I need suggestions.
I have 80 users that need to be compartmentalized into about 50 groups. Each group may have from 1 to 5 users within it. Each groups needs security from the others. I desire compartmentalization so that each group's traffic and poor computer management (lack of anti-virus protection) might have minimal impact on other users.
Thus far, everyone has been on a single T1 line with all users being plugged into a bank of 4 non managed switches. All IPs have been offered via one DHCP server with everyone in a single net. Some of these groups are in need of using public IPs, either through mapped public to private IPs, or perhaps direct connections to the router with no private IP usage.
I am thinking that I have 2 basic options. Perhaps they should be used together.
One method would be to sub net each group so that they are unto themselves for traffic and greater security with minimal collision domains.
Another thought is VLANs that compartmentalize these groups.
The groups will have a continual need for restructuring on an ongoing basis. (i.e. User 1, 2 & 3 might be in group 1 today with User 4 & 5 being in group 2 today while next month, Users 1 & 2 might be in group 1 with Users 3 & 4 being in Group 2, and User 5 being in their own group.)
The question is: Wouldn't the first option of 50 different sub nets require 50 different routers? If so, then this is probably not reasonable.
Do I go with managed switches and VLANs?
Do I go with 1 large net and not subnet it?
Do I go with both managed switches, VLANs and subnets?
What router/switches should I be considering?
(An explanation of the how this situation is real is thus:
A floor of 80 offices exists in a Executive Suite situation. Internet access is provided by my company. Clients may lease one office or multiple offices. We have no control over their equipment. They deserve protection from snooping of other clients (thus the need for VLANs). By using managed switches, I am hoping to be able to track bandwidth usage within each VLAN on a monthly basis to charge back for internet usage and observe bandwidth abuse of individual clients.
