2. The main network coming out of the firewall is connected to the three-layer switch, which is distributed. Disable DHCP in the firewall, carry out static routing, and determine the LAN address segment.
3. The external network of the financial department comes out of the firewall and accesses the three-layer switch, which is distributed. Open DHCP in the firewall, do static routing, and determine the LAN address segment.
4. The dormitory building outside the firewall is connected to the three-layer switch, which is distributed. Other same as above.
5, the specific routing depends on you, the key is to facilitate management, for example, the three-layer switch of the main network can make policies for each port and assign them to different departments.
If possible, add equipment such as network behavior management.
The key is that the equipment should be in place, such as firewall, three-layer main switch, data exchange equipment, behavior management equipment, wireless controller and wireless AP. For safety reasons, consider adding UPS devices.