Solved

inter vlan routing on layer 3 switch or firewall

Posted on 2014-02-11
3
1,387 Views
Last Modified: 2014-02-26
just looking to get some opinions on whether it is better to configure inter vlan routing on a layer 3 switch or do it directly on the firewall.

what do you guys prefer.

any suggestions on pros and cons of each method is welcomed.
0
Comment
Question by:nflnetwork29
3 Comments
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39851762
L3 switches usually supply the hardware (special ASICs) to do fast switching, while firewalls will most probably have to buffer the complete packet for analysis, fragmentation/reassembling etc. So L3 switches should perform better.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39853365
I agree with Qlemo and using layer 3 switch is so much easier than creating bunch of sub-interfaces for vlans on the firewall.
0
 
LVL 26

Expert Comment

by:Soulja
ID: 39853396
From a design perspective, you would want to contain your vlan routing at your distribution layer, not at your edge where a firewall would exist. So keep vlan routing at your Layer 3 switch and only route outbound internet traffic to thefirewall. The one exception is if you need these vlans to be secure between one another and need packet inspection. In that case you would want the firewall to route the traffic between the vlans or be some way in line of that traffic.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Connect two buildings 6 47
Running a 2nd company from the same location 3 58
ASA 5505 latency problem 8 45
Solar Winds can't see SQL Server Express 17 32
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question