Secondary internal network

[JGBR]

Instead of messing about with subnets etc, is it easier to set up a secondary internal network with another router on secondary network cards.

IE:

Internet-router-switch- computer (network 1 for net access only)

Router-Nas/computers (network 2)

All machines have two network cards.

This ensures all internal data/Nas etc is not accessible via the internet connection and the Internet connection is solely for Internet.

 

[JGBR]

This is related to using a router on a secondary network instead of a switch to avoid all the settings and troubles etc.

Presumably if you still get around some of the problems using a router, the issue of getting the machines to use certain network connections and settings for certain tasks is more difficult.

In all it seems the most secure way is to forgoe it all and never send internal data over a network/Internet gateway attached network.