By public do you mean "Internet"?
If I were you, I would make a firewall. Or create another Linux box and run Iptables on it. Put three NIC's in it. "Outside", "Inside-1", "Inside-2". Connect each interface to each respective VLAN on your switch.
Outside is Internet, Inside-1 is Segment A, Inside-2 is Segment B. Your Linux FW does all of the routing, all the other servers can be firewall'd, ACL'd by this system.
Either allow your developers to SSH into this box, or create NAT's to respective systems and allow SSH to it from their source.
I normally don't reccomend multiple NIC's in systems. If you can at all stay away from it, do so. Let router's do that for you.
__________________ That's nice, last I read; there was a free opensource dev for [insert product name here] |