I have a NAS which is used locally by a computational cluster that I would like to isolate from the corporate network. I have a netgear GS752TXS that connects the various nodes of the cluster as well as a few NAS systems. I have a cable running from the GS752TXS running to a a series of netgear GS716T switches. For the moment, I have defined a VLAN for the NAS systems in the GS752TXS so for the moment the NAS systems are isolated (and pretty much worthless). I would like to allow a few local systems to see the NAS systems (as well as the computational cluster) and would like to stop all traffic from/to the NAS systems from traffic downstream (towards the corporate network side) using VLANs if possible. I am curious if someone with more experience could explain how to set this up if it is possible at all.
There are a couple of ideal case scenarios I can envision, but I am unsure of implementation. The lower the number the more desirable the solution is:
Solution scenarios (what I want not how to do it!)
Allow the NAS systems to see and connect to nodes in the computational cluster as well as to select computers connected to the downstream GS716T switches. Ideally, the downstream computers connected to the GS716T switches should be able to reach the corporate network and the NAS systems, but the NAS systems should not be able to be connectable from the corporate network. The computational cluster must be able to connect to the corporate network to reach license and update servers.
A slightly less desirable solution would be to isolate the NAS systems from the corporate network. The nodes of the computational network must see the NAS systems and connect to the corporate network. Downstream computers connected to the GS716T system should be able see the NAS systems when connected to a particular port on the hub (e.g. I envision ports of a VLAN on the GS716T trunked to the GS752TXS.
Thanks for any help that you can offer.