?
Solved

IP Network Addressing - Design Phase

Posted on 2010-03-31
3
Medium Priority
?
476 Views
Last Modified: 2012-05-09
Hello all,

I'm looking to build a private network for training and development. I will be virtualizing my environment as much as possible and designing it for HA, FT, and best practices on all aspects as much as possible. I have included a network diagram to help put things into perspective on what I'm trying to accomplish. The diagram is not complete nor is it final.

My biggest problem is IP Addressing. I have a hard time wrapping my head around it. I've been able to plan out how I want to setup my ESXi Host boxes in terms of VLANS, my problem is the rest of the network.

This is what I have come up with so far:

VLAN 50 (native) - 145.21.1.x /16
   ESXi Host Management
VLAN 2933 - 145.21.10.x /16
   VMotion Traffic
VLAN 2934 - 145.21.11.x /16
   iSCSI Traffic
VLAN 2935 - 145.21.12.x /16
   Fault Tolerance in vSphere 4
VLAN 2936 - 145.21.13.x /16
   VM Server Traffic
VLAN 2937 - 145.21.14.x /16
   User Traffic
VLAN 2938 - 145.21.15.x /16 (When needed)
   VM Server Traffic
VLAN 2939 - 145.21.16.x /16 (When needed)

This VLAN configuration is based off a white paper I found for DR procedure in VMWare. It was suggested that I may have multiple VLANs and address ranges for my VM Servers which will depend on my server needs.

I want to prevent any regular user from changing or accessing anything directly on the network (telnet into a switch, remote console into a server, etc)...they can only log into a workstation to do work.

I want to logically separate my "management" servers from "production" servers from my "storage" server. Before I go further, here is what I think are management servers and production servers:

Management Servers

- vCenter Server
- DNS/DHCP/Active Directory
- HP OpenView
- HP SIM
- MS System Center
- ISA Server

Production Servers

- Exchange 2010
- Sharepoint 2007
- Office Project Server 2007
- SQL Server 2008

So to me, my management servers will go on VLAN 50, and production servers on VLAN 2937. I would then configure Private VLANS, Inter-VLAN Routing, ACLs, etc to shape the traffic accordingly. I would use my 8300 switch as my core, set all the vlans and set the default gateway for each vlan there. So VLAN 50 will have a default gateway of 145.21.1.254, and VLAN 2938 would have a default gateway of 145.21.15.254.

The user workstation would be 145.21.14.x /16 DNS: 145.21.1.x GW: 145.21.1.254

Does any of this sound right? Am I on the right track? I know design is based on the requirements on the network, I'm just trying to use "best practices" and be as secure as possible...regardless any suggestions, tips, thoughts are greatly appreciated!
potential-layout.jpg
0
Comment
Question by:BrassMonkey26
  • 2
3 Comments
 
LVL 3

Accepted Solution

by:
zwart072 earned 375 total points
ID: 29230032
watch out, your subnet mask prefix is not right in this way. You use /16 and i think it should be /24,
0
 
LVL 2

Author Comment

by:BrassMonkey26
ID: 29597754
i think the prefix is the least of my issues with this design...i'll be looking for another solution another time...thanks anyways.
0
 
LVL 2

Author Closing Comment

by:BrassMonkey26
ID: 31709497
no contributions were provided.
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

594 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question