Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Add a VLAN with DHCP Range

Hi,

I am looking to create a vlan for visitors to my network to isolate them from the LAN. Below is the breakdown of my LAN.

IP Range:

192.168.16.0 - 254 - LAN Devices. (VLAN1)

172.21.60.0 - 254 - IP Telephony Devices.(VLAN10)

The gateway is my CME 192.168.16.254 which sends traffic to my ASA5505 which connects to the web. My switches are a 2960-POE & 3560 POE.

I am a little unsure of how to create this VLAN, Assign a DHCP Scope and route to the outside interface of the Firewall to connect to the web.

All suggestions would be greatly appreciated here.

Rgds,

Paul.

1 REPLY

Re: Add a VLAN with DHCP Range

Hi Paul,

In my enviroments we go this way.

Vlan X for Guests

This vlan is in the hole network configured (using VTP), so I can use it where I need it, also WLAN. The Default Gateway and DHCP Relay is our Firewall (Trunk Port to Firewall). So it has no connection to the rest of the network and the traffic is inspect by the firewall and routet to the "internet". In the Future, we will use Guest only over WLAN and use the WLC's and the authentication method. We trust VLAN's so it is the best and secured was for us.

There are some more other posibilities. How the CME (I think you mean Communication Manage Espress) could help you here. I don't know.

Hope that gives you some ideas. Or let's discuss  some others..

- Sebastian

327
Views
0
Helpful
1
Replies
CreatePlease login to create content