I am setting up a VLAN and what to make sure that I understand it correctly. Here is the equipment I have and my idea.1 - PIX515E firewall 4 - Procurve 4000m switch
Would it be bettter to start the VLAN at the PIX or at the Procurve? I need a VLAN1 for regular employees to access the internet, other office computers and the office server. I need VLAN2 to setup a guest LAN that can only see the internet and not the office computers or server. (also does anyone have any suggestions on how to setup a network authorization, that can be used to logon with a username and password to access the internet)
My idea is to start the VLAN at the procurve switch. I would have the port to the firewall as tagged with VLAN1. I would setup the office computers and server on VLAN1 that are untagged. I would setup the guest ports on VLAN2 that are untagged.
Any one have any other ideas or a better way to do this. Any suggestions would help.