Library Patron Segregation questions

[tholliday1]

Hello all,

I need a little bit of help on this one.  I am trying to plan out our library network and how to separate the library patrons from the rest of the network.  The of course will be in their own VLANs.  I am told that the way they were separated before was physically.  There was a dedicated fiber ran to our internet gateway specifically for them.  My question is, can I instead logically segregated the Patron computer by using a GRE tunnel to the internet gateway.  I would love to hear some input on this.

Thanks

Tom

[devils_advocate]

It rather depends on which equipment you are planning to use.

Which switches?

Which routers?

Do both sets of hosts use the same upstream router?

[tholliday1]

Both sets would use the same equipment.  We use Layer 3 switches to do all of our routing, in particular the 3650's.  In the past there was a dedicated fiber from the patron switch to our internet gateway.  I figured a tunnel could do logically what the fiber did physically.