Looking for an opinion on this

[BrotherJones]

my company has been tasked with colocating a couple of other company's servers for a few months.
- We currently have a two separate links to the internet (microwave and cable). The microwave is our company's main line to the internet with cable used for backup.
- We would like to use one security device to connect up to both internet lines
- the other company's networks must be completely separate from each other (as well as from our own network)

Does this sound right to you -
1. Purchase an ASA 5510
2. Plug our main microwave (cat5) link into e0
3. Plug the backup cable line (cat5) into e1
4. Plug a cat5 cable into e2 and connect that to a separate switch for company 1
5. Plug a cat5 cable into e3 and connect that to the other separate switch for company 2
6. plug a cat5 cable into e4 and connect that to my own company's switch
7. Use vlans (or possibly just access lists) to keep the different network segments completely separate
8. Use access lists to direct users from the other companies to use the cable internet link, while my own company has exclusive access to the microwave link

Just curious, but does this sound like the correct way to set this up? I think there may be a way to have both companies sharing the same ethernet port and use vlans to segment them (rather than putting them on separate physical ports)

thanks

 

[BrotherJones]

I should also note that currently none of my network switches (cheap dell switches) do vlans

 

[Supergrrover]

That seems like a good plan if you can't do VLANs. You will direct the networks out different interfaces by using different route statements.
Make sure your security levels are set for each interface.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[BrotherJones]

great. thanks Brent.