provide internet to PCs on different Vlans

I have 2Wire ATT wireless router. I also have Cisco3550 switch and 2600 Router [it has 2 Fastethernet Fa0/0 and Fa0/1].

I would like to configure either the Switch 3550 OR if necessary Switch3550 and Router2600 to provide internet access to each Vlan on the switch.

So far I have just created Vlans on the switch.
I wonder if it's necessary to create Interface Vlans or it is not.
I wonder if the port that connects the switch to ATT router OR to the 2600 router[if it is necessary] needs to be L3 port or just a Trunk port.

Thanks

jskfanAsked:
Who is Participating?
 
nativevlanConnect With a Mentor Commented:
There are a few ways that you can do this. Since the 3550 is a L3 switch, you will not NEED the 2600 router, but you can use it if you want any of the features that the switch doesn't have. Put your PCs in the separate VLANs. Add your interface VLANs and then set your default route to the 2wire. Then add a third VLAN for the 2wire. Setup DHCP on your switch and configure DNS servers of your choice, and set the default gateway as the corresponding VLAN interface IP address.  Not sure if the 2wire will support any routing protocols, but it may support static routing so you can add entries to your other two VLANs for return traffic from the internet to the PCs. If the 2wire will not support static routing then one of us can help you in setting up NAT so the traffic appears to come from the same network the 2wire is on.
0
 
nativevlanConnect With a Mentor Commented:
If you want to use the router....there are a number of options for that as well. You can setup a trunk port to the router, then create and tag your sub-interfaces on one fa port, then the other port would get connected to the 2wire.  At this point your could setup NAT and define both vlans as "interesting traffic", one, or neither. Setup your DHCP with the router as the default gateway, and your default route to go to the 2wire. Again the issue will be whether the 2wire will let you setup static routes to know how to get to the other networks. From here you can implement your IOS firewall, VPN, ACLs, etc. depending on what series 2600 you have.  In this scenario you would only need to define a VLAN interface for management of the switch since the router would be doing all of the L3 work.
0
 
SouljaConnect With a Mentor Commented:
Use only the 3550 switch. There is not reason to have two routers since the ATT is already providing routing to the internet.

As nativevlan stated. Create the vlan interfaces on the 3550 switch for intervlan routing. Connect the ATT router to the appropriate vlan on the switch based on it's inside ip address. Then create static routes on the ATT wireless router to be able to route return traffic to the separate vlans.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
jskfanAuthor Commented:
<<<<Connect the ATT router to the appropriate vlan on the switch based on it's inside ip address. Then create static routes on the ATT wireless router to be able to route return traffic to the separate vlans. >>>.

++is the Port that will connect the 3550 to ATT router port going to be Trunk or L3 port ?
*** How am I going to create static routes on the ATT router?
0
 
nativevlanConnect With a Mentor Commented:
That will be a routed interface, so you will need to assign the a VLAN interface an IP address (same network as the LAN side of the 2wire). Don't forget to set your routing on the switch to use the 2wire as the default route.
0
 
jskfanAuthor Commented:
*** How am I going to create static routes on the ATT router?
0
 
jskfanAuthor Commented:
thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.