Allow IT group on main subnet to access management subnet
The main network for the entire organization is 192.168. 168 .x
That is VLAN 168
There is a management network on network 192.168. 150 .x
That is VLAN 150
Members of the IT Group have workstations on the 168 network (as do all other computers…