Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 141
  • Last Modified:

Internal IP maxed out

I have internal IP maxed out with lot of wireless devices

My network has
internal wired and wifi with  10.0.x.0 (vlan 100)
guest wifi with 192.168.x.x
phone VLAN with 10.0.x2.0

I would need to add more IP on internal VLAN. Would it be advisiable to create another vlan scope to allow same traffic as 100 and merge them on DHCP with superscope?
0
pchettri
Asked:
pchettri
  • 4
  • 4
1 Solution
 
AkinsdNetwork AdministratorCommented:
It may be easier to just expand the scope to /23 and modify your dhcp scope as well
10.0.x.0 255.255.254.0

If you have a lot of statically assigned IP (eg printers, this may be a little tedious

I personally use multiple vlans
eg
servers (no DHCP)
Printers (no DHCP)
Users (DCHP). I also split users into several vlans based on location.
Of course, your network has to be very big for that to be beneficial
Public Wifi (DHCP)
Vendors (DHCP)

My recommendation is to design the network on paper before you start to implement or make changes.
0
 
pchettriIT DirectorAuthor Commented:
Is there a step-wise migration step I could follow for /23 implementation ? Should I create vlan and Ve interface for that vlan and gradually tag each port that vlan while existing one is still working? Do I need to create scope on DHCP without using super-scope and let existing and new on run separately.

For me wired and wireless vlan has to be the same, as it allows airplay on apple devices, if it is on the same network.
0
 
AkinsdNetwork AdministratorCommented:
Yeah, you could create a new vlan and migrate your network

On the router or switch that acts as the gateway
interface vlan 10
ip address 10.0.10.1 255.255.254.0

If access list exist, create a new one and apply as needed. Do the same for routes

On DHCP
Create a scope  for vlan 10
Set exclusions, reservations, and options as desired

On the Access switches
Switch the interface to vlan 10 and toggle the ports
eg assuming ports 10 to 48 is what you intend to migrate

int range gi1/0/10 - 48
switchport access vlan 10
shut
no shut


For Wireless
You can either create a new SSID or modify the IP scheme for the existing one

Modify IP and subnet mask of statically assigned devices

If modifying existing vlan
modify the subnet mask of DHCP scope and extend the range
modify the subnet mask of the vlan interface on the distribution switch
modify access list and routes
Then modify the subnet mask of statically assigned IPs
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
pchettriIT DirectorAuthor Commented:
Does this allow both the vlan working during the migration?
0
 
AkinsdNetwork AdministratorCommented:
Yes, both VLANs can work simultaneously while you migrate
0
 
pchettriIT DirectorAuthor Commented:
Would be easier to enable IPV6 on part of the network. Enable IPV6 for internal wifi
0
 
AkinsdNetwork AdministratorCommented:
Yes, you could if you want to go that route
It's still a separate network, similar to creating a separate vlan. You may need to manually disable IPv6 on other wired devices if your desire is to limit IPv6 to WiFi only.
0
 
pchettriIT DirectorAuthor Commented:
the only thing I am worried about /23 is subnet mask on servers with static IP addresses. Would still work along with old /24, so I do not have to change subnet mask on server immediately after creating new dhcp scope option for dynamic devices and old server would still work on same network address with different subnet
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now