Secondary Interface Question

[kyle01041981]

Hi,

    I have a client who I am assisting with some network issues.  The company that manages their network has several private networks tunneled for them to access devices remotly.  My question is with the config a particular interface on their router which i will include below.  I have always understood that adding numerous secondary interfaces is not smiled upon and can essentially create one huge broadcast domain...but I just want to get some other professional opinions.  This is for a ISP so I am going to summarize the IP space to protect the identify of my client but if you would like to see any config I don't include please let me know and I will be happy to provide it.  So what would your opinions be on this interface configuration?

interface FastEthernet0/0
  description to Equipment
  ip address Public IP 255.255.255.128 secondary
  ip address 10.24.2.1 255.255.255.0 secondary
  ip address 10.24.1.1 255.255.255.0 secondary
  ip address Public IP 255.255.255.224 secondary
  ip address 10.24.0.200 255.255.255.0 secondary
  ip address 10.24.10.1 255.255.255.0 secondary
  ip address 10.24.5.1 255.255.255.0 secondary
  ip address 10.24.0.1 255.255.255.0 secondary
  ip address 10.24.7.1 255.255.255.0 secondary
  ip address Public IP 255.255.255.240

[Giuseppe Larosa]

Hello Kyle,

I would recommend to move to a scenario where multiple Vlans are used one per each subnet.

This can be possible if the LAN interface connects to a LAN switch that you can configure as a L2 trunk.

This allows to provide broadcast control and to confine broadcasts in each IP subnet.

An high level of broadcast traffic affect also end user devices not only the router and other network devices.

So current scenario is not efficient.

If new IP subnets need to be added a new Vlan can be created on the switch and a new subinterface can be configured on the router side.

if this is not possible because L2 switches are unmanaged or do not support multiple Vlans and trunking I would consider in the long term to replace them with manageable, multi vlans capable, switches.

Hope to help

Giuseppe