Two vlan setting is now 100 and 200, 100 can connect outside network, 200 can connect internal erp system, now need a PC can connect internal system, and can connect the network, 200 cannot even can not change, how to set up in order to achieve?

CodePudding user response:

200 even the ERP is to keep connected to the Internet, a computer is 100 and even 200 words, what is the point of this network design?
If must be even, can use the double card

CodePudding user response:

Can use acls do limit, only to vlan 1-2 of the 200 units outside the open net?

CodePudding user response:

reference 1st floor Runnerchin response:

200 even the ERP is to keep connected to the Internet, a computer is 100 and even 200 words, what is the point of this network design?
If you must, you can use the double card

can use acls do limit, only to the vlan 1-2 of the 200 units outside the open net?

CodePudding user response:

ACL is no problem, process is like this: first normal configuration VLAN200, let it can be normal access to the Internet, and then do two ACL, and make some of them can get to the Internet, the rest all can't surf the Internet

CodePudding user response:

It is commonly made to control the access list

CodePudding user response:

Has a feature called private vlan, if can achieve your requirements,

CodePudding user response:

Need to have a switch, do direct routing or single-arm routing,

CodePudding user response:

H3C switches have a private vlan function a port can support multiple vlan at the same time

CodePudding user response:

Through the acl 100 can now access all 200 can only access network in 100 and 200 can be achieved

CodePudding user response:

Unable to post directly, only this way, please forgive me, ask a question, the three layers of network structure, a new colleague's computer to join the domain, normal access to the Internet for a period of time (hours), suddenly can't get to the Internet, IP, DNS and gateway works, could you tell me what causes? Never reset or add strategy, not modified routers, firewalls, domain and so on all parameters, other older employees to normal,

CodePudding user response:

In the 200 PCS as well?
If so you can release the PC's IP on the ACL