networking "Sub" Networks

[pxnguinPr3]

So, what i want to do, is have the main network that the whole family use, and a network thats seperate, a network that can still use the internet from the main network,

but the outside network cant see the sub network. [Diagram!]

http://prntscr.com/ffsdks

 

Point [A] Would be the connection from the main network to a sub router

where there can be a NAS, computer, printer ect, that can all ecess the internet, but not the outer network.]

 

I have no idea how to do this, and am a networking newbie, anyone give me a hand possibly?!? Thanks!

[Oshino Shinobu]

A managed switch and two vLANs would accomplish this. Connect everything to the switch, then put what you want in the two "networks" into different vLANs. So you'd have vLAN 1 and vLAN 2. You'd set up a trunk port to your router so that all vLANs can access it. That way devices on vLAN 1 would only be able to talk to the router and other devices on vLAN 1, while vLAN 2 would be in the same situation, but limited to vLAN 2 and the router. 

[pxnguinPr3]

1 minute ago, Oshino Shinobu said:

A managed switch and two vLANs would accomplish this. Connect everything to the switch, then put what you want in the two "networks" into different vLANs. So you'd have vLAN 1 and vLAN 2. You'd set up a trunk port to your router so that all vLANs can access it. That way devices on vLAN 1 would only be able to talk to the router and other devices on vLAN 1, while vLAN 2 would be in the same situation, but limited to vLAN 2 and the router. 

Sooo, sorry, im slightly network newbish as put above, whats a vLan?

[Oshino Shinobu]

1 minute ago, pxnguinPr3 said:

Sooo, sorry, im slightly network newbish as put above, whats a vLan?

Virtual Local Area Network. Its purpose is essentially to simulate having different LANs, but done through software so you don't need additional hardware for each LAN. 

 

You'd have a managed switch that allows you to assign different ports a vLAN tag. So you plug everything you want on vLAN 1 into ports 1-8 and then tag ports 1-8 as members of vLAN 1. Then everything you want on vLAN 2 you plug in on ports 9-15 and tag them as vLAN 2. Devices can now only talk to and see devices on the same vLAN as them. For the router, you'd need to assign it as a trunk port, meaning that it will be able to be seen and used by all vLANs, giving access to the internet, the router's DHCP server, DNS etc. etc.