VLAN Isolation, Bandwidth Shaping in Multi-Tenant Office Suite
Posted on 2012-03-24
My client has a multi-tenant office building with about 50 tenants. I was hired as his new I.T. consultant and one of my tasks (of many) is to redesign his network, thus:
+ Each tenant must be isolated from all other tenants, so each on his own VLAN and subnet.
+ Each tenant have access to the internet.
+ Each tenant have access to a shared VLAN that hosts a large multi-function printer/scanner.
+ Bandwidth shaping, or even just simple max-traffic enforcement, on each VLAN, so tenants can’t abuse the internet by streaming Netflix movies all day (some do this as background noise, ug)
+ A couple of tenants need external VPN to their respective VLAN for file sharing or other approved purpose.
+ Failover to alternate ISP, e.g. DSL
I’ve setup simple networks in the past with a couple of VLANs, but this project is quite a bit larger than what I’ve done recently.
ISP is Comcast, providing a 50 mbit pipe on a business class cable-modem.
I would appreciate advice on equipment to purchase. If I can get it all in a single box, e.g. a Sonicwall or something similar, great. If not, multiple boxes are OK. A device with a web-accessible GUI (as opposed to CLI) is desirable as I will instruct the client on how to make minor changes.