Solved

VLANs Design

Posted on 2016-08-16
7
53 Views
Last Modified: 2016-08-20
If I understand VLANs are Layer 2 concept , and they are the Broadcast boundary, which means the Broadcast on one Vlan does not propagate to another VLAN. However I would like an Expert to clarify some dark areas about VLANs.

-- are VLANs the boundary of STP. I mean if there is a Switching Loop on one VLAN, the Loop will stay just on that VLAN and it does go to other VLANs ?

--If we have VLAN10 on a Switch in Building1 and 10 miles away in Building 2 we have another Switch that has VLAN10 and both VLANs are in the same VTP domain. is that considered Bad practice ?

--if we need to make Vlan2050 with 510 or 508 hosts  has subnets  192.168.20.0 to 192.168.20.254 and 192.168.50.0 to 192.168.50.254 , to make it one VLAN for all wireless Access Points.

in other words, is it possible to have one VLAN for 2 subnets ?

Thank you
0
Comment
Question by:jskfan
  • 4
  • 3
7 Comments
 
LVL 26

Expert Comment

by:Predrag Jovic
ID: 41758861
are VLANs the boundary of STP. I mean if there is a Switching Loop on one VLAN, the Loop will stay just on that VLAN and it does go to other VLANs ?
Yes, but it will most likely skyrocket CPU of the switch and all VLANs will be affected in the end.
If we have VLAN10 on a Switch in Building1 and 10 miles away in Building 2 we have another Switch that has VLAN10 and both VLANs are in the same VTP domain. is that considered Bad practice ?
Typically it is considered bad practice. Having the same VLAN number is not a problem, but VTP typically should be stay local. Max STP diameter is 7 "hops".  That looks like:
Switch1 - Switch2 - Switch3 - VTP server switch - Switch4 - Switch5 - Switch6
BPDUs can be too slowly propagated from end to end (10 miles distance does not help at all).
Please read article.
in other words, is it possible to have one VLAN for 2 subnets ?
Yes. You can use secondary IP address for for other range in the same VLAN (and not even just one secondary ip address range)
interface vlan 10
ip address 192.168.20.1 255.255.255.0
ip address 192.168.50.1 255.255.255.0 secondary
ip helper-address x.x.x.x

Addresses from secondary IP address range will be assigned by DHCP when primary IP address pool is wasted.
But, on the other hand it is not recommended to have 1000 hosts in one VLAN.
0
 

Author Comment

by:jskfan
ID: 41759831
are VLANs the boundary of STP. I mean if there is a Switching Loop on one VLAN, the Loop will stay just on that VLAN and it does go to other VLANs ?
Yes, but it will most likely skyrocket CPU of the switch and all VLANs will be affected in the end.


But the problem will impact only  hosts connected to that single switch ? other switches will be OK ?
0
 
LVL 26

Expert Comment

by:Predrag Jovic
ID: 41760096
Most likely all switches configured with that VLAN will be affected.
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:jskfan
ID: 41760364
So if it impacts only switches where that one VLAN exist, there is nothing you can do to prevent the Loop to happen.
0
 

Author Comment

by:jskfan
ID: 41760395
Also if I am not wrong, it is better to not spread one VLAN across several switches.
for instance if you can have VLAN 10 on Switch 1 only, if there is a Loop it will impact jut that Switch is better than having VLAN 10 span 2 or more Switches.
0
 
LVL 26

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 41760509
So if it impacts only switches where that one VLAN exist, there is nothing you can do to prevent the Loop to happen.
You need to separate 2 things - preventing loop and effects of a loop. You can prevent loop for sure. On newer devices you can control effects of a loop by using :
 storm-control broadcast level <level>
 storm-control multicast level <level>
 storm-control unicast level <level>
 But, it is better to prevent loop than using network equipment to control it, Typically loops can be prevented by choosing proper network design and using STP, RSTP or MSTP with enhancements that are needed.
Also if I am not wrong, it is better to not spread one VLAN across several switches.
Everything is moving into that direction, but if I remember correctly Cisco's current recommendation is that VLAN should stay inside rack (I still do not see that reflected in productions, typically VLANs are spreading through building).
0
 

Author Closing Comment

by:jskfan
ID: 41763648
Thank you Jovic
I will do more readings about the Design
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now