I'm sorry, if there is already answer for this question, but it's some sort of question, that is hard to find by yourself, that's why I'm asking it.
I've got a task, to split one, pretty big company network, into smaller one. The main reasons, why it's needed are:
- it's not safe to expose production machines
- guests devices often interfere with production machines, since they are in the same network
- the whole network is running out of addresses
- the network is badly organised and it's hard to tell, what is going on inside it
The network was made about 15-20 years ago and it evolved by itself to this state. The network address is 192.168.1.0 and the mask is 255.255.255.0. Main devices, like switches, servers, router etc. are on low addresses (192.168.1.1-50). There is Microsoft DHCP server and the router is running on Pfsense. Production machines are on somewhere around 230. It is not possible to change the addressation on machnies, so they have to stay as they are.
The main idea is to split it to 2-3 smaller networks. One for office computers and guest devices. The second would be for production machines. Also there are a lot of devices like printers, Active Directory server, production computers etc. that should be able to access from both networks or have access to both networks. Some employees also want to access the remote view on some machines, so something like a port forwarding is needed.
I was thinking about port aggregation, spliting it with router, adding VPN or trying something with just vlans. Still I cannot see the most optimal way to do it.
Since it isn't probably the most atypical task to do, I think that there is a simple solution for this.
Could you please give me some tips, on how it can be solved? Every solution may take a lot of time to implement into life, so firstly I want to plan it as good as it's possible.