Layer 3 Switch Configuration

Hey Guys,

I ran out of IP addresses, it seems our WLAN and Phones are using up a lot of IPs. We have some dummy Cisco SG200 switches in the environment (about 3). Now i got a layer 3 (Cisco 3750x) switch, and I was wondering if this would be sufficient.

L3 SWITCH (10.1.1.1) --> Firewall 10.1.1.2
Route outside 0 0 10.1.1.2

-Im just going to use the default VLAN 1 and connect the SG200 (dont want to try and trunk these - i hate those switches..lol)
-The wireless APs i will directly plug into the L3 switch and assign them to VLAN2 (10.1.2.x)
- Use ip helper to my DHCP server on the 10.1.1.x network

Would this all work?
LVL 4
Cobra25Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Elango SathyadevSenior Systems EngineerCommented:
This will all work if you have the environment configured properly. Cisco L3 is the key along with DHCP server.
0
Cobra25Author Commented:
What does configured properly mean. Is this OK or not?
0
masnrockCommented:
If I recall properly, you'd still have to do VLAN configurations in the SG200s. They won't just pass along all of the VLANs.
0
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

Cobra25Author Commented:
Why? I kept everything the default vlan 1
0
masnrockCommented:
I reread after I typed that. Actually, it sounds like what you want to do should work.
0
JustInCaseCommented:
Generally, your plan should work, but I  don't think it is enough...
Phones should be in separate VLAN and have own IP address range (just like WAPs). SG200 are manageable switches and although you hate those you should start use it properly. Network is growing and it is the best time to start to plan for the future, most likely, soon you will have more problems than just IP address is too small.
0
Cobra25Author Commented:
Yes, I know. Will do that later.
0
JustInCaseCommented:
If firewall is connected WAN device route on 3750 is actually:
ip route 0.0.0.0 0.0.0.0 10.1.1.2
Since you are planning to use 3750 to terminate 10.1.2.x you will need also route on firewall
Route outside 0 0 <ISP_ip_address>
route inside 10.1.2.0 255.255.255.0 10.1.1.1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cobra25Author Commented:
Oh yeah, almost forgot about that. It's a Sonicwall firewall though
0
masnrockCommented:
Just a thought... Why not just let the Sonicwall handle the work of DHCP and VLANs?
0
Cobra25Author Commented:
Sonicwall is going to be decommissioned in a month.
0
masnrockCommented:
Makes sense. However, I'd assume the replacement firewall would be capable of the same duties.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.