I am trying to get my head around how this whole thing is going to work. I tried to represent the infrastructure that we are interacting with today and how it needs to look to make things work in my mind. Hopefully I understand the plan. As far as VLANs are concerned, we can use the same VLAN ID to have both the private and public traffic as they will be L3 separated. We will likely have to increase the size of the allocation of address space on VLAN815, as we only have 60 addresses available today. I believe that the 140.221.15.0/24 is available and it is already built in to the trusted network range. That piece we can add next week if we decide that we only need a /24. If we need more space, we can either segment up the public space into AUTH, DB, WEB and MISC, or I can find a /23 and we can work with that. Let the discussion begin. I am happy to share the omnigraffle document if someone wants to edit directly. This may be a good case for a WIKI :) -corby