Avatar of TFGreen
 asked on


I inherited a very large network about 3 years ago that was in a variety of messes.  Over that time I have cleaned things up and tuned it to where it works and functions wonderfully.  Everything is in working order and spanning tree is working perfectly.  


What I inherited is a big network with mostly everything on vlan 1 and oh, did I happen to mention everything on a /16 network mask  - oh the horrors.

So things are at the point now where I need to start segmenting the network with various vlans and subnets, so the fun begins for me.

I've come up with a common concept like most business would use and I'll be vlanning the network initially by putting each switch on its own vlan  and untagging / tagging the appropriate ports and uplinks as needed.  In this scenario each switch will be its own broadcast domain.  

The network is mostly 8212zl / 8206zl / 6506zl based switches, there is NO intervlan routing now.  

I have labbed up 2 - 5406zl switches and put 2 vlans on one and 2 vlans on the other.

The ultimate goal of intervlan routing for us will be for the subnets to get to the dhcp servers with ip helper statements so they get the appropriate addresses and or course to ultimately get to the internet.  All pcs gurrently use the same gateway today.  In the future they will be using the vlan address as their gateway.

I have attached the configs from both switches so you can see where I am going with this.

I don't want a router on a stick solution.

Thanks in advance for any helpful recommendation you can give me to implement inter vlan routing.

our internet firewall / load balancer is a virtual device - a Fortigate VM with an address of which we use now as the gateway on all pc's.

thanks in advance.
Networking ProtocolsNetworking

Avatar of undefined
Last Comment

8/22/2022 - Mon

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

That is exactly what I thought and will do - thank you so much.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.