I have a couple of general vlan questions that I was hoping to get some help on. Currently I have 2 vlans on a campus with six buildings. I also use VACL's on the academic vlan(3) to prevent/allow to certain servers on certain ports on vlan1.
I want to keeps all servers, printers, wireless ap's, switches, etc on vlan 1 and then create 4 vlans for each building (which are only two stories tall). An academic and administrative vlan for the first floor and an academic and administrative vlan for the second floor.
I also want to use vlan pruning to cut out unwanted traffic. All of our servers and such are in one building so most of the vlans will not need to communicate with each other, just vlan 1.
Is this too many vlans? I was hoping to make the broadcast domains smaller. I should be able to use a class c subnet for each vlan, we are a small outfit.
You are absolutely good to go with that. Segregating the vlans will give you different broadcast domian and hence lesss broadcast accross an indicidual segment and also layer 2 security acrross the whole network. The Ip addressing depends on how your present network is and how you really want to design. Class C subnet should be OK here.
Thanks for the reply, This now brings up another question. Right now, I have a 4006 as my core L3 switch and it is doing all of the routing. In two of my buildings, they have 4506's doing most of the L2 switching. Can I remove some of the burden of the L3 routing from the 4006 to the 4506 in each of the buildings for the vlans that are in those buildings?
Lets say I setup vlan 2-26 as my vlans that I want to use. In building A with a 4506, vlans 22-26 are being used. Can I make the 4506 perform the layer 3 routing instead of it going all the way back to the 4006?
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...