?
Solved

inter vlan routing on layer 3 switch or firewall

Posted on 2014-02-11
3
Medium Priority
?
1,484 Views
Last Modified: 2014-02-26
just looking to get some opinions on whether it is better to configure inter vlan routing on a layer 3 switch or do it directly on the firewall.

what do you guys prefer.

any suggestions on pros and cons of each method is welcomed.
0
Comment
Question by:nflnetwork29
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 70

Accepted Solution

by:
Qlemo earned 2000 total points
ID: 39851762
L3 switches usually supply the hardware (special ASICs) to do fast switching, while firewalls will most probably have to buffer the complete packet for analysis, fragmentation/reassembling etc. So L3 switches should perform better.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39853365
I agree with Qlemo and using layer 3 switch is so much easier than creating bunch of sub-interfaces for vlans on the firewall.
0
 
LVL 26

Expert Comment

by:Soulja
ID: 39853396
From a design perspective, you would want to contain your vlan routing at your distribution layer, not at your edge where a firewall would exist. So keep vlan routing at your Layer 3 switch and only route outbound internet traffic to thefirewall. The one exception is if you need these vlans to be secure between one another and need packet inspection. In that case you would want the firewall to route the traffic between the vlans or be some way in line of that traffic.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question