Separate offices from each other but all have internet access. What's the best way to accomplish this?

[Matt Sirotzki]

I am asking this because of numerous failed attempts before.  I first dealt with the small business cisco products.  Layer 2 switches didn't seem to accomplish this correctly and layer 3 would require a butt load of acl lists.  (Average between 10 to 20 rental offices). After retraining for my CCNA cert I have fallen back in love with iOS and all of the possibilities.  However the same question stands.  What is the best equipment to accomplish this?  Vlans appeared the way to go but I don't want inter van communication. 

These are very small usage, low load offices but they need some security between one another. (You never know who is going to bring in something nasty). Is it even possible to accomplish this with a switch alone?  There is a sonic wall on site also but was planning on just connecting the suites to the wan gateway.  Any direction would be greatly appreciated.

[sean_evershed]

So you want to prevent Company A from being able to communicate with Company B on the same physical infrastructure?

One method of achieving this is to use VRF-Lite. See below a good intoduction to the technology:

http://packetlife.net/blog/2009/apr/30/intro-vrf-lite/

Don't forget to rate all helpful post.