?
Solved

How to connect two network together

Posted on 2013-06-29
2
Medium Priority
?
424 Views
Last Modified: 2013-07-21
History
------------
Currently our company have two isolate network ,One is for finance department and another is for normal LAN.In the first place ,management decide to split the network to two different network due to security issue .But now management has decide to allow finance department to access DMZ resource and browser internet.Please advice how to connect this two network together.Thank you







Company Network
0
Comment
Question by:AnthonyTeah
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 1

Accepted Solution

by:
dmitrij75 earned 2000 total points
ID: 39286500
If your organization have a departments that are placed in one building your task performs with ease. You just need still another power router with VLAN support. The other routers must be connected that router. Combine DMZ computers and finance department in VLAN0 segment on the side of the power router, so that the users outside that segment could not access PC's in the finance department. You may use the same subnet mask for finance department personal and the other users in this case. You might want to combine the users in other VLAN cell. (VLAN1, for example) on the side of you power router as well to prevent their computers from being viewed by financial department users if needed. Now you can connect your power router to the internet, another gateway or server with installed gateway Kerio WinRoute Firewall, WinGate, ...
As an additional solution you may not to buy the power router and make the same adjustments on the local routers of your finance department employees and the other users (primarily I mean VLANs). Then you should connect the local routers of your departments to the server with AD, that connected to the Internet. In this means the server with AD must have the quantity of network adapters equal the local routers of your departments. The network adapters of finance employees and DMZ computers should have the same subnet mask to be able to get connected. If the finance department should be isolated from the other users, you must assign the different subnet for their network cards. DMZ computers should have an additional card for the other users as well in this case.
Please note if you would like the finance employees are browse the Internet faster while getting the other files or stuff from DMZ computers, you should consider to buy an additional network card for them to assure them reliable surf the Internet and getting the files from DMZ. Of course you will need to install an additional card on the DMZ computers as well. It's obviously that you will need to set different subnet mask on the cards. If you wish the other users have the same possibility never assign the subnet mask for their second network adapter the same as for finance employees for security reasons. It's better to install yet another card to DMZ computers or servers.
If you will have a plans to grant the same resources for all the computers of your network then delete VLAN. Both finance employees and other users will see their shared resources
0
 
LVL 17

Expert Comment

by:surbabu140977
ID: 39288522
Since finance is involved, you should be consulting a networking/security firm before plugging in to internet.From your question it's evident that you may not be aware of all the networking aspects. It will carry a great deal of risk(for your finance dept and business) if you try to do it yourself without any professional audit/consultation.

Depending on the sensitivity of finance division you will need a thorough checking of the Desktops, patching of OS and softwares, implement extra security at the firewall, enable strict user control(windows domain) etc.

The last thing you need will be someone seeing your business finance data sitting in his basement garage (and probably trying to sell it). :)

Best,
0

Featured Post

Turn your laptop into a mobile console!

The CV211 Laptop USB Console Adapter provides a direct Laptop-to-Computer connection for fast and easy remote desktop access with no software to install.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will step through configuring a SonicWALL appliance to utilize an internal DHCP server for Global VPN Client (GVC) hosts.  There are times when using an external (external to the SonicWALL) DHCP server, such as Windows Servers, isn’t pr…
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses
Course of the Month13 days, 19 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question