Solved

inter vlan routing on layer 3 switch or firewall

Posted on 2014-02-11
3
1,319 Views
Last Modified: 2014-02-26
just looking to get some opinions on whether it is better to configure inter vlan routing on a layer 3 switch or do it directly on the firewall.

what do you guys prefer.

any suggestions on pros and cons of each method is welcomed.
0
Comment
Question by:nflnetwork29
3 Comments
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39851762
L3 switches usually supply the hardware (special ASICs) to do fast switching, while firewalls will most probably have to buffer the complete packet for analysis, fragmentation/reassembling etc. So L3 switches should perform better.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39853365
I agree with Qlemo and using layer 3 switch is so much easier than creating bunch of sub-interfaces for vlans on the firewall.
0
 
LVL 26

Expert Comment

by:Soulja
ID: 39853396
From a design perspective, you would want to contain your vlan routing at your distribution layer, not at your edge where a firewall would exist. So keep vlan routing at your Layer 3 switch and only route outbound internet traffic to thefirewall. The one exception is if you need these vlans to be secure between one another and need packet inspection. In that case you would want the firewall to route the traffic between the vlans or be some way in line of that traffic.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now