Solved

Vlan Configuration

Posted on 2013-05-14
6
359 Views
Last Modified: 2013-05-18
Hi experts....my first foray into Vlan's...how exciting ;)

Here's my scenario. Just looking for advice on how best to configure this to suit the needs of our business.

Subnet 1 - Is our main network environment containing SBS2011 & around 10 workstations..all functioning fine. Ip Range 192.168.0/24.
We have commissioned a 3rd party contractor to install a WIFI setup for a call system used in our environment. They have installed all of their own hardware which i will call Subnet 2.

Subnet 2 - The WIFI network. IP Range 192.168.1/24. Has a number of access points we would like to take advantage of, & apparently can. Their system is basically for their own internal usage, however as they require remote access for troubleshooting, their is a network cable running from a small router in their cabinet to our router (both netgears) which gives internet connection....now

To take advantage of this Wifi infrastructure, i would like to connect these 2 subnets in such a way that our staff can connect to the Wifi & be able to access the internet as well as our internal network on the 0/24 range.

I've purchased some new equipment (current is outdated), which consists of a Draytek 2830n Router and a HP 2620-24 PoE+ Switch (layer 3 i believe)

My idea is to put all the office staff computers etc + the SBS server in the default Vlan & connect their network cable to a dedicated port on the switch in a separate Vlan..This is where my experience, or lack of it, has me a little unsure. Do i need to switch on IP Routing?, any tagging or trunking?

I'm told their equipment supports Vlan & i don't believe the 2 subnets need to be locked down from each other to any great extent. We simply want to take advantage of the investment already made on the WIFI infrastructure.

I'm pretty sure this is not a huge job, but would really appreciate some advice for the experts in this area.

Thanks
0
Comment
Question by:cuadmin
  • 3
  • 3
6 Comments
 
LVL 28

Expert Comment

by:asavener
ID: 39164514
I would guess that their router is already performing routing/NAT'ing.

At a guess, their devices are all connected to their own switch, which is then connected to one port on their router?

If so, then the broadcast domains are already isolated from each other, and you don't need to worry about VLANs.
0
 
LVL 2

Author Comment

by:cuadmin
ID: 39166548
" I would guess that their router is already performing routing/NAT'ing."

Yes, they have a small router that we supplied to allow them to access the internet on our subnet. It's a direct router to router connection with static routes set in both. Their server is the only device currently using it. The server nic gateway is set to our router, 192.168.0.1.

"At a guess, their devices are all connected to their own switch, which is then connected to one port on their router?" - Correct, which is then connected to our router.

What we would like to be able to do is to remove the small router in their rack, migrate ours to the Draytek router, set up a separate Vlan for them with an ip on their range which will give any of their equipment access to the internet through our Draytek router.

Hope that makes sense.
0
 
LVL 28

Assisted Solution

by:asavener
asavener earned 500 total points
ID: 39166967
Sure, that plan will work fine.

Each VLAN/subnet will need to have it's own gateway address, which means you have to have an interface on the Draytek for each VLAN.
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 2

Author Comment

by:cuadmin
ID: 39167055
Just so i am clear, if i remove the router they currently use, do i run the cable from their network from their switch into a port on our new L3 switch, configure a separate VLan and add that port + the port that connects the switch to the  interface on the draytek?

Or is there another way to do it?
0
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39167873
is there another way to do it?
If you have a layer 3 switch, then you can use it for internal routing and you don't need to configure an interface on the Draytek.
0
 
LVL 2

Author Closing Comment

by:cuadmin
ID: 39178161
Thankyou
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now