Solved

Resubnet in a 6504?

Posted on 2009-04-10
7
200 Views
Last Modified: 2012-05-06
I have an interface in a Cisco 6504 that has been assigned an entire class C address space (255.255.255.0). We have only used about 20 of these addresses in the low end of the range.  I would like to use one of the unused address I have and assign it to another interface on the 6504 (have a blade with 24 SFP) so I can connect a new switch many miles away on a fiber optic cable.  The second switch would be also be assigned an address from the same class c range sort of like when you do a serial t-1 connection with a 252 subnet.  

Will I have to re-subnet the original interface that has the class c in order to make available more separate networks from which I can use the ip's on different interfaces on the 6504?  If I do, is the re-subnet procedure disruptive to the clients connected to that interface?

What I am ultimately trying to accomplish is connect a 3560E to the 6504 via fiber optic connection straight bewteen the devices.  The 3560 will be located at a facility owned by another local goverment and they will be connecting devices from their network to the 3560 for connection to systems in our neetwork.   The potential also exists though for that other agency to use the link between the two switches as an alternate Internet connection for them, as our 6504 is also our border gateway device.

I am sure I have confused the lot of you, so I apologize profusely for doing so,  Thanks.
Mike
0
Comment
Question by:mwaters31
  • 4
  • 3
7 Comments
 
LVL 50

Expert Comment

by:Don Johnston
ID: 24119628
>Will I have to re-subnet the original interface that has the class c in order to make available more separate networks from which I can use the ip's on different interfaces on the 6504?

Yes.

>If I do, is the re-subnet procedure disruptive to the clients connected to that interface?

No necessarily. As long as none of the addresses have to be changed, then it's just a matter of changing the masks on the existing devices.

0
 

Author Comment

by:mwaters31
ID: 24119894
The only device connected would be the external interface of my firewall. But it does have about a dozen additional ip  address assigned to that nic.  They would all have to have their subnet masks changed as well then.  Firewall is natting everything inside so that should be good.

Would it be better to use a separate vlan between the two switches?  Then at the 6504, route traffic from new vlan into interface of our firewall?
0
 
LVL 50

Accepted Solution

by:
Don Johnston earned 500 total points
ID: 24119931
>Would it be better to use a separate vlan between the two switches?

Six of one, half dozen of the other.

Personally, I'd make the interfaces connecting the two switches layer three interfaces and assign the IP address there.


0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:mwaters31
ID: 24119979
That may make sense. Later, the possibility exists for that same agency to want to use that link for Internet traffic.  I would have to figure out how to separate the traffic destined for our internal network from the traffic destined for the Internet.  The traffic headed for our network will be mainly voice and video feed from a jail in another jurisdiction for video arraignment.  The other agency may want to use us as an Internet feed for them (since we have 1Gb fiber to a large NOC in Seattle) down the road.
0
 
LVL 50

Expert Comment

by:Don Johnston
ID: 24120095
An ACL will do that.
0
 

Author Comment

by:mwaters31
ID: 24159622
Yeah, I think I will make it layer three with IPs.  We just got our official IP block from ARIN and I will use a .252 subnet from within that to connect the two switches.  
0
 

Author Closing Comment

by:mwaters31
ID: 31569068
We went ahead and used separate IP's for the interfaces. Seems to work fine.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ASA 5505 not passing traffic to Netgear router 22 51
ip igmp join-group 8 43
Configure BGP 22 14
Ping in Fortigate 2 11
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question