Question : Routing

Have 2 T-1 lines coming into a Sonicwall in which I don't have and will never have access to.  Each is configured with a private subnet 192.168.12.254 and 10.168.12.254.  We have 2 servers one for staff and the other for public apps.  They do need to share resources and programs between the two subnets.   Right now I have the 2 servers each configured with 2 nics one on each subnet (turned the routing service off). All the network switches are linked together.   We can share resources but I'm thinking this is not the optimal setup.  Should I have another router just to control the routing of the private LAN and remove one of the nics from each server?  Or should I better use the routing service native to Windows to control access and routing which I am not familiar with?
Thanks,
Bill

Answer : Routing

Add a router and configure VLANs.  Vlan1 = 192.168.12.x   and VLAN2 = 10.168.12.x

setup ACL to deny all traffic between the VLANs
then setups ACL's to permit only the specifc traffic (HTTP, FTP, ICMP, etc) from VLAN1 to VLAN2 or vice versa

Cisco ACLs are applied top-to-bottom, so if your DENY statement appears before your PERMIT statement, it will DENY by default.  

- Matt