Pkafkas
asked on
Network routing.
Hello:
Previously, our Corporate network only had 1 VLan, with a /24 subnet(256 IP's). We were running out of IP addresses; hence, I thought it best to make 2 additional Corporate VLans. To have:
VLan-1 = Miscelaneous non-intelligent devices (Printers, electrical panels, etc). (192.X.X.X/24)
VLan-2 = Microsoft Windows Domain PC's (10.X.X.X/24)
VLan-3 = Servers. (10.250.X.X/25)
The above system has worked well for segmenting the different parts of the network, in addition to freeing up some much needed IP addresses (on VLan-1). I have created network routing rules, on our main router, to allow network traffic to be routed between V-Lan’s.
Anyway, I could not bring over some of the Microsoft Windows Domain PC's to VLan-2 because these Specific PC's had some proprietary software installed on them that must communicate to the Vendor’s router that is also on VLan-1 (192.X.X.X/24). Additionally, the vendor's router has an Access Control List (ACL) that only accepts traffic from a specific IP address list.
I have manually created static route's, on those specific computer's route table, to redirect network traffic to the Vendor's Router on VLan-1. Ie route ADD 29.X.X.0 MASK 255.255.255.0 192.X.X.100 -p
My question is: What must I do to allow the PC's, with the proprietary software installed, to be moved to VLan-2 and still communicate with the Vendor’s Router on VLan-1? It might be important to mention that the Vendor's Router is on a 192.X.X.X - IP scheme and the other VLan is using a 10.200 - IP scheme.
Previously, our Corporate network only had 1 VLan, with a /24 subnet(256 IP's). We were running out of IP addresses; hence, I thought it best to make 2 additional Corporate VLans. To have:
VLan-1 = Miscelaneous non-intelligent devices (Printers, electrical panels, etc). (192.X.X.X/24)
VLan-2 = Microsoft Windows Domain PC's (10.X.X.X/24)
VLan-3 = Servers. (10.250.X.X/25)
The above system has worked well for segmenting the different parts of the network, in addition to freeing up some much needed IP addresses (on VLan-1). I have created network routing rules, on our main router, to allow network traffic to be routed between V-Lan’s.
Anyway, I could not bring over some of the Microsoft Windows Domain PC's to VLan-2 because these Specific PC's had some proprietary software installed on them that must communicate to the Vendor’s router that is also on VLan-1 (192.X.X.X/24). Additionally, the vendor's router has an Access Control List (ACL) that only accepts traffic from a specific IP address list.
I have manually created static route's, on those specific computer's route table, to redirect network traffic to the Vendor's Router on VLan-1. Ie route ADD 29.X.X.0 MASK 255.255.255.0 192.X.X.100 -p
My question is: What must I do to allow the PC's, with the proprietary software installed, to be moved to VLan-2 and still communicate with the Vendor’s Router on VLan-1? It might be important to mention that the Vendor's Router is on a 192.X.X.X - IP scheme and the other VLan is using a 10.200 - IP scheme.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you for the feedback.
ASKER
1. Submit a request to the Vendor to create 2 new IP addresses in the router's Access Control List (ACL).
a. The new IP addresses will need to be in the 10.200.X.X/24 IP address scheme.
2. I though about only doing 2 PC’s at first for testing.
a. Then after a couple of months to begin changing over half of the other PC's with the proprietary software.
3. Instead of using a static Route, on the PC itself, I would need to make a static route rule on my company's Corporate router.
a. Not the Vendor's router, my company's corporate router.
b. The same router where rules are in place to allow network traffic between the different VLan's.