I have two sites: the datacenter and the HQ Office. All traffic from the HQ office goes to the Datacenter. This includes the internet. There is current two VLAN: VLAN 50 from datacenter going out to the internet and VLAN 120 for communication between the HQ and Datacenter.

I have a need for setting up a separate network at the HQ office that ONLY need internet access. I need this new network to be totally separate from the existing network. I have to use the existing VLAN 120 between HQ and Datacenter, and I was thinking about doing VLAN stacking. I have Netgear GS724TS switches. Is it possible to do VLAN stacking or is there another way that I can set up another network that has no access to the servers at the datacenter and only has access to the internet.

I am using SonicWalll for routing.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

i'm afraid you can't use VLAN's inside VLAN's. Unless you have can get multiple VLAN's to connect your datacenter to your site, you will have to set up a VPN for this.

I'm not a Sonicwall expert, but I think (depending on the model) it should be possible to have this VPN tunnel connect to separate VLAN's at each end of the tunnel.

Thomas Roes
ESParteeAuthor Commented:
I think you can do Q in Q tunneling/VLAN stacking on Cisco switches? Can I do this on Netgear Smart Switches also?
Use ACL filter to deny TCP for HQ to datacenter network, then allow port 80 or IP any any.
Put Your Flow Data to Work

SolarWinds® Flow Tool Bundle combines three easy-to-download, easy-to-use flow analysis tools that can help you quickly distribute, test, and configure your flow traffic.

Yes you can use dot1q tagging on the netgear.
Craig BeckCommented:
You can't do QinQ on the Netgear switches.
ESParteeAuthor Commented:
What is dot1Q? is that another term for QinQ?
dot1q tags the frame for transport to identify it.  But looking at the Netgear switch it does not support QinQ as craig states.
ESParteeAuthor Commented:
Ideally, I would want to use another VLAN but I just ended up put that network another interface on the HQ firewall and created firewall rules.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ESParteeAuthor Commented:
Solved by self
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.