Solved

How to connect two network together

Posted on 2013-06-29
2
422 Views
Last Modified: 2013-07-21
History
------------
Currently our company have two isolate network ,One is for finance department and another is for normal LAN.In the first place ,management decide to split the network to two different network due to security issue .But now management has decide to allow finance department to access DMZ resource and browser internet.Please advice how to connect this two network together.Thank you







Company Network
0
Comment
Question by:AnthonyTeah
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 1

Accepted Solution

by:
dmitrij75 earned 500 total points
ID: 39286500
If your organization have a departments that are placed in one building your task performs with ease. You just need still another power router with VLAN support. The other routers must be connected that router. Combine DMZ computers and finance department in VLAN0 segment on the side of the power router, so that the users outside that segment could not access PC's in the finance department. You may use the same subnet mask for finance department personal and the other users in this case. You might want to combine the users in other VLAN cell. (VLAN1, for example) on the side of you power router as well to prevent their computers from being viewed by financial department users if needed. Now you can connect your power router to the internet, another gateway or server with installed gateway Kerio WinRoute Firewall, WinGate, ...
As an additional solution you may not to buy the power router and make the same adjustments on the local routers of your finance department employees and the other users (primarily I mean VLANs). Then you should connect the local routers of your departments to the server with AD, that connected to the Internet. In this means the server with AD must have the quantity of network adapters equal the local routers of your departments. The network adapters of finance employees and DMZ computers should have the same subnet mask to be able to get connected. If the finance department should be isolated from the other users, you must assign the different subnet for their network cards. DMZ computers should have an additional card for the other users as well in this case.
Please note if you would like the finance employees are browse the Internet faster while getting the other files or stuff from DMZ computers, you should consider to buy an additional network card for them to assure them reliable surf the Internet and getting the files from DMZ. Of course you will need to install an additional card on the DMZ computers as well. It's obviously that you will need to set different subnet mask on the cards. If you wish the other users have the same possibility never assign the subnet mask for their second network adapter the same as for finance employees for security reasons. It's better to install yet another card to DMZ computers or servers.
If you will have a plans to grant the same resources for all the computers of your network then delete VLAN. Both finance employees and other users will see their shared resources
0
 
LVL 17

Expert Comment

by:surbabu140977
ID: 39288522
Since finance is involved, you should be consulting a networking/security firm before plugging in to internet.From your question it's evident that you may not be aware of all the networking aspects. It will carry a great deal of risk(for your finance dept and business) if you try to do it yourself without any professional audit/consultation.

Depending on the sensitivity of finance division you will need a thorough checking of the Desktops, patching of OS and softwares, implement extra security at the firewall, enable strict user control(windows domain) etc.

The last thing you need will be someone seeing your business finance data sitting in his basement garage (and probably trying to sell it). :)

Best,
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Hi there, This article summarizes what you need if you are going to set up your home or small business Network Attached Storage (NAS) to be accessible from the internet. Of course there are configuration differences based on your NAS or router ma…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question