Network design

Posted on 2012-09-12
Last Modified: 2012-09-18
Hi Experts

have a brand new firewall and six 24 ports L3 capable HP switches ; existing network is small (<150 wks) ; currently running over L2 switches and little hubs !

Trying to get some good benefits from all these new equipments . so , my thought is like this :

Let's say we will have 2 VLANs : VLAN 1 and VLAN2
VLAN 1 :
Intra-VLAN routing should be enabled so that devices can talk to each other.

so , as far as I know , I have to create VLANs on the core switch ; dedicate interfaces to them and assign IP addresses on respective VLAN :
e.g :

 Interface GigaEthernet 0/1 / IP address :

VLAN 2  
Interface GigaEthernet 0/2 / IP address :

let's imagine IP routing is enabled on this switch . so these 2 VLANs can talk to each other . also ; probably I can define another interface and  set static routs to send Internet traffic toward edge firewall.

Let's also imagine 5 other switches are connected (using 1 GB connections) and ports are
assigned to different VLANs, I think one GB trunking port should be considered on each of these five switches.

My dummy questions for now :

How physically I connect remaining 5 switches to core switch ? should I expect 5 trunk connections to core switch ? how interfaces on core switch will talk to trunk links ?
Question by:akhalighi
    LVL 17

    Expert Comment

    Simple answer, Yes you will want 5 trunk connections (one for each switch) if you want to pass through the multiple VLAN's.
    Dot1q Trunk will negotiate connection between switches.
    LVL 14

    Expert Comment

    best way would be to connect 5 switches with trunks but also us lacp to aggregate (group) ports - use 2 for each switch - you will have to use 10 ports on main switch but it is well worth it.

    1 if one link fails you always have second one to given port
    2 you gaining internal bandwidth - 2Gbps from each switch to core switch - server wise it does speed up everything. - end devices can pull much more data on shorter periods of time (shared folders or networked drives)

    LVL 10

    Author Comment

    yeah , but how we physically connect them to core ?
    LVL 14

    Expert Comment

    star connection -  2 cables from each switch to core
    LVL 10

    Author Comment

    1- okay so .. let say we connect two ports from a given switch to core ; what specific configuration on the core switch is needed ? where I set the IPs ? and on what interface ?

    2- what happens to rest of unused ports on core switch ? are they wasted ?
    LVL 14

    Expert Comment

    what type of hp switches do you have?

    @1 you set up ips and subnetmasks on ethercahnnels groups of ports (lacp agregation) - not on physical interface ports
    you also enable trunking on etherchannels groups.

    @2 core server connects to your firewall and if possible put all your servers on it (if cpu of switch is powerful enough - you should be able to monitor it)
    LVL 10

    Author Comment

    HP 3800 switches .

    1-I still don't get it . lets say we have two VLANs ; and ;
    we also have two cables (in a group coming from each access switch to core)

    So I have 5 pairs coming to core switch with trunk enabled , getting 10 ports in total .

    so that I will have 5 grouped interfaces on my switch . Where do I set up IP addresses of two VLANs to become the default gateway ?

    2- so can I have my serevrs connected to let's say VLAN 3 on core switch talking to rest of VLANs ?
    LVL 14

    Accepted Solution

    @1 As long as the two building "NEVER" share layer 2, you can use the same VLAN ids.  

    However, you can not share IP subnets.  VLAN20 in building #1 should be a different subnet than from building #2.

    Users should not care what VLAN they are on.  Users should not even know what VLAN they are on.  All they should know is they can get to the resources they need.  

    Now what why/how are you grouping people.  By floor, by department, or something else?

    If by floor, then you could something like:

    VLAN10y = 10.x.y.0/24

    Where X = 1 or 2 for building 1 or building 2 and Y = the floor they are on.

    Now if you are doing it by department and you have departments split across buildings, you need to decide do you want the departments to be in separate IP subnets based on whcih building they are in or bit the bullet and bridge L2 between the building so that everybody in department X is in the same IP subnet no matter which building they are in.

    also check that

    and that

    @2 yes if you have intervlan routing enabled (vlan 3 is allowed to pass ports in both vlan 1 and 2)

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Suggested Solutions

    Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
    Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now