[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 346
  • Last Modified:

How to share one Internet Connection on 2 LANs

Is this even possible ?
How could a network printer be shared between the 2 LANs ?
Would it create routing problems if one of the LANs becomes  part of an AD / DFS on another site so that users can logon at either site and access files.

Backgroud
One LAN, 2 business units. 2 business units become 2 legal entities needing full network separation for compliance but want to continue to share cabling, patch panel and the costs of a single hi speed intenet connection - and possibly 1 leased MFP. All clients, servers, and all but 1 printer will be on one of the 2 LANs. One of the LANs will need to become part of an AD with computers on a remote sites LAN so will need a Site2Site VPN
0
ASPDaddy
Asked:
ASPDaddy
3 Solutions
 
Ernie BeekExpertCommented:
Vlanning?
Then the easiest might be to put the printer in a third vlan that can be reached from the other two.
0
 
HugoHiaslCommented:
There are router available that support this.

I had one from Draytek. Worked perfect.: Here is a description how it is set up in those ones:

http://www.draytek.co.uk/support/kb_vigor_vlan.html
0
 
jakethecatukCommented:
I'm guessing you have a firewall.  If you do, you could create four distinct zones on your firewall: -

Zone 1 - Business Unit 1
Zone 2 - Business Unit 2
Zone 3 - MFP
Zone 4 - untrust/internet.

The reason for putting the MFP in it's own zone will reduce the risk of it acting as a bridge between the two business units.

The firewall should be able to handle the site to site VPN for the business unit that needs it.

You will have to VLAN your network for this to work effectively and to minimise the risk of cross network communicataion.
0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
ASPDaddyAuthor Commented:
Thanks.

jakethecatuk
Would fw zones allow separate ADs to be deployed  in B1 & B2 and function as 2 networks from a users perspective. Is zone3 still accessible OK after 'vlanning'

HugoHiasl
Would this router allow seoprate ADs to be deployed  in B1 & B2
Does it allow any bandwidth  slhaping / priorites for each physical interface or protocols
0
 
jakethecatukCommented:
with seperate VLAN's you can do pretty much what you like when it comes to AD.  each VLAN is to all intents and purposes, it's own network and it will only see outside of it's network what you tell the firewall to let it see.

with regards to zone 3, you will need to configure your firewall to allow traffic to/from zones 1 and 2 to zone 3 for printing  - just make sure you don't allow traffic to/from zones 1 and 2 to each other.
0
 
jakethecatukCommented:
with seperate VLAN's you can do pretty much what you like when it comes to AD.  each VLAN is to all intents and purposes, it's own network and it will only see outside of it's network what you tell the firewall to let it see.

with regards to zone 3, you will need to configure your firewall to allow traffic to/from zones 1 and 2 to zone 3 for printing  - just make sure you don't allow traffic to/from zones 1 and 2 to each other.
0
 
ASPDaddyAuthor Commented:
Thanks.
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now