[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

Layer 3 Switch Configuration

Hey Guys,

I ran out of IP addresses, it seems our WLAN and Phones are using up a lot of IPs. We have some dummy Cisco SG200 switches in the environment (about 3). Now i got a layer 3 (Cisco 3750x) switch, and I was wondering if this would be sufficient.

L3 SWITCH (10.1.1.1) --> Firewall 10.1.1.2
Route outside 0 0 10.1.1.2

-Im just going to use the default VLAN 1 and connect the SG200 (dont want to try and trunk these - i hate those switches..lol)
-The wireless APs i will directly plug into the L3 switch and assign them to VLAN2 (10.1.2.x)
- Use ip helper to my DHCP server on the 10.1.1.x network

Would this all work?
0
Cobra25
Asked:
Cobra25
  • 5
  • 4
  • 2
  • +1
1 Solution
 
Elango SathyadevSenior Systems EngineerCommented:
This will all work if you have the environment configured properly. Cisco L3 is the key along with DHCP server.
0
 
Cobra25Author Commented:
What does configured properly mean. Is this OK or not?
0
 
masnrockCommented:
If I recall properly, you'd still have to do VLAN configurations in the SG200s. They won't just pass along all of the VLANs.
0
Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

 
Cobra25Author Commented:
Why? I kept everything the default vlan 1
0
 
masnrockCommented:
I reread after I typed that. Actually, it sounds like what you want to do should work.
0
 
PredragNetwork EngineerCommented:
Generally, your plan should work, but I  don't think it is enough...
Phones should be in separate VLAN and have own IP address range (just like WAPs). SG200 are manageable switches and although you hate those you should start use it properly. Network is growing and it is the best time to start to plan for the future, most likely, soon you will have more problems than just IP address is too small.
0
 
Cobra25Author Commented:
Yes, I know. Will do that later.
0
 
PredragNetwork EngineerCommented:
If firewall is connected WAN device route on 3750 is actually:
ip route 0.0.0.0 0.0.0.0 10.1.1.2
Since you are planning to use 3750 to terminate 10.1.2.x you will need also route on firewall
Route outside 0 0 <ISP_ip_address>
route inside 10.1.2.0 255.255.255.0 10.1.1.1
0
 
Cobra25Author Commented:
Oh yeah, almost forgot about that. It's a Sonicwall firewall though
0
 
masnrockCommented:
Just a thought... Why not just let the Sonicwall handle the work of DHCP and VLANs?
0
 
Cobra25Author Commented:
Sonicwall is going to be decommissioned in a month.
0
 
masnrockCommented:
Makes sense. However, I'd assume the replacement firewall would be capable of the same duties.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 5
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now