My company wants me to setup an intranet

Haroon92

Member
Reaction score
11
Location
Jamaica
MY computer wants me to setup a file server with intranet. It's a cafe and they want to setup vlans for different departments, especially to keep customers from access our network. but the thing is I have never done anything like this before. Please help. thanks.
 
What did they list for reasons to have a file server? Is this a public internet cafe? Or a building with multiple business tenants renting office space, like a professional center?

How many people total? How many businesses/departments total?
What size internet connection?

Taking an internet connection and breaking it up into different/separate networks is quite easy, using some good firewall distros with multiple ethernet interfaces (Untangle would be my first "go-to") and managed switches.

But answers to other questions would help determine what to do for a "server".
 
Answer for question 1:It's to share and access different files and resources from different departments.

2: Yes, it's a public internet cafe

3: 6 persons including the CEO

4:4 departments; Computers and services, stationary, documents center and internet cafe. Thank you.
 
Answer for question 1:It's to share and access different files and resources from different departments.

2: Yes, it's a public internet cafe

3: 6 persons including the CEO

4:4 departments; Computers and services, stationary, documents center and internet cafe. Thank you.
Are you sure an intranet is what they need?

Sounds to me like they just need to split the network into public/private subnets using VLANs, which is pretty simple. Or, if the public access is via WiFi only, the simplest solution would be to use Unifi WAPs to create a restricted access 'guest network'.
 
If it's just "file storage"...I don't think you need a server...such a small setup.
Either go with a NAS like a Synology, or...better yet...just go with cloud services for the file storage.
 
MY computer wants me to setup a file server with intranet. It's a cafe and they want to setup vlans for different departments, especially to keep customers from access our network. but the thing is I have never done anything like this before. Please help. thanks.

90% sure what you want is just a separated internal network, not really an Intranet. "Intranet" generally means internal web servers for various things (news, HR, etc.). For less than 10 people in one location, a local NAS or cloud storage (OneDrive if they're on Office 365 Business, other options if not). If they're spread across multiple locations, cloud storage may be an even better option if you have decent enough Internet service.

For a segregated network, start with a good business-class router so you can define separate VLANs, define separate DHCP pools (even completely different ones like 10.x.x.x for internal and 192.168.1.x for public), make sure there are firewall rules to prevent talking between networks (because routers gonna route), etc.
 
What's the budget?

This will greatly determine how you tackle this.

Sent from my SM-G870W using Tapatalk

Are you sure an intranet is what they need?

Sounds to me like they just need to split the network into public/private subnets using VLANs, which is pretty simple. Or, if the public access is via WiFi only, the simplest solution would be to use Unifi WAPs to create a restricted access 'guest network'.
That's exactly st
Are you sure an intranet is what they need?
That's exactly what they want to do, "split the network into public/private subnets using VLANs". And yes, they are only using wifi now for internet access, but as soon as I get the network setup they will use cables instead of wifi. Thanks, man.
 
You could go unifi ap with a USG and a switch then toss in a NAS could pull it off for a few hundred

Sent from my SM-G870W using Tapatalk
 
What's the budget?

This will greatly determine how you tackle this.

Sent from my SM-G870W using Tapatalk
You could go Unifi ap with a USG and a switch then toss in a NAS could pull it off for a few hundred

Sent from my SM-G870W using Tapatalk
can I use any switch, because there is a switch here that is a catalyst express 500 series? and an RV110w router.
 
can I use any switch, because there is a switch here that is a catalyst express 500 series? and an RV110w router.
And to add to that, remember I said we are using wifi now, but in the near future it will be replaced with all cable connectivity.
 
And to add to that, remember I said we are using wifi now, but in the near future it will be replaced with all cable connectivity.
Only the guests that come in with their phone or tablet and would like to purchase wifi service will be using wireless, and I think the unifi would be good for this as well...:rolleyes:Thanks.
 
You will want a switch that supports VLAN tagging.

Unless you run two different routes to two different switches and firewall them.

Sent from my SM-G870W using Tapatalk
 
The switch may support what you need, but it's likely to be confusing and annoying to program (https://www.cisco.com/c/en/us/suppo...series-switches/70485-cat-exp-500-config.html). I note that the instructions on that page were generated with Windows 2000 screenshots. You can use it, but if your time is billable then I'd recommend switching - and if your time is not billable, are you doing this for free?

The router is very end-of-life, probably doesn't support what you need based on a quick list of its specs, and doesn't have any alternative firmware available.

I suspect your best option is one of the Ubiquiti routers (EdgeRouter?) and a matching switch. There are quite a few setup instruction videos, plus enough folks around here or on the Ubiquiti forums to help with learning and setting up.
 
You will want a switch that supports VLAN tagging.

Unless you run two different routes to two different switches and firewall them.

Sent from my SM-G870W using Tapatalk
So that means the CE500 series doesn't support tagging? ok.
The switch may support what you need, but it's likely to be confusing and annoying to program (https://www.cisco.com/c/en/us/suppo...series-switches/70485-cat-exp-500-config.html). I note that the instructions on that page were generated with Windows 2000 screenshots. You can use it, but if your time is billable then I'd recommend switching - and if your time is not billable, are you doing this for free?

The router is very end-of-life, probably doesn't support what you need based on a quick list of its specs, and doesn't have any alternative firmware available.

I suspect your best option is one of the Ubiquiti routers (EdgeRouter?) and a matching switch. There are quite a few setup instruction videos, plus enough folks around here or on the Ubiquiti forums to help with learning and setting up.
O

oh boy... But what I want to do is create 2 VLANs; 1 for staff members and another for cafe quest, and some of the quest will sometimes use wifi only. Thanks a lot much, fencepost.
 
Easily done with UBNT firewalls, or if on more of a budget, some linux based firewalls like Untangle or PFSense. Have them with multiple interfaces. Have a Unifi switch and Unifi APs...make things easy peasy!
 
I don't know if the switch you mentioned supports VLAN tagging I didn't look up the specs.

Sent from my SM-G870W using Tapatalk
 
Easily done with UBNT firewalls, or if on more of a budget, some linux based firewalls like Untangle or PFSense. Have them with multiple interfaces. Have a Unifi switch and Unifi APs...make things easy peasy!
My CEO says that he won't buy any new hardware so I will just have to use what I have. He already has a NAS, router Rv110w, a hp ML310e Gen8 server and a Catalyst Express 500 switch.
I don't know if the switch you mentioned supports VLAN tagging I didn't look up the specs.

Sent from my SM-G870W using Tapatalk
Is there any other alternative to using a switch that supports vlan tagging?
 
Back
Top