Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

How do I add subnet and vlan with and

Hello Friends.

I have a scenario that i'm hoping i can get some help with. I'll be as detailed and descriptive as i can.

This is for a business with 100 employees nodes and 100 camera nodes all needing IP internet through private addressing and public gateway.

I have a business class gateway with a private range of 12 public addresses. Ther modem does nothing but act as a gateway since i have disabled the firewall and DHCP.

In place of the firewall and DCHP from the modem i have installed a RV120 Firewall with VPN. When installing i replicated the IP scheme of the modem as to not disturb and distrup the devices assigned addresses from that scheme from the modem. I did this because the owner could not have any down time or any disruption to the business operations.

The RV120 now acts as firewall , DHCP , and VPN. I'll address the subnet first. I's using subnet range.

DHCP is assigning - the rest are static and i plan to use static DHCP with the IP and MAC assigned to each static DHCP address.

There are 100 cameras with static IP addresses in the range of -, and -

VPN uses PPTP assigned address -

There are no layer 3 switches that i know of. Just a layer two that is the primary swith and ports have run out, and various out of the box switches and wireless access points connected to the primary switch.

I want to implement subnets into the network and VLANS as well on a new Layer 3 switche from cisco. Thinking 3550 from Cisco or one of the older layer 2 switches with layer three capabilities.

I also want to introduce a IP range for the existing wireless network and segment the traffic from the rest of the traffic on other ranges.

I want to replace the DHCP alltogether and the static addresses for end user nodes on the same network, but keep that range just for camera nodes segmented.

I want to implement a NEW end user IP range and VLAN for employee/guest networks using the range.

Iv'e thought of replacing all the wireless nodes with RV120's and use VLAN. Dont know if that strategy works. Need to think it through.

I want the IP range comunicate to with the and possibly the range.

Any advice on how to do this? And with as little interuption to the business operations as possible?

As a side note the next step after this is to install a server domain controller as all the computers are all stand alones in their own workgroups. It's a simultaneous project that will introdue a DCHP, WINS, DNS server.