sense, there is a router connected 4 managed switches. Off the first switch, one port goes to an unmanaged switch with 2 computers behind it. I need to isolate these computers (C1 and C2 in the diagram) from the other computers on the LAN while also allowing internet to both C1, C2 and the rest of the LAN.

My first thought was to create a VLAN on the managed switch which C1 and C2 are behind. The VLAN would create 3 groupings, C1+C2, the rest of the machines on that switch, and the uplink port. I could successfully isolate C1+C2 from the rest of that switch but the uplink port would leave them open to the other 3 managed switches.

So I'm thinking the isolation needs to be done from the router but don't know where to go from there. What is the proper way to accomplish this?

share|improve this question
add comment

migrated from superuser.com Jul 21 '12 at 20:21

This question came from our site for computer enthusiasts and power users.

1 Answer

Perhaps you could put switches 2, 3, and 4 in another network. Keep the VLAN setup that you've successfully used to isolate C1 and C2 from the "multiple PCs" that are also on MS1. The router would basically be creating "LAN"s instead of the switch creating Virtual "LAN"s.

Communication between the two networks then would have to be explicit.

Internet --> Router --> (x.x.0.0) Managed Switch 1 --> Switch -> C1 and C2
                    | (x.x.1.0)                  |--> Multiple PCs
                    |
                    |-> Managed Switch 2 --> Multiple PCs
                    |-> Managed Switch 3 --> Multiple PCs
                    |-> Managed Switch 4 --> Multiple PCs
share|improve this answer
    
I think this is the way to go - I'll give it a try, thanks –  javy Jul 9 '12 at 18:55
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.