Need to confirm that the way switches and routers are physically wired is efficient or a best practice.

Posted on 2007-11-15
Medium Priority
Last Modified: 2010-04-09
We have three internet lines from three separate ISP's.  One is a 3.0mbps T1, one is a 1.5mbps T1, and the other is a 5.0 DSL line.  For each of these, there's a jack on the wall, and from each of those jacks is an ethernet cable leading into one small 8 port switch.  From that switch is an ethernet cable which leads to three respective WAN interfaces of three firewalls, with the LAN port of those firewalls plugging into a main switch to which all of our workstations and servers are attached.  Is this ideal?  We've been having issues with latency and some lost packets (but these have only occurred recently, this setup has been fine for 2 years), and the ISP's have confirmed that the lines are ok.

A tech at cisco recommended dividing the network up into subnets or using VLAN's for each device/line.  Just wanted some feedback on how or whether different lines should be kept separate.
Question by:QuiteSupersonic
LVL 20

Accepted Solution

RPPreacher earned 800 total points
ID: 20289834
I would remove the 8 port switch and direct cable them.
LVL 50

Assisted Solution

by:Don Johnston
Don Johnston earned 800 total points
ID: 20289949
Agreed. There's no need for the 8 port switch... Other than a single point of failure. ;-)

Author Comment

ID: 20290323
But in terms of the flow of traffic does one setup trump the other?
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

LVL 20

Assisted Solution

RPPreacher earned 800 total points
ID: 20290843
Yes.  Traffic aggregated into the 8-port switch faces several limitations

1 - the slight delay entering an exiting the switch
2 - the backplane of the switch

Direct cabling eliminates these two problems.
LVL 50

Assisted Solution

by:Don Johnston
Don Johnston earned 800 total points
ID: 20291504
I'm not sure I agree with RPPreacher on this point.  You're only seeing a maximum of 9mbps total going through the switch. Unless it's a really cheap 10mbps switch, it should be able to handle that.

That said, there's really no good reason to be running these connections through a switch like you are.

Assisted Solution

kulvinder_10 earned 400 total points
ID: 20293140
Yeh try reoving the switch, May be the switch has got some Errors during 2 years of time period.

Adn it i dont see any benfit of swith as such at that point.

Featured Post

Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question