Router vlan question

[boymarty24]

Hi ppl,

I have a customer running a 2800 isr as a gateway/firewall. Works like a charm. Now i they want to start bringing up some webservers for external ppl to access. So i am thinking of offering a switch module to the isr and setup a kind of vlan dmz. That shouldnt be any problems right?

thx guys

Marty

 

[UnaBomber]

Buy an extra interface for the 2800 and a switch, its far more secure. Then you can NAT easier from the outside to inside and chroot off your DMZ.

UnaBomber
ccnp mcse2k

 

[boymarty24]

Yeah you are right. Well i didnt want to put more stuff into a already overfull racket =)