Actually, you'll find option 2 more functional. The multi-NIC problem is only good if (ISA PCI Slots / VLANS) > 1. Otherwise, you're screwed and only the single-master VLAN option is usable. Generally speaking, if your switch can create VLANs, then routing between them should be controllable as well. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Mark Hippenstiel" <M.Hippenstiel@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, June 11, 2003 14:47 Subject: [isalist] ISA and VLAN (partly OT) http://www.ISAserver.org Hey guys, I'd appreciate if you could broaden my horizon on this topic. Within a month or so I'll install ISA in an environment where multiple VLANs are running (I still have to check out the hardware on site, I think they use HP switches, but I'm not sure). Each of these VLANs need internet access and firewall protection, but for security and legal reasons, access or rather routing between the VLANs is not allowed. As this is still in an early stage, I have not completed my homework yet, but I would like to hear your comments. As far as I understand, I will either have to install multiple NICs on the ISA box (one for each VLAN), or I'll assign the ISA port on the switch to the VLANs (this would enable routing between them, right?). So which way do I go? Do you see any problems/issues with ISA here? Btw they are currently using FW-1 to do the job. Thanks for your help! Mark ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')