On 26.6.20 14:13, R.Wieser wrote:
> Tauno,
>
>> I already answered for that:
>>
>>    - get a virtual LAN capable switch
>
> I have one (with support for USB storage), and noticed that it doesn't make
> a difference on which port (read: vlan) I put my static-IP 'puter - it can
> reach the intarwebz every time.   I do not like that kind of fake seperation
> (I expect mis-matching IPs to be killed).   So, I added a LAN
> switch-with-firewall after it. Alas, that seems to make mince-meat of the
> reachability of the one port that I had set up to be shared between the
> subnets (it forwards to a single IP).
>
> Regards,
> Rudy Wieser


Are you sure that it is a switch, and not a router/server?
The USB storage stinks here.

A LAN switch/firewall very probably uses a VLAN capable physical
interface chip internally, but it usually does not allow you to
define the virtual LANs associated to the cable ports. Please post
the make and model of the box, so we can check it.

Have a look at e.g. Zyxel gs-1200 series switches. The manuals
are available from the Net.

--

-TV

--- SoupGate-Win32 v1.05