I want to separate some LAN hosts for security reasons.
But most hosts need to talk to one ore more common servers: - Internet Gateway - DHCP+DNS server - file server - ...
I might define VLANs and let each server join one (or more?) VLAN.
Q: Do I need a Layer 3 switch (e.g. Cisco SG250) or is there an option to make a Layer 2 switch (Cisco SG200) work.
At least Internet Gateway has no VLAN option, so making gateway port TRUNK is no option. Same is true for most other machines like DHCP server.
I guess Layer-2 is not enough. Perhaps I could make one switch port member of multiple VLANs (?) but even if this works at least message from DHCP server (or gateway) won't get back to the hosts if they are on different VLANs.
If Layer-3 is my solution: Does this mean I have to setup a different subnet for every VLAN and build some routing rule?