Fibre/Copper Leased Line Configuration

Hi Guys

I have a network situation Im hoping someone might be able to help with.

We have a leased line provided to us via fibre but the router we must use (its a managed service line) only has copper interfeaces.

We have a Juniper EX2200 switch that we are looking to use in this office, so iwas wondering if we could do the following, or if anyone else has any other ideas.

1) Leased Line  presented via fibre will connect to one of the SFP ports on the above switch.
2) I create a VLAN (VLAN 100 Internet)  that includes a the relevant fibre port on the switch as well as including a normal RJ45 copper port in this vlan.
3) I create another VLAN (VLAN 101 LAN) that includes the remaining copper ports on the switch.
4) Fibre is plugged into SFP port on VLAN 100, and then patch lead on copper port on VLAN 100 on the switch is plugged into the WAN interface of the router
5) LAN port of router is plugged into an copper port on VLAN 101 on the switch.
6) Subsequent LAN devices are plugged into the remaining copper ports on VLAN 101

Would this work, or is there an alternative method thats better practice.  Any config examples would be greatly appreciated.

Thanks
Fing wongAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

nociSoftware EngineerCommented:
This would work.
The only possible optimization would be if the fibre could be attached to the WAN port directly. (a few ms. forwarding delay).
Fing wongAuthor Commented:
Would I need to set up any special rules to stop intervlan communication from happening on the switch itself or anything like that?

Thanks
nociSoftware EngineerCommented:
No, defining a different VLAN (vlan ID) will keep the traffic separated... (if not you need a different switch, that would be a bug).
With Layer 3 switches be careful not to define routes between VLAN's.  for L2 switch nothing should mix the traffic.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

kenfcampCommented:
The only potential issue I see is getting VLAN 101 to the internet with out blending traffic which (IMO) defeats the purpose

Personally I would have gotten a couple of media converters and gone straight to the router

Fiber -> MC <=> MC -> Copper > Router > Switch -> VLAn 100 / 101
Fing wongAuthor Commented:
Hi kenfcamp

Was looking at that but theyre quite expensive for what they are IMO
kenfcampCommented:
Actually in your case 1 should be all you need
kenfcampCommented:
?? That depends on your budget and what you're looking to get

Depending on the connector(s) the fiber is using (SM vs MM / LC, SC, ST, etc) a 100/1000 converter should be around 100 - 200.00 ea
which isn't bad
nociSoftware EngineerCommented:
@kenfcamp: IF a switch bleeds traffic between VLANs THEN it is time to kill that switch and throw it in the trashbin. LAN separation SHOULD be complete even for multicast/broadcast traffic.   That is the definition of VLAN's.
If you have experienced bleeding traffic (not caused by mismanagement on L3 switches) then you definitely need to replace switches.
(or at least need firmware changes).

And following your suggestion would mean to completely drop VLAN 100 from the switch config for completeness.
(BTW, one can edit entries provided no one adds another below it).
kenfcampCommented:
@noc

Bleeding traffic???

I said Ble"N"ding

VLAN2 traffic allowed into VLAN1 in order to get Internet
nociSoftware EngineerCommented:
The question was if traffic between VLAN100 and VLAN101 would accidentally mix... and no that SHOULD not happen. unless switches have buffy firmware, or in the case of L3 switch when a route is configure between them.
(Blending could have been a typo)...

In his case the router/firewall between VLAN 100 and VLAN 101 is filtering and allowing access to the internet (connected to VLAN 100).
item 4 & 5 of the list in the question.
Even if one wants to on L2 switches a router is needed to go from one VLAN to another. (Basicly on L3 switches a router is needed as well, but they have routers built in, so no external HW required).
Fing wongAuthor Commented:
Thanks for your help.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.