Hello all I wanted to divide up our network into at least two segments, it transpires best practice is to use VLANS and different subnets . The segregation is mainly due as we have recently acquired public areas and guest areas within our building (Training rooms ) . First and foremost I wanted to put the guest users/ public users on a separate VLAN from the Permanent staff I wanted Windows AD server to control the permissions and security of both our internal users and public guest users and issue out IP address Via DHCP , while said users are on different networks . For example Internal network staff Network ID 10.10.100.XX/25, VLAN#100 Guest/Public User ID 10.10.200.XX/25 , VLAN#200 My initial research suggests that I need a layer 3 switch , that can host DHCP relay agents for each VLAN . I now believe I have to update my switches from SG220 to SG300 series . Am I on the right train of thought ?
... View more