Networks

Ask something
Discussion Locked

Two networks over one physical segment?

0 helpful
8 replies

by wysocki

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a network in my office that has a T1 and DSL coming into a large switch which has several pc's on it. It is also connected to a second switch (via fiber) with more pc's on it. I want to add some pc's on that second switch but I only want them to be able to access themselves AND the DSL line coming over the fiber. I'm a networking novice but I've checked into setting up a subnet for this second group and I'm a bit confused. My main network is 192.168.1.xxx so I was thinking about creating a 192.168.2.xxx for the second group. Also, wouldn't subnetting only separate the two groups just for TCP/IP purposes? In other words, couldn't they just browse each other's workgroup with netbeui or other Windows protocols? I'm trying to isolate the two groups except for access to the DSL and they need to share the physical fiber connection between the two switches.

8 replies

by bfilmfan

Yes they would still be able to browse each other unless you create an acess control list which denies addresses.

If you are a newbie, I don't advise you to be in the switch. Hire someone experienced (even if it is a one-day consultant) to come in and set this up for you.

by jacobgin1

The question is interesting but it is not complete. Can I know more about the type of switches and the routers and a slight detail about your network. What you have asked is possible but not the way u think it will. To answer u in detail i need to know if the switch supports vlan and the vlan forwarding.

by wysocki

The switches are HP Procurve 2800's which state "Basic IP routing: enables automatic routing to the connected VLANs and up to 16 static routes?including one default route?in IP networks".

I have a T1 coming in thru a Cisco 3600 (private 192.168.6.254) and a DSL line coming in thru a Linksys BEFSR41 (192.168.6.252). These both go into the HP#1 (with a bunch of my pc's on it) and fiber port to HP#2 (with more of my pc's on it). I was thinking of putting a small Linksys router beyond HP#2, with public 192.168.6.200 and private 10.1.1.254. If I then attach pc's to the private side of that Linksys on the 10.1.1.x network, then they should not be able to see drives or printers shared on the 192.168.6.x network?

by wysocki

The switches are HP Procurve 2800's which state "Basic IP routing: enables automatic routing to the connected VLANs and up to 16 static routes?including one default route?in IP networks".

I have a T1 coming in thru a Cisco 3600 (private 192.168.6.254) and a DSL line coming in thru a Linksys BEFSR41 (192.168.6.252). These both go into the HP#1 (with a bunch of my pc's on it) and fiber port to HP#2 (with more of my pc's on it). I was thinking of putting a small Linksys router beyond HP#2, with public 192.168.6.200 and private 10.1.1.254. If I then attach pc's to the private side of that Linksys on the 10.1.1.x network, then they should not be able to see drives or printers shared on the 192.168.6.x network?

by pagerth

Wysock, looks like the Procurve switch has VLAN capabilty plus inter VLAN routing as well as def gareway. You could partition the ports into port based VLANs with seperate IP subnets. If you wanted stations on the second switch to be on one of the VLANs at the main site you could make the interconnecting path a VLAN trunk, ie it would carry all or some VLANs.

Also looks like Procurve Manager will allow you to create and manage VLANs fairly easily and it comes with the HP switches.

by wysocki

Thanks, at least I know where to dig into this now. I'll get the HP manuals out of the box and check out the VLANs!

This discussion is closed to new replies.