I have just been asked to setup the switches for a backup network in a data centre and I need major assistance. They currently have 4x Cisco 2950T switches that are in different comms areas. Each switch has a GB link back to a separate port in the backup server and switching is disabled on the server. Every server being backed up has had a second NIC installed and switch has also been disabled on them.
The backup switch requirements are:
1. Port one on every switch needs to go to a management switch to allow management (this is a separate switch in the management domain). This port is only allowed for switch management and is not allowed to see any other devices on the switches.
2. Each server being backed up (in ports 2 to 24) that is connected to the backup switch isn't allowed to see any other devices on that switch
3. Each server being backed up (in ports 2 to 24) is only able to see the 2 GB ports that are connected to the backup server.
The backup server is a new Dell server running Red Hat and I believe the NICs support 802.1Q VLAN trunking. My idea was to have 24 separate VLANs on every switch, and only ports 2 to 24 could talk to the GB ports. To allow the management I was going to give the device an IP from the management domain would could only be accessed via port 1.
Now the biggest problem I have is "How do I do it?". If anyone could help it would be greatly appreciated, also please feel free to point out that I may be on the wrong track completely.
Thanking you in advance.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks for your reply Frabble. I am just about to implement & test the changes you recommended. I just need to confirm a few things:
1. Do I leave port 1 (management port) as the default VLAN 1 or create another VLAN for this port?
2. With ports 2 to 24/2x GB do I set the separate VLAN to static access?
> 1. Do I leave port 1 (management port) as the default VLAN 1 or create another VLAN for this port?
You could leave it as is, since VLAN 1 is the default management VLAN, but you should be guided by your local policy on network management.
I would certainly recommend another VLAN if you ever intend to use trunking.
> 2. With ports 2 to 24/2x GB do I set the separate VLAN to static access?
Yes, there's no need for these to be dynamic.
Business Accounts
Answer for Membership
by: FrabblePosted on 2006-02-19 at 18:42:28ID: 15997425
I'd go with you on the management. Management VLAN with a management IP address, confgure Port 1 for VLAN and connect to your management switch.
For the backup:
Your way: 24 VLANs per switch and while the NICS may support 802.1Q, do they support 23 VLANs? I'm assuming you're using IP, so that makes 4 x 23 = 92 networks on the backup server. That's a lot of work and administration.
Best way: Use protected ports. All ports are configured for access mode. Create another VLAN on the switch, assign that to ports 2 to 24 and the gigabit ports, configure ports 2 to 24 with "port protected" which will do exactly what you want. Servers and backup server interface are configured with IP addresses in the same network. That makes 2 VLANs per switch and 4 networks required on the Backup server.
I know which one I'd prefer :)
Read about protcted port operation here:
http://www.cisco.com/en/US