Hi Roderick,
Yes you are correct, create two or three vlans on the switch maybe ,
Vlan for your management purposes
Vlan for development
Vlan for production.
Trunk those VLANs to the VLAN aware firewall appliance.
That firewall device specs says it supports vlan interfaces.
Then, why not utilize the access list functionality (ACL) within the switch to restrict traffic between VLANs.
ACL work at wire speed which will not degredate switch forwarding performance and filters packets on packet ingress into the switch.
Check out the following posting for a better understanding of Access list functionality and a configuration example;
Check out Ivors last response on May 31, 2011 12:34 PM and my response and pictures a wee way above Ivors response.
https://supportforums.cisco.com/message/3368125#3368125
But be sure you take advantage of the newest firmware for the switch that was just released, it's even free.
If your switch has firmware version 1.0.xx , please take the 6 minutes to upgrade your switches operating system. The current version of firmware supports a command line interface and some neat other features...
Note: the ACLs uses reverse masking, it's easy and works. have fun and remember to save your configuration after you complete the configuration.
remember that the ACL can be attached to a single port , so you can test the ACL before you apply it onto all the appropriate switch ports.
regards Dave
