Secure connect & access across 2 separate LAN Subnets using PFSense/ Sophos?
Following is an older diagram of a 2+1 level Small Business/ Startup + Co-working space, with recent expansion & need for integration.
The following changes & information have been outlined:
2 CAT6 Networks/ LANs:
Level 3 & 4 LAN is integrated & maps off a Central Area (Green Area); which has the NAS
ISP---WR1: Asus RT-N16 N Router w Tomato USB FW + HP ProCurve 24 GigE Managed SW + ... N/W Clients
- Look at adding a PfSense/ Sophos box around here
Level 5 is a separate; a simpler & sparser LAN; recent expansion and sub-let
ISP---WR3: D-Link DIR 816 + ... N/W Clients
Each of the above units have their own ISP with their own Data Cap limits
The Stuff in Green box to the upper right titled 'Load Balance ISPs' does not exist; It was the original plan that was never implemented
We plan to run CAT6 cable between Level 4 & 5, outside the building and maybe add some more cables + terminations, and maybe a Hub/ Switch inside Level 5 - This is open/ flexible for now
We need to connect & give access to NAS & maybe MFC/ Printer/ Scanner from Level 6 LAN
2 possible connection & usage scenarios pop up in my head:
- Option A: Level 5 clients have Limited access purely to NAS & MFC; not be able to use Level 4 ISP Bandwidth
- Option B: Level 5 & 4 clients be able to share/ switch over/ bond ISPs in some fashion?
Key Question:
With Option A constraints, How can we Connect/ access across separate LAN Subnets in 2 Suites in a building?
- Network Partitioning
- Addressing
- Physical Connections
- SubNets/ VLANs?