Design of VLANs
Posted on 2012-03-12
I am working with a client who has some Cisco equipment.
network design is very simple now ; all machines in one VLAN and one subnet.
they like to go with a VLAN based solution , they have a Cisco switch 3750 (24 port) and a ASA (5510) . They also have six Dlink (layer3) switches.
The Idea is to use Cisco 3750 as a core switch ; subnet network to 5 different IP ranges ( for 5 departments ) and put each department on a separate VLAN.
They also have another location which will be connected to primary site using a site-to-site VPN (through Cisco ASA) .So ASA provides site-to-site connectivity and Internet access.
machines on that site also need to be in a different VLAN but should be able to talk to servers in primary site.
so .. with this scenario in mind ; here are my thoughts :
we need one dedicated switch on each subnet ( probably those Dlinks)
we need to enable trunking on each Dlink switch.
Each Dlink switch will be connected to core Cisco switch using its trunk interface.
Core switch performs required routing and send traffic to ASA if required.
Is this right ? I am not quiet sure if ASA should be VLAN aware too ... any thoughts ?