Solved

DMZ SWITCH

Posted on 2009-07-16
3
577 Views
Last Modified: 2012-05-07
I have a dmz switch (3560) running in our network. Now we have a single point of failure and I wish to add a second switch. I am running private-vlan scheme. I want to configure a trunk port using sfp gigabit interface. Please should I do a private vlan mapping on my trunk port.
Should my primary interface on the new switch have a different ip address.
 
Thanks
0
Comment
Question by:hermanazefor
  • 2
3 Comments
 
LVL 7

Expert Comment

by:clonga13
ID: 24871284
It depends on what your doing. Are there multiple VLANs on your DMZ? where is the firewall located in relation to these switches. If your just trying to add a second switch for disaster recovery purposes or more capacity, then just configure a trunk between the two switches with a cross over cable between them.
0
 

Author Comment

by:hermanazefor
ID: 24871314
I am doing a direct connection between my two 3560 using fiber gbic. I have multiple private vlans and a two regular vlans. Would it be prudent to just configure a port without mapping the private vlans via the trunk and do I need a different ip address for this new switch or just a replica of my other switch.

Thanks
0
 
LVL 7

Accepted Solution

by:
clonga13 earned 500 total points
ID: 24871587
If they are going to up and running at the same time, then you need a unique IP address for the new switch. I would just do a trunk between the switches including all the VLANs since you may at any moment move computers from one switch to the other.
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now