How can I configure network to support two IP subnets?

Hello EE!

Ok, here goes!  

Our company has recently migrated our domain to the new company's network overseas.  Currently, all traffic (internet, email, mainframe) goes through our new company's domain over a T1 via MPLS.

We are also implementing a new time clock system for employees to punch in and out from.  The problem is that the latency between here and our new company is causing about a 10 second delay in response to an employee swiping their card on the new clocks.

So, we have a cable modem where the test clocks are connected to via the Linksys SR2024 unmanaged switch.  

What I would like to do is piggyback the cable modem's connection on our new network and keep the clocks on a separate subnet (10.1.10.x vs. 10.1.17.x).  The problem I'm encountering is that I've got to transverse the fiber optic cabling and then configure the remote switches that will directly connect to the clocks.

I wasn't sure if I needed to create a VLAN or perhaps someone might know of a better solution?  If VLAN is the answer, I could really use a high level overview of VLANs since I've never set one up before.

The goal is to decrease the latency to 2-3 seconds which has been proven already in our test environment.  I'm pretty sure that if I configure the 4208v1 correctly, I could do away with the Linksys SR2024...

Anyway, I've attached current and proposed diagrams which will hopefully help make what I'm saying a bit more clear.  

Thanks in advance for your assistance.

Getnoldfast
TIME-CLOCKS---NETWORK-SETUP-Curr.jpg
TIME-CLOCKS---NETWORK-SETUP-Prop.jpg
BHTNAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rick_O_ShayCommented:
I think what you said you want is to get rid of the linksys but still use the internet connection for the time clocks?
If that is the case then simple VLAN configuration will do what you want.

VLANs let you use a switch or switches to isolate devices from each other as if they were on their own separate switches which sounds like exactly what you want to do. Basically you create the VLANs and then assign only the ports to those VLANs that are associated with that IP subnet.

What you would do is leave the existing network and devices and IP addresses as they are now, probably on a default VLAN throughout your environment. What you would have to do different is make the fiber links between switches tagged for that VLAN if they aren't already.

Devices connect to untagged ports in a VLAN and can only be in one VLAN at a time. Interconnecting switches is done by tagging multiple VLANs on the links between them. A tagged port has the appearance of being a separate logical port for each VLAN that runs over it.

Once you have the current network on the HPs set up with tagging VLAN1 over the fiber links and everything is still working as planned you can move onto adding the new VLAN and subnet to the HP side. So create the new VLAN 10 or whatever it is going to be on all of the switches and tagged on the fiber links between switches at both ends. Configure VLAN 10 on the ports for the time clocks in the remote switches as untagged and also on one port in the core switch. You should be able to test at this point by putting a test device with a 10.1.10.X address on a port at a remote switch and another on a port in the core switch and ping between them.

After you have the new VLAN working you can put the firewall with its 10.1.10.X address private side on the port on the core you just tested the new VLAN on and connect its public side directly to the cable modem and bypass the Linksys. You could also connect the linksys in the way you have drawn if you want.

By design the two subnets would be isolated from each other and have their own IP address range of devices.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BHTNAuthor Commented:
Thanks for your assistance!  Sounds like it should work :)  Any chance you have a link to something that would be easy to digest regarding VLANs?

Getnoldfast
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Broadband

From novice to tech pro — start learning today.