2 Routers, 1 LAN
2 Routers, 1 LAN
(OP)
Hello, in need of some help if possible. I currently have two routers on one network operating as follows:
Router 1: Staff Use
172.16.0.1
DHCP from 172.16.1.33
Subnet: 255.255.0.0
Router 2: Training Use
172.16.0.2
Static only from 172.16.2.3
Subnet:255.255.0.0
Both routers and equipment are all on the same LAN but I would like to have the Training Network accessible from the Staff network but not the staff network from the training network.
If anyone can help me with this i would be most greatful, can this be done using Subnetting?
Thanks
Router 1: Staff Use
172.16.0.1
DHCP from 172.16.1.33
Subnet: 255.255.0.0
Router 2: Training Use
172.16.0.2
Static only from 172.16.2.3
Subnet:255.255.0.0
Both routers and equipment are all on the same LAN but I would like to have the Training Network accessible from the Staff network but not the staff network from the training network.
If anyone can help me with this i would be most greatful, can this be done using Subnetting?
Thanks
RE: 2 Routers, 1 LAN
Consequently, all devices on your 172.16.x.x/16 network will consider themselves on the same segment and won't go through the routers.
Off hand it sounds like what you need is a switch with ACL (access control list) functionality. Your router's switch portion may have this capability (you will need to investigate). This would allow you to create a set of ports that is only accessible via a subset of the range. In other words, it is still one network segment (not subnetted), but traffic will only flow from one switch bank to the other if it is coming from approved side of the fence.
RE: 2 Routers, 1 LAN
If the Staff and Training network were on a different class of network would that cause problems e.g.
Staff: 172.16.0.1
Training: 192.168.0.1
How would I get the staff network to talk to the Training network?
Cheers
RE: 2 Routers, 1 LAN
In order to get the staff side to be able to access the training side, I think you would need a router with two interfaces for the staff. One interface (say eth0) would connect to the 192.168.0.x network and the other (eth1) would go to your default (internet) connection like it does now. You would then tell the staff's router that traffic for the 192.168.0.x range routes via eth0 and make eth1 the default gateway.
This could even be achieved with a PC being used as a router instead of a dedicated device. There may be some other, i.e. better, ways to do this too but this isn't my strong point either. For example, a good router may have multiple ports on it and you can specify some of them being on one range and some on another, I am really not sure what the state of the hardware is today.