We currently have a flat network on a 10.10.10.0/24 range. I want to segment the network with VLANs for printing, management, servers, etc... I did some experimentation and managed to set ports on on different VLANs and used the inter-VLAN wizard to get them talking between the VLANs. Our DMZ is currently on 172.16.0.0/24 on a different interface of a Cisco router with routing controlled by access lists on the router. Can I replicate this on the switch so that I have a DMZ VLAN which can communicate with the server VLAN only on certain ports and IPs and if so can I do this with Cisco Network Assistant as I am new to IOS commands? If this is possible can someone point me in the right direction?