Connect two LANs

[igolo]

My Payroll/HR Dept. is located in the same building as the corporate location but have no physical connection to the corporate network. They share a dial-up modem used for internet access to check email, intranet, and get updates.
The corporate side has Cisco 3640 router for the LAN/WAN and a 3640 for Internet.
I need to integrate the HR/PR LAN to the corporate LAN in such a way that HR/PR has full access to corporate resources but corporate users not have access to HR/PR data.

I'm thinking I could use a Cisco 1720 (7 users) to connect the HR/PR LAN to 3640 LAN/WAN router via ethernet. Then for security I was thinking I could put a firewall between the HR/PR LAN and the Cisco 1720.

Can my solution work?
What is the most secure way to the two LAN's?

Thanks
Mike

 

[bdssbrd]

Do the networks have different IP address ranges?
I would suggest Access Lists. This link should give you a good idea on how to configure it.

http://www.cisco.com/en/US/customer...figuration_guide_chapter09186a00800877e2.html

BDSSBRD

 

[igolo]

Yes they do have different IP ranges, however the HR/PR group does not any applications that would be affected by an IP address change. We are also in the process of tearing out their current equipment (servers, workstations, and switch) to upgrade that equipment.

 

[igolo]

Do I really need to two routers if I set access list on the 3640?

 

[bdssbrd]

You can use the 3640 from the corporate LAN/WAN to achieve this.