Different Vlan with one internet

[sauravsahni]

I have Scanrio
We have 3 department, IT, Account, Marketing , all these department grouped by Vlan,

but i wanna access all vlan through IT department means IT department access all of department but other department should not access each other.

And also One internet for all department

plz let me know the answer

 

[COLGeek]

This sounds suspiciously like a classroom question. Is it?

 

[das_stig]

Hire a network consultant !

 

[failboat]

Firewalls can be configured one way. similar to how the basic nat works.
Your new vlan can make a connection to any network if you set it up.

on each of the non-new vlan put a pass rule for the new vlan and block the others, not including your admin vlan.
on the new vlan block all other vlan.

You should probably make a separate vlan for this connection access that IT can use to remote into clients or w/e. You don't want an outbound or inbound connection going to networks with admin rights.