Subnetting: Separating IP Addresses

[ThomasKMC]

I have a network of PC's with IP addresses from 10.5.6.50 to 10.5.6.63. They all use subnet mask 255.255.255.224. I have a group of servers which I want the PC's to have access to and I was thinking of assigning IP addresses in the 10.5.6.40 -.48 range. For those servers, I would like to assign a different subnet mask because when accessing the network via VPN, I don't want the VPN user to see or access the other PC's, only the servers. What ranges and subnet masks do I have to assign to what group of computers?

Thanks,
-tom

 

[Pheran]

I really hope you don't actually have a PC with IP address 10.5.6.63, because that's the broadcast address on the subnet you are using. The other range you list (10.5.6.40-48) falls into the same subnet; you do *not* want to use a different netmask there or you'll just create all sorts of nasty problems. If you don't want VPN users to get to certain resources, get an access control list between the VPN users and the rest of the network, either on the device terminating the VPN connections or on some intermediate router.

 

[ThomasKMC]

Thanks for your advice!