Small Business Network Setup

[hyperms]

Hello Everybody,
We are in the process of re-organising the office network. It is a small office and currently we have a modem/router (Cisco SRP527w) which provides WAN and WiFi connection to everything (a handful of workstations, admin pc, printers, file server, laptops and phones) organised in VLANS (through a TP-Link smart switch.)

Internet -> Cisco SRP -> TP-Link Switch -> LAN

Because business is slowly but steadily picking up and we see the need of setting up a better networking environment we want to add a proxy server, Samba PDC, VPN server and a development web server that needs to be accessed from outside, so we want to set up a virtualised environment (VMware) to run those servers on. We considered setting up a pfSense (virtualised) server as an external firewall. So my question is where do we put the Cisco SRP? To have WiFi firewalled and going through the proxy server we need to move it downstream from the virtualised environment. We do have an old(ish) Thomson modem/router that we could move upstream to provide ADSL access and move the Cisco SRP downstream to provide WiFi (and Guests’ WiFi.) Or maybe we should put the Thomson downstream (but it does not have guest wifi network capabilities.)

Internet->Thomson->(VMware)pfSense-->DMZ->Proxy, VPN, WWW
……………………………………………………...|----->LAN->Samba->TP-Link(vlan 1)->Cisco (WiFi), PCs, Printers, File Server, etc.
…………………………………………………..….|----->MGMT->TP Link(vlan 2)->Admin Pc(management of the network

Does this topology make sense? Any advice is greatly appreciated.

-Mike