Hi Brayton, The server is installed on an esxi 5.1 host and is a virtual client (2012 server) so I can assign its interface to a VLAN.   I have set its VLAN port assignment to 4 but I cannot ping anything on VLAN 1 or 4. Inter vlan routing is working on the SF-300 switch bewteen VLAN 1 and 4 as I have users on VLAN  4 using VLAN 1 resources and they can connect to the domain. Port G1 on the SF-300 is trunked with VLAN 4 tagged and is connected directly to port E09 of the Linksys switch which is also trunked and tagged with VLAN 4.     The switches are connected direcly via a couple of patch panels.  Because the ESXI Host has servers installed running in VLAN 1 I am unable to remove VLAN 1 from the trunk port and just have VLAN 4. Do I need to trunk the ports which the server is connected to i.e. G3 & G4 and tag VLAN 4 as they are currently set to access? Many thanks Richard ... View more

Hi David, I would like to connect a server to the Linksys SRW224G4 L2 switch but it needs to be on the VLAN 4 network.  I have created a trunk link between the Linksys SRW224G4 and SF-300 and tagged VLAN 4 on both ends (VLAN1 untagged) and set the server IP to the 192.168.2.* network and given it the default gateway for VLAN 4 192.168.2.249 but it doesnt want to communicate. I get limited connectivity and no internet access.   The server has bonded nics and is connected to the G3 and G4 ports of the Linksys224G4 and the ports are set to access ports. I thought I would just have to trunk between the Switches and tag the required VLAN (4)? Kind Regards Richard ... View more

Hi David, I have enabled what you have specified above which has blocked traffic both ways but it seems to be ignoring all rules to allow RDP, SMTP, IMAP, FTP ect.  Settings shown below: Rules 34 - 38 seem to be ignored for some reason not sure why? Kind Regards Richard ... View more

Hi David, That seems to have worked see ACL below: Is there a way of blocking traffic from network 192.168.2.0 to 192.168.111.0 as well i.e both ways except for the ports I allow & Deny?  If I try and add a rule to block any traffic from 192.168.2.0 to 192.168.111.0 above or below rule 42 I loose the RDP connection to the computer on 192.168.2.0 from 192.168.111.0 network.  Is it possible to acomplish this. Kind Regards Richard   ... View more

Hi David, I have added the rules as you described see below: But it seems to let everything through, if I remove rule rule 41, I have no access to the 192.168.2.0 network at all. Also it seems to be ignoring rule 39 as it should allow me to RDP through to a computer on 192.168.2.0. I need to allow RDP (3389), SMTP (25), FTP (21), LDAP (389), IMAP (143) between both networks but deny everything else.   The end goal is to deny the SQL server (port 1433) on 2.2. from being able to communicate with the SQL server on 111.0 as the SQL server on 2.2 is a test SQL server. Hope this makes sense. Kind Regards Richard ... View more

Hi David, Sorry for not getting back sooner ive been on Holiday, I replaced the Draytek Vigor 2600 with a Draytek Vigor 2830 which allowed me to route two private subnets so I have internet access on both VLAN1 and VLAN4.    I know need to allow VLAN4 access to the mail server, fileserver and ability to RDP onto the servers in VLAN1 but deny VLAN1 computers access to VLAN4.   I am trying to do this with access control lists but am a bit lost would you be able to point me in the right direction? Kind Regards Richard  ... View more

Hi David, I have found this on the draytek router: Would I have to do this here? Kind Regards Richard ... View more

Hi David, I also cannot ping the primary and secondary dns servers for the ISP. Regards Richard ... View more

Hi David, Just found it, I am unable to ping the GW IP Addr  displayed on the router status page. Regards Richard ... View more

Hi David, How do I find out the ISP's default gateway. Kund Regards Richard ... View more

Hi David, I did a tracert on the ISP IP address and got the following: 1     *          *               *               Request timed out. 2     <1 ms   <1 ms      <1 ms       ISP IP ADDRESS    regards Richard ... View more

Hi David, I have taken the WAN IP address from the WAN status page of the router, I dont want to post the IP address though for obvious reasons. Kind Regards Richard ... View more

Hi Robert, I have run a tracert on 8.8.8.8 and I get the following: 1      *     *     * request timed out 2     *     *     * request timed out 3     *     *     * request timed out etc Kind Regards Richard ... View more

Hi Robert, I can ping the Router IP address from VLAN2. I thought it might be NAT myself but I have just pinged the ISP IP address from VLAN2 and it came back sucessfull: Kind Regards Richard ... View more

Hi David, I have tried to ping google's IP address  but 173.194.67.94 but it times out.   I am not sure what you mean by 4.2.2.2 but I tried to ping it without sucess.   I have attached a grab of the route print command from  192.168.2.2: I can also ping the network DNS servers (192.168.111.82 & 192.168.111.212) from 192.168.2.2 Kind Regards Richard ... View more