Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Network routing.

Posted on 2012-03-09
3
Medium Priority
?
354 Views
Last Modified: 2012-03-12
Hello:

Previously, our Corporate network only had 1 VLan, with a /24 subnet(256 IP's).  We were running out of IP addresses; hence, I thought it best to make 2 additional Corporate VLans.  To have:

VLan-1 = Miscelaneous non-intelligent devices (Printers, electrical panels, etc). (192.X.X.X/24)
VLan-2 = Microsoft Windows Domain PC's (10.X.X.X/24)
VLan-3 = Servers. (10.250.X.X/25)

The above system has worked well for segmenting the different parts of the network, in addition to freeing up some much needed IP addresses (on VLan-1).  I have created network routing rules, on our main router, to allow network traffic to be routed between V-Lan’s.

Anyway, I could not bring over some of the Microsoft Windows Domain PC's to VLan-2 because these Specific PC's had some proprietary software installed on them that must communicate to the Vendor’s router that is also on VLan-1 (192.X.X.X/24).  Additionally, the vendor's router has an Access Control List (ACL) that only accepts traffic from a specific IP address list.  


I have manually created static route's, on those specific computer's route table, to redirect network traffic to the Vendor's Router on VLan-1. Ie  route ADD 29.X.X.0 MASK 255.255.255.0 192.X.X.100 -p  

My question is:  What must I do to allow the PC's, with the proprietary software installed, to be moved to VLan-2 and still communicate with the Vendor’s Router on VLan-1?  It might be important to mention that the Vendor's Router is on a 192.X.X.X - IP scheme and the other VLan is using a 10.200 - IP scheme.
0
Comment
Question by:Pkafkas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 1

Author Comment

by:Pkafkas
ID: 37703150
I think I might have to:

1.  Submit a request to the Vendor to create 2 new IP addresses in the router's Access Control List (ACL).
       a.  The new IP addresses will need to be in the 10.200.X.X/24 IP address scheme.  

2.  I though about only doing 2 PC’s at first for testing.
       a.  Then after a couple of months to begin changing over half of the other PC's with the proprietary software.

3.  Instead of using a static Route, on the PC itself, I would need to make a static route rule on my company's Corporate router.  
       a.  Not the Vendor's router, my company's corporate router.
       b.  The same router where rules are in place to allow network traffic between the different VLan's.
0
 
LVL 17

Accepted Solution

by:
lruiz52 earned 2000 total points
ID: 37704375
Your plan sounds good, but your vendor will also need to add a static route to the 10.x.x.x/24 network, so request that also.
0
 
LVL 1

Author Comment

by:Pkafkas
ID: 37712546
Thank you for the feedback.
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Outsource Your Fax Infrastructure to the Cloud (And come out looking like an IT Hero!) Relative to the many demands on today’s IT teams, spending capital, time and resources to maintain physical fax servers and infrastructure is not a high priority.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question