Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Layer 2 VLAN ?

Posted on 2010-08-21
10
Medium Priority
?
295 Views
Last Modified: 2012-05-10
Hello Gurus,

I am about to set up 3 VLANs on my infrastructure as to better be able to manage it.

Can u please guide me through how do I do that ?

Windows 2003 AD. DHCP enabled
Thanks.
0
Comment
Question by:ammounpierre
  • 5
  • 4
10 Comments
 
LVL 24

Expert Comment

by:rfc1180
ID: 33494061
umm sure, what does your infrastructure look like; do you have a network diagram.
What is the make and model of your network devices; Cisco, Juniper, Brocade, etc.?
0
 

Author Comment

by:ammounpierre
ID: 33494208
Juniper SSG 140
Windows 2003

I would like 3 VLANS.

1-Servers (fileserver - emails...)
2-PCs
3-WIFI

thanks for any material that would help me understand how to do that and what benefit I could get from it...
I am quite new to VLANs
0
 
LVL 24

Expert Comment

by:rfc1180
ID: 33494215
do you have a switch are all devices plugged into the 140?
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:ammounpierre
ID: 33494502
the 2 servers are connected to 1 switch (3com 8 Ports)
the 30 PCs are connected to 2 switches (3 com 16 ports each)
the Wifi is connected to 1 switch (3 com 8 ports)

from every of those switches is connected to a main switch Linksys 24 Ports 1Gb
that linksys is connected to the Juniper SSG 140

the Internet DSL is connected to the Juniper SSG 140
0
 
LVL 7

Expert Comment

by:diepes
ID: 33495263
hi ammounpierre:

Is the Linksys 24Port switch a managed switch ?  (Does it support VLAN's ?)
Where would you like to do the intervlan routing ? (On the Juniper SSG 140)
    Other option would be the Linksys24P if it is a L3 switch, but this will give you less control.

Steps - I would first setup a test vlan
1. Ensure you are running a trunk port between Linksys24P and JuniperSSG140. (To carry multiple vlans)
2. Setup test vlan (sub interface) on JuniperSSG140-Trunk port towards Linksys.
3. Configure a single access port on the Linksys to be in this vlan, connect a laptop, and test if you can ping the ip/GW on the JuniperSSG140

Once this is working, test dhcp for the test vlan, after this it should be easy to move the other switches each to a access port on the Linksys with the correct vlan.
0
 
LVL 24

Expert Comment

by:rfc1180
ID: 33495364
what is the make and model of the linksys switch?
0
 

Author Comment

by:ammounpierre
ID: 33495633
It is a 24 ports 1gig and it supports Layer 3.
But I don't have now the part n#

So I could use the juniper to do the vlans ?
One more question does vlans give extra layer of security ? Thx
0
 

Author Comment

by:ammounpierre
ID: 33495641
It is a 24 ports 1gig and it supports Layer 3.
But I don't have now the part n#

So I could use the juniper to do the vlans ?
One more question does vlans give extra layer of security ? Thx
0
 
LVL 24

Accepted Solution

by:
rfc1180 earned 2000 total points
ID: 33495808
Yeah, I would terminate the vlans on the Juniper and just use a trunk from the Juniper to the linksys switch. I would not even consider layer 3 at the linksys. Once you provide the switch model number we can post configs for the setup.

>So I could use the juniper to do the vlans ?
Yes, but you will still need to setup vlans on the linksys and assign the ports that the 3com switches connect to the appropriate vlan.

>One more question does vlans give extra layer of security ? Thx
Vlans by themselves do not add security, they were never created for that purposes; creating separate zones and vlans on the Juniper will give you the added security that you are looking for.

Billy
0
 

Author Comment

by:ammounpierre
ID: 33496050
I shall give u the linksys model tomorrow when I get to work.
thanks for the help !
meanwhile any documentation u suggest so that I can learn a bit more about the issue ?
thanks again !
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show you step-by-step instructions to build your own NTP CentOS server.  The network diagram shows the best practice to setup the NTP server farm for redundancy.  This article also serves as your NTP server documentation.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question