need suggestion to create vlan for my network

currently in my environment I have 2 DCs, one is also acting as the DHCP server and VPN server. 1 file server and 2 applications servers. There are 100 work stations and all of them need access files on the file server. I just use NTFS permission for the folder access right.
I just got a layer 3 switch and wondering what is the best approach I can do so I can cut down the traffic and give better security on the network?

I found this useful article http://gcharriere.com/blog/?p=620
Is the inter-vlan routing approach good for my environment? what will be the situations to use the other 2?
okamonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Frosty555Commented:
What exactly are you looking to accomplish by implementing multiple VLANs on your network?
0
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
VLANs are used to segregate different network and I do it for following scenarios (few out of many we use):

1. Separate production network (PCL and DCS system running sawmill and pulp-mill operations devices) from business network (normal users needing email, etc.).  With this setup, we allow select machines from business network connect to certain machines on the production network to get data.  This is for security reasons to ensure malware, virus, etc do not affect production systems
2.  Create two networks where one network is used for Labs
3.  Create a separate network where users have access to the Internet only (i.e. Ethernet connections for auditors, contractors, etc.)
4.  VoIP (phone systems are on a separate network as they boot off TFTP server)
5  On-demand VLAN for DR purposes only

In your environment, all users will be accessing all the servers, why would you need to create VLANs?
0
Soulja53 6F 75 6C 6A 61 Commented:
You can organize your network in vlans suchs as putting your servers on one, separating your workstations by location or departments, i.e. vlan for 1st or 2nd floor, and for voice. It's pretty much up to you how you would like to design it. The main purpose is to reduce broadcast domain size and the ability to restrict access between the vlans.
0
Webinar: What were the top threats in Q2 2018?

Every quarter, the WatchGuard Threat Lab releases an Internet Security Report that describes and analyzes the top threat trends impacting companies around the world. Are you ready to learn more about the top threats of Q2 2018? Register for our Sept. 26th webinar to learn more!

okamonAuthor Commented:
what to do with the dhcp, file server and active directory if the workstations in different vlan?
0
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
DHCP works fine as long as you assign IP Helper on the router. File server can be in the different vlan and traffic will be directed to different clan by layer-3 switch.

What Soulja siad can be done and it is done, however, if you one is to do that then one must ensure to use a layer-3 switch, otherwise, performance will suffer as the router would have to rout the traffic to different vlans.  Most routers are not gigabit yet and thus, it will be the bottleneck,.
0
okamonAuthor Commented:
so what is the best practice to avoid bottleneck?
0
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
Use layer 3 switches
0
Soulja53 6F 75 6C 6A 61 Commented:
There will always be a point in the network that is a bottleneck. This is usually at the edge where the network touches the WAN. That being said, you want to contain most of your internal network routing to the distribution and access layers. This is where L3 switches come into play. It allows most internal routing to stay at the distribution layer (L3 switches usually) and not get routed up the edge router unless it's going to the WAN.

Now on the edge you can implement numerous options in regards to QOS to reduced the chances of congestion and/or prioritize traffic that exits to the WAN or enters from the WAN. You can also implement QOS in your LAN also.

Many options.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.