User-dependent access to particular broadcast domains

Buiosu · 11-08-2013, 06:17 AM

Hi,

I'm trying to think whether it is possible (with reasonable effort) to provide single machine as an external gateway for multiple users to their broadcast domains.

Let's assume, we have:

Code:

                                {Network built on VLAN 1}
         +------+              /
User1 ---|      |   +---------+
User2 ---| PSN  |---| Gateway |-{Network built on VLAN 2}
...      |      |   +---------+ ...
UserN ---|      |              \
         +------+               {Network built on VLAN N}

I would like the gateway to be a virtual machine running Linux.
Is it feasible to provide an access to particular sites by introducing some firewall rules or else, so the user No. X will see and be able to access only hosts in VLAN X? PAT or double SSH would be preferred for access method.
Those domains would be rather on a stick.

Regards.

nini09 · 11-11-2013, 02:16 PM

You can try RADIUS server. RADIUS server can bind a user with a VLAN.