Hi

I have a 2800 wireless router with a single static public IP address. I'd like to run a publicly accessible web server on this connection, and would put this into its own VLAN, so that if it was hacked, no-one could get to the rest of the network (hopefully!).

However, I would still to be able to remotely access the server from one of the machines on my 'LAN' VLAN, using something like VNC, RDP etc for admin purposes.

Is it possible to have seperate VLANs but still allow limited access across them on specific ports? If not, what would you suggest as the best way to achieve what I want?

TIA

Mark

Unfortunately it's not possible because the vlan is a port based one. It effectively physically separates the ports.