Solved

Cisco 837 VLAN / Multinet

Posted on 2004-08-26
6
1,538 Views
Last Modified: 2008-01-09
Hi

I have a Cisco 837 with IOS acting as an ADSL router on a single LAN at the moment. The router has a 4 port hub built in as you probably know.

I've been reading a little about VLANs and multinetting and wondered if I could use this to my advantage in the following scenario:

- LAN 1 - main LAN for internal business use
- LAN 2 - proposed test LAN

Requirements:

- VPN between LAN 1 and LAN 2 using the 837's ports
- Each nework must be completely separate (different subnets) and no machines should be able to see each other unless the VPN is up
- I use NAT on the 837 for getting to LAN 1 VPN Server (Windows 2003 Server) from the Internet. Can I set up a second VPN server operating on a different port on LAN 2 using NAT on the 837?

The purpose of the exercise is to avoid doubling up on routers and phone lines / ADSL fees if possible.

thanks

Rob
0
Comment
Question by:WebAdviser
6 Comments
 
LVL 11

Expert Comment

by:PennGwyn
Comment Utility
If it really has a 4-port HUB built in, then it can't do this.  If it's a 4-port SWITCH, then you've got some possibility.

I'm not sure what you have in mind for VPN.  VPNs are typically host-to-host, host-to-router, or router-to-router.  With only one router, router-to-router makes no sense....

0
 

Author Comment

by:WebAdviser
Comment Utility
The 837 has a 4 port switch. LAN 1 is for internal use and LAN 2 is for testing (including VPNs).

The bottom line is do I need 2 lots of hardware and ADSL lines to achieve what I am looking to do?

Rob
0
 

Assisted Solution

by:diegogalletti
diegogalletti earned 250 total points
Comment Utility
Let me know if I understand correcly:

You would like to have two separate subnet VLAN (like two network offices) that share the Router and the two subnet must be separate by VLAN ?

The cisco 837 is unable to work with VLAN.
If you need to use VLAN you have to use another product like Cisco 1760 Router.

I've all this two product and make it only with the 1760! The inferface of 1760 can be declared with different VLAN and address.

Let me know.

Diego.



0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 

Author Comment

by:WebAdviser
Comment Utility
Thanks for your comments diegogalletti.

I didn't think the 837 coped with VLANs and I'd been looking at the 1760 so your confirmationis much appreciated.

One question: I think I've seen some switches which support VLAN. Could these be used with the 837 somehow?

thanks

Rob
0
 
LVL 1

Accepted Solution

by:
stealth188 earned 250 total points
Comment Utility
Unfortunately no.  The conceptual probelm that you are facing is this: each VLAN has to have a default gateway to get to the rest of the network.  The default gateway functionality is provided by a router.  The router has interfaces, and in the situation that you describe you would need at least two interfaces, one for VLAN A and one for VLAN B.  The interfaces can be either physical ethernet ports (read plug a cable in) or as you alluded to above some higher end switches can create VLANs and perform the routing function which allows hosts on both VLANs to communicate.  You would either need to buy a 1760 and a switch that supports VLANs or keep you 837 and buy a switch that supports VLANs and layer 3 functionality.  You can look at a 3550 as an example of the types of features available.  Depending on the size of your network and needs it may be way overkill though.
0
 

Author Comment

by:WebAdviser
Comment Utility
Thanks for all your comments - much appreciated!

Rob
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now