4 Nic's 1 WAN 1 Lan and 2 Vlan how to config?

[Tvede]

Hey there, i have a server with 4 NIC's one used to WAN, one used to give ethernet to a Accespoint and the i have 2 nic back, i want to use the last to as to vlans there can talk together but i need a specific firewall rule and DNS on each vlan, how can i make this? i tryed alot, but the moment i use vlan all the config goes wrong and i cant get ethernet to any thing, my set up is like the topology

[stephenw10]

It looks from your diagram as though you don't need VLANs for this setup. Why are you trying to use them?

Steve

[Tvede]

Thanks for the fast reply

I want to use VLan to get the lan 1 and 2 to "work" as one big lan som the PC's can se each other and send data aka use the funtion of a local file server (workgroupe/home groupe) but is there a easyer way or better way? subneting? routing?

[stephenw10]

I assume you still need to filter traffic between them, otherwise you could just connect it as one network segment.
You can connect the two segments to each of your two extra NICs and then bridge the two NICs. This will make it appear as though both segments are directly joined, it will have one subnet across both. However you can still apply firewall rules to each NIC to filter traffic as needed.
Separate DNS might be more difficult though.

Steve

[Tvede]

Sounds like a plan, i need to use 2 zones because of 2 firewall rules, dns is not the big problem, but it will help a lot if i can use 2 dns insted of a single one… /: but the most importen is they work as one network, but with two nic's and firewall's

Thanks for the help! if any know how to give 2 dns's to each Nic when they arre briged it will be very nice to know

[stephenw10]

How are you using the separate DNS? Do you mean two independent DNS servers? Presumably you are using this to do some URL filtering.

One thing you could do is hand out both DNS servers to all clients across both subnets and then use firewall rules to block the incorrect server at each NIC. It's a pretty ugly method and I don't know how clients would handle it, I imagine you might get a few DNS errors.

Steve

[SMuD]

Hand out DHCP from each NIC.  In the DHCP Configuration, specify the DNS server you want each segement to use.