Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[guycre8ive]

I've got the DES-1228 and I'm trying to create a VLAN so I can colocate a server for a customer.  Is it possible to create a VLAN using this appliance so my customer can access their server without having access to my servers?  I can't figure out how to share the Internet connection so both of us have access to our servers via the web.  I've got my fiber connection plugging right into the appliance and then out to the servers, do I need another appliance to split the connection and use two ports for each vlan or is it possible to share the port where the Internet is coming in from somehow?  Thanks in advance..

[Fatman]

With IEEE802.1q VLANs sharing a gateway will not be possible.

(IF this product supports them) Asymmetric VLANs MAY be able to accomplish what you need, but there are caveats.  Given you have servers which incoming clients are going to be requesting I am going to go out on a limb and say my assumption is that those caveats will be problematic for you.

This is an annoying subject, I personally despise asymmetric VLANs, and I recommend taking some time to research their potential benefits and drawbacks.

A gateway with multiple configurable "inside" interfaces (or that supports virtual VLAN interfaces) would be the textbook solution.

[zebfink]

This can be done with (3) Vlans and the assumption that your ISP will give you more than 1 IP
Or (2) Vlans and another switch.. (still need more than 1 IP from your ISP)

Ex:

VLAN 01: (your network)
- ports 1-8 = untagged

VLAN 02: (customer's network)
- ports 9-12 = untagged

VLAN 03: (ISP network)
- ports 13-15 = untagged


3 VLANs that are 3 separate segragated networks

Connection:

1) Plug ISP connection into port 13
2) Plug customer's WAN port of Firewall into port 14  (gets 1 public IP from ISP)
3) Plug customer's LAN port of Firewall into port 9
4) Plug customer's server into port 10
- this is now a separate network for your customer with his own Internet access

5) Plug your WAN port of Firewall into port 15 (get's 2nd public IP from ISP)
6) Plug your LAN port of Firewall into port 1
7) plug the rest of your network into ports 2-8
- this is your separate network with Internet access and is not seen by your customer


If you don't like the (3) vlan idea....
Just make up the (2) Vlan-01 and Vlan-02
Get a little 5 port switch and plug your ISP connection into it.
Connect one port to your Firewall WAN and one port to your customer's Firewall WAN
Plug one port of your Firewall LAN into port 1 of the DES switch
Plug one port of your customer's Firewall LAN into port 9

And you've accomplished the same thing... just added the extra switch.

[Fatman]

You are correct, my statement was based on the assumption that only a single publicly addressable IP was available.