Ubuntu server 11.4 as a vlan router
 

Has anyone ever setup Ubuntu server or an cli interface Linux server as a vlan router with a catalist 2950 switch. I thinking of doing this for a project



Robert

I'd suggest actually asking a specific question, rather than asking if someone has done it. it's certainly possible, you don't need a show of hands to prove that.

Sorry I was too vague did not realize

More to the point how difficult is it to do.

I need to make two separate networks share one broadband connection but not be able to see each other, and also be able to share a fax server as well.

I am trying to figure the best way to do this before I set down on what I want to do, the other way is to use iptables but I don't know if this is the right way to go or idf the vlan path is the better way.

Robert

Generally, a switch will be fine if you want to do things within a single network or have multiple totally isolated networks. If you want to allow communication among networks though, then you'll need to do routing. iptables is a simple and well-documented way to accomplish that.

vlans (layer 2) and iptables (layer 3 & 4) have nothing in common. One does not affect the need to use the other.

If you want two separate subnets behind your router machine then either vlans or multiple NIC's would be desirable, and given the 2950, vlans make perfect sense. You'll still be looking at iptables to block traffic between those two networks, and to effectively pass it on to the outside world.