Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Huge Networking  change.

Posted on 2014-11-03
8
Medium Priority
?
207 Views
Last Modified: 2014-11-05
Hi

I have to rebuild our network this weekend using the following hardware and  I need help with the best way to do it.

I have the following
ASA 5505  Fw
Core switch is HP V1910 POE
User Switch  HP V1850G 24
WLC is a  MSN760
6 HP WAPs
10 Polycom IP phones  (internal Hosted)

I would like to  Create a
 mangament VLAN 501  IP  10.50.10.0/24
Production VLAN      502  IP  10. 60.10.0/24
Video VLAN                503  IP 172.16.123. 0 ./24
Voice  VLAN                 504 IP 192.168.1.0/24

Can the above be setup  on the  
HP V1910 POE  or would I need a full layer 3 switch  ? what network would I need on the firewall would I need all 4 vlans set up on it  ?
0
Comment
Question by:thombie
  • 4
  • 4
8 Comments
 
LVL 9

Expert Comment

by:stu29
ID: 40420251
Your 1910 should support 8 VLANs. So this is an option
Your ASA 5505 has plenty of ports so you could subnet here also.

Your routing table would be maintained on whichever device you decide to subnet on, so you do not need to worry about supernetting.  Both devices offer QoS so you can prioritize traffic (VOIP/Video etc)
0
 

Author Comment

by:thombie
ID: 40420386
so on the  v1910 I just need  create the Vlans and tag the ports  for each VLAN  ? and for the none voip switch just create a trunk  ?
0
 
LVL 9

Expert Comment

by:stu29
ID: 40421455
Yes on the v1910.  For you non voip switch .. you can get away with just hanging it of the appropriate VLAN on the 1910.

Remember .. you Firewall will need to know about all your subnets to allow traffic and route correctly
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 

Author Comment

by:thombie
ID: 40421477
on the firewall  I should create  static routes to each subnet  ?
0
 
LVL 9

Expert Comment

by:stu29
ID: 40421496
This depends on how you will set this up.  Will you put your Firebox on its own VLAN and route your traffic on the switch to use this VLAN as your gateway .. or will you connect up each VLAN to a port on the Firewall?

If your firewall is on its own subnet, then no routes are required.  All you have to tell your firewall that those subnets exist on that one interface and it should do the rest.

If you go for the VLAN to FW Port option, then the firewall will know they all exist and you will then create all your access rules across subnets.
0
 

Author Comment

by:thombie
ID: 40421542
I need the most easy solution.  what do you suggest  ?
0
 
LVL 9

Accepted Solution

by:
stu29 earned 2000 total points
ID: 40421639
easiest would be to contain your routing on your switch and have your firewall on its own VLAN.

If you need controls between subnets for security, then using the Firewall ports would be the easiest.
0
 

Author Closing Comment

by:thombie
ID: 40425611
Thanks This solutions has worked for me.
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This program is used to assist in finding and resolving common problems with wireless connections.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question