Solved

DMZ SWITCH

Posted on 2009-07-16
3
597 Views
Last Modified: 2012-05-07
I have a dmz switch (3560) running in our network. Now we have a single point of failure and I wish to add a second switch. I am running private-vlan scheme. I want to configure a trunk port using sfp gigabit interface. Please should I do a private vlan mapping on my trunk port.
Should my primary interface on the new switch have a different ip address.
 
Thanks
0
Comment
Question by:hermanazefor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 7

Expert Comment

by:clonga13
ID: 24871284
It depends on what your doing. Are there multiple VLANs on your DMZ? where is the firewall located in relation to these switches. If your just trying to add a second switch for disaster recovery purposes or more capacity, then just configure a trunk between the two switches with a cross over cable between them.
0
 

Author Comment

by:hermanazefor
ID: 24871314
I am doing a direct connection between my two 3560 using fiber gbic. I have multiple private vlans and a two regular vlans. Would it be prudent to just configure a port without mapping the private vlans via the trunk and do I need a different ip address for this new switch or just a replica of my other switch.

Thanks
0
 
LVL 7

Accepted Solution

by:
clonga13 earned 500 total points
ID: 24871587
If they are going to up and running at the same time, then you need a unique IP address for the new switch. I would just do a trunk between the switches including all the VLANs since you may at any moment move computers from one switch to the other.
0

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question