try something like this..access-list 101 permit ip host superstation1 anyaccess-list 101 permit ip host superstation2 any....access-list 101 permit ip host superstationX anyaccess-list 101 permit ip host limitedstation1 host website1access-list 101 p...

If your management segment is a seperate Subnet, the routers will not route any traffic to that subnet that isn't destined for it. I think you are confusing VLANs with Subnets. Based on what you said it sounds as if the connection between your router...

When you say not correctly what exactly is it doing? Remember that everything on the segment has to have the same Subnet mask. If one machine thinks it is on a bigger subnet than it actually is it will not correctly send packets to the gateway when i...

Strict IP should work as follows, assuming the workstation is configured according to the subnet it actually resides on (No supernetting or anything).When Workstation attempting to send to destination.1) Determine if Dest is local (Using IP and Mask...

I think that subnetting the two interfaces is the only option. If you can make the two interfaces different subnets the PIX will route accordingly. Would be nice if the PIX allowed multiple IP's per interface, but they do not support this at least no...