I am new to vlan and I just have a few questions. I have two buildings, each with its own core, distribution, and access. But everything is in vlan1. I am in the process of redesigning the vlan infrastructure. All of layer 2 stop at the distribution layer. From the distribution to the core, it is all layer 3. So I keep the vlan within the building. The two building communicates via MPLS. My questions are:
- For the management vlan, let say vlan 300. Can I use the same management vlan for both building? Or they have to be different?
- Do the vlans have to be unique throughout my two building network? Let say I have a user in building 1 with vlan 20 and and he moves to building 2 but still want to be in vlan 20. How will this work as there is a 1-to-1 mapping with vlan and subnet. In other words, I assign a subnet (vlan 20 = 10.10.10.10/24) in my distribution switch. Now if he moves to building 2, how will I configure the distribution switch in building 2?
However, you can not share IP subnets. VLAN20 in building #1 should be a different subnet than from building #2.
Users should not care what VLAN they are on. Users should not even know what VLAN they are on. All they should know is they can get to the resources they need.
Now what why/how are you grouping people. By floor, by department, or something else?
If by floor, then you could something like:
VLAN10y = 10.x.y.0/24
Where X = 1 or 2 for building 1 or building 2 and Y = the floor they are on.
Now if you are doing it by department and you have departments split across buildings, you need to decide do you want the departments to be in separate IP subnets based on whcih building they are in or bit the bullet and bridge L2 between the building so that everybody in department X is in the same IP subnet no matter which building they are in.