Multiple businesses on one network query

Mark M · 2 Jul 2015 at 13:44

Could anyone give me some information regarding having one "network infrastructure" in a building with a number of difference companies using it? The things will be set up is that there will be one internet line coming into the building and then a number of VLANs set up for each business.

Some people will have their own server etc and others may just need to use the internet.

Ive had one query from one of the businesses as to what will happen if one computer got a virus and whether or not it would spread across all of the VLANs as they are all on the same switch.

Is there anything I need to do with the setup Im hoping to achieve or will the individual VLANs be sufficient to protect the others on there?

Thanks.

On Holiday · 2 Jul 2015 at 14:06

Server A on VLAN 1 cannot communicate with server B on VLAN 2.

ruffneck · 2 Jul 2015 at 15:52

Archeum said:
Server A on VLAN 1 cannot communicate with server B on VLAN 2.

*If configured correctly.

Xez · 2 Jul 2015 at 16:25

You will need to VLAN off the switch and then create VLAN's on a router and apply ACL's to those interfaces/sub-interfaces to ensure that traffic does not route through to another VLAN.

leigh_boy · 2 Jul 2015 at 16:33

Xez said:
You will need to VLAN off the switch and then create VLAN's on a router and apply ACL's to those interfaces/sub-interfaces to ensure that traffic does not route through to another VLAN.

This, its also very easy to do, even with cisco gear you can learn this in a couple of hours.

visibleman · 3 Jul 2015 at 11:47

Xez pretty much summed it up. Although you really need some form of redundancy in terms of internet connectivity if you haven't got it in place.

nickcardwell · 3 Jul 2015 at 13:42

just to add. We have a similar setup, however our firewall is a fortigate box. You can create "virtual" firewalls for each company. So each company/vlan would have its own firewall and firewall rules etc.. Without affecting the other system.

leigh_boy · 3 Jul 2015 at 14:33

nickcardwell said:
just to add. We have a similar setup, however our firewall is a fortigate box. You can create "virtual" firewalls for each company. So each company/vlan would have its own firewall and firewall rules etc.. Without affecting the other system.

pfsense would be ideal for that with a few network cards