What should my switch IP adress be?

I am looking for a quick answer, hence the points. I am new to networking and could really use some expert advice. I have a router with an IP address of 192.168.1.100 (for example). I have a switch behind the router that will have three computers and two servers. I will also have a couple of personal computers behind the router connected to the same switch. My intentions was to have two Vlans, 1 for business and one for personal. My questions are as follows:
1. Should the IP address of the switch be within the router i.e. 192.168.1.1 and Vlan 2 is 192.168.1.2?
2. Should I use NAT with the switch and would that make it more secure?

I look forward to your answers and really appreciate your knowledge!
Thank You,
Ryan
AGBBCAAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

hbustanCommented:
VLANs are Virtual Networks which mean they act as separate networks.

This means each VLAN should be part of a separate subnet. So if I assume you are using the default Class C subnets (Mask 255.255.255.0), then VLAN1 should look like 192.168.2.X and VLAN2 should look like 192.168.3.X

You will need to route between the VLANs in your setup to access your router which I assume will be part of a 3rd VLAN.
0
hbustanCommented:
Regarding the NAT Question, since 192.168.x.x addresses are non-Internet addresses, you definitely will need to have NAT enabled on the router if you want these machines to access the Internet and have enough IPs for VLANs.
0
AGBBCAAuthor Commented:
Thanks for your quick reply! A couple other questions.
1. If my Vlan 1 is 192.168.2.100 would all other devices need to be below or above the xxx.xxx.x.100 point. (i.e. 192.168.2.99 or 192.168.2. 101
2. Could you please further define what you mean by route between Vlan and router. Does that mean that my router should or should not be 192.168.x.xx. Could you please explain, I am trying to understand this but for some reason it is not clicking!
Thank You Again!
0
hbustanCommented:
Answer to Qustion1:
Vlan1 will comprise of the entire range of 192.168.2.x segment meaning all devices on this VLAN will follow this address range. So the VLAN1 itself will not have a specific address as 192.168.2.100 - This address could be assigned for the router if you wish. Another machine on the same VLAN1 can have an IP address of 192.168.2.25 for instance but will need to define a routing IP within the same segment (in this example, router=192.168.2.100); at the same time, another workstation or server on this VLAN1 can be assigned IP address of 192.168.2.123 if you wish and will have the same routing IP defined (192.168.2.100). Similarly for VLAN2, you will have workstations and/or servers in the 192.168.3.x range with a predifined router IP address of (for this example, can be 192.168.3.100 since you can not use 192.168.2.100 as that belongs to VLAN1). This also means your router will require an IP address for each VLAN so that it can route and be seen by the 3 VLANs.

Answer to Question 2:
I explained this in Question 1; but to simplify, you have only 1 router which will be assigned 3 IP addresses: 192.68.1.100 and 192.168.2.100 and 192.168.3.100 (they might be called primary and secondary IP addresses depending on make and model of your router).

If this still sounds too complicated, perhaps you should not deal with VLANs, and put all machines on the same segment which will simplify your requirements in defining the router to only 1 IP address and all machines will see each other.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AGBBCAAuthor Commented:
THank You, I understand what you are saying. I really appreciate your help!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Architecture

From novice to tech pro — start learning today.