Solved

I need to understand guest networks and VLANS

Posted on 2015-01-23
4
137 Views
Last Modified: 2015-01-29
I will try my best to to keep this question simple, however I am a little confused, so bear with me.
Our DHCP scope has run out of IP addresses.
DHCP (on Windows 2008) has been giving out IP addresses to all and sundry.
We have a scope set up for our LAN (192.168.2.x)
We have a scope set up for VOIP (192.168.10.x)
Netgear switches are tagged accordingly.
We have a number of WAPS which allow LAN access to authenticated users and guest/clients access to the Internet.
Our Windows DHCP server has been giving IP addresses from 192.168.2.x to the guest/clients.
My immediate action is to set up a separate scope for these unauthenticated guests/clients so that they get andifferent IP from the authenticated LAN users and just get access to the Internet.
On the WAPS, you can define the VLAN ID.
I am assuming that I can't define the VLAN on the switch because these WAPS also serve LAN users.
I note that there is nowhere in DHCP to define VLANS.
Example: When somebody attaches to the guest/client network with their phone, after entering the key, they can access the internet. Q: If I define this connection as VLAN ID 4 - how is this routed to my firewall and how can I make sure that VLAN4 gets its IP addresses from a specific scope i.e. not the LAN scope?

Lets start with that and see if I can get some direction.

Many thanks in advance!
0
Comment
Question by:fuzzyfreak
  • 2
  • 2
4 Comments
 
LVL 50

Accepted Solution

by:
Don Johnston earned 500 total points
ID: 40566225
If I understand your question correctly...

Assuming that you have defined the scopes on your DHCP server.  And there is a router (or firewall or layer-3 switch) which is performing inter-VLAN routing. And you have an IP helper configured on the router's interfaces.

When the client sends a DHCP request, the router will forward that to the DHCP server.  The source address (on the forwarded packet) will reflect the network which the request came from.  When the DHCP server receives the request, it will see the network the request came from and offer an IP address on that network.
0
 
LVL 4

Author Comment

by:fuzzyfreak
ID: 40566333
Thanks for your explanation.  Let me try to understand -

A router performing inter-VLAN routing - how can I figure out what is doing this?  I suspect it is either my switches or my firewall.
The source address will reflect the network - I don't understand how if it is simply tagged with a VLAN id - how does DHCP know?
0
 
LVL 50

Expert Comment

by:Don Johnston
ID: 40566349
A router performing inter-VLAN routing - how can I figure out what is doing this?  I suspect it is either my switches or my firewall.
Whatever the default gateway for any of your networks are.  That's what is doing the inter-VLAN routing.
The source address will reflect the network - I don't understand how if it is simply tagged with a VLAN id - how does DHCP know?
The router (or whatever device is doing the inter-VLAN routing), will put the source network as the source address of the DHCP request. That way the DHCP server knows what network the request came from and will offer an address on that network.
0
 
LVL 4

Author Comment

by:fuzzyfreak
ID: 40577267
Thank you very much for your answer, this has helped me immensely.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now