Because my routers only have a single eth interface each, I would like to set up subinterfaces for each one (one for my inside network, one for my outside network). Also, I would like to set up HSRP for my subinterfaces between routers. Since I can't add IP addresses to my subinterfaces without a higher-level IOS, I've ordered full mem upgrades for both. My question is, will my idea work? When I add IP addresses to the subinterfaces right now, I get an error telling me that the main interface has to be set for ISL or dotq. Simple enough, the upgrades will let me do that. But adding those settings to the main interface is usually done when you want to do inter-vlan routing, no? Why would it matter if you're not routing between vlans?
For what you are trying to do, adding a secondary address would be better, and does not require adding subinterrfaces.
(Config-intf)# ip addr 192.168.1.1 255.255.255.0 <-normal, primary interface address
(then add this)
(config-intf)# ip addr 10.10.10.10 255.255.255.0 SECONDARY <--adds an additonal IP address to the same physical interface
That being said, what you are trying to do is generally considered a very bad idea. You give up most security options, greatly complicate the use of (some/most) routing protocols, and completely give up segregation of the broadcast domains (remember that a broadcast MAC address has a destination of all-ones (ff.ff.ff.ff.ff.ff) regardless of the layer three address).
SECONDARY addresses, IMHO, pretty much exist to aid in the migration of a net/subnet from one IP address block to another (like a company re-design or integrating address blocks of a new branch / newly acquired company); then the old and newly migrated hosts can still work concurrently.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...