Hello Forum,

I have two router on a stick configurations. Now I would like to access the DMZ Vlans from the private VLANs, but not the other way arround. Is there a reasonable and secure way to do this?

I thought about a L3 Switch module for router 1. Than I could have vlan interfaces for all DMZ Vlans I want to access and secure them via "ip inspect" and access-lists.

internet---router1----Switch1---<n VLANs for private use>
internet---router2----Switch2---<n VLANs for DMZ use>

What do you think?

Best
Christian