in

Accessing file server from different VLAN

Network configuration: Layer 2 switch, 2 VLANS (VLAN1 - main, VLAN2 - restricted), router/gateway.

Situation now: VLAN's are separated, computers in one do not see computers in second; internet is accessed via the same router/gateway (one physical LAN NIC, using 802.1q tagging).
Subnets are different in VLAN1 and VLAN2.
AD controller and file server are in VLAN1, in VLAN2 there is only workgroup (no AD).

Problem: need to access file server in VLAN1 from VLAN2, too. Also, in the future some computers in VLAN2 should be members of Active Directory.

One solution would be to configure router - but router NIC is only 100Mbps, while file server and client - 1Gbps. Upgrading router is not possible for now.

Is configuring in switch AD controller and file server ports as "VLAN1 untagged", "VLAN2 tagged" (as well NIC drivers to understand tagged VLAN2) good idea, or there will be a lot of problems and better router should be preferred solution?
I need to allow computers in VLAN2 to access only several VLAN1 computers.

Your ideas are welcome.

Solution: Accessing file server from different VLAN

From what I know, you're trying to fight the purpose of having the VLANs.

Here is a perhaps simple-minded approach that might work for you.

Instead of having VLANs 100%, consider establishing a real LAN:

You say: "internet is accessed via the same router/gateway (one physical LAN NIC, " and it's unclear to me how that works but OK.
So, how about something like this:

Conceptually, I'd do something like this:

internet <> Internet router <> "Upper LAN"  & Fileserver <> Router<>Switch<>"Lower LAN" VLANs

Put the fileserver on the upper LAN.  With this arrangement, anything on the Lower LAN should be able to see it but not vice versa.  Is that getting close?

The reason I say this is because without the complication of the VLANs it is generally possible to isolate LANs and still have access to some computers.  What you do about AD is another matter.

See the diagram in the attached file.    
Here, all the computers in LAN2 and LAN3 can see the computers in LAN1.
But, computers in LAN1 and LAN2 can't see into LAN3 and
computers in LAN1 and LAN3 can't see into LAN2.

So, LAN2 and LAN3 are like your VLANs and LAN1 is like the Upper LAN that I describe above.  
Does that help at all?                                      

 
LAN-Layers.txt (2 KB) (File Type Details) 
LAN layers
 

Popular Tags

Browse All Tags