Network to be Split??????

[DirtDawg]

In the past these two companies have been able to share servers, and internet connections. But since new management has taken over they would like to split the LAN.

Network Components
3 Cisco 2924XL
1 Internet Connection
1 VPN connection

At this moment the switches are on the same Vlan the companies are using the same servers. Later on seperate servers will be purchased be the companies.

Any ideas just open for discussion.

 

[IPKONFIG]

Buy a router, create vlans, make bosses happy, get a raise.

 

[tbilan]

If you have 2 LANS, say A and B. Are the people and servers in LAN A going to access people and servers in LAN B? Are you still going to have 1 Internet connection?

Option A
If no sharing at all then the easiest thing is to put LAN A on its own switches and LAN B on its own switches. If they're worried about security, which is my guess why they're being anal, then this is the best way.

Option B
If your Internet router has 100BaseT ethernet port it probably will support trunking and you can do 2 VLANs. You'll have to put access lists to keep people from sending between VLANs.

Option C
If you're on the Internet it may not be a bad idea to have a firewall. Get a firewall with at least 3 ethernet ports. Set up 2 VLANs and connection each VLAN to 1 port on the firewall and create more flexible rules for allowing intervlan traffic across.

Just some ideas. Hope they help.
Tom Bilan
TJBA, Inc.
CCNP, CCDP, MCSE & CNE