On Sat, Nov 20, 2010 at 3:24 AM, GD Incorporation
<rbasuki at gdincorporation dot com> wrote:

> Hi Lee
>
> I think my undestanding was rather faulty. But I understand that you need
> VLAN capable Switch to do VLAN tagging. However, from some people's advices
> I think I want to try installing 3rd NIC for the opt1 LAN interface. Then I
> will connect all the groups that is not supposed to go to the internet on
> the opt-1 NIC and control their access. Would that be a cheaper solution
> than buying VLAN Capable Switch?
>
> Thanks
> Rendra
>
>

Yes, you can do this perfectly this way.
Just remember you will have to setup the appropiate firewall rules to
prevent internet access and allow / not allow access to the LAN
subnet, whatever you desire.

kind regards
Y.