Vlan ideas

I am setting up a VLAN and what to make sure that I understand it correctly. Here is the equipment I have and my idea.

1 - PIX515E firewall 4 - Procurve 4000m switch

Would it be bettter to start the VLAN at the PIX or at the Procurve? I

need a VLAN1 for regular employees to access the internet, other office

computers and the office server. I need VLAN2 to setup a guest LAN that can only see the internet and not the office computers or server. (also does anyone have any suggestions on how to setup a network authorization, that can be used to logon with a username and password to access the internet)

My idea is to start the VLAN at the procurve switch. I would have the port to the firewall as tagged with VLAN1. I would setup the office computers and server on VLAN1 that are untagged. I would setup the guest ports on VLAN2 that are untagged.

Any one have any other ideas or a better way to do this. Any suggestions would help

Reply to
cpritcha
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.