+ Post New Thread
Results 1 to 15 of 15
Wireless Networks Thread, Setting up VLANS in Technical; Hi All... I know there are many posts on this topic, but all seem to be a little confusing and ...
  1. #1

    Join Date
    Aug 2005
    Location
    Shropshire
    Posts
    292
    Thank Post
    17
    Thanked 11 Times in 8 Posts
    Rep Power
    21

    Setting up VLANS

    Hi All...

    I know there are many posts on this topic, but all seem to be a little confusing and seem to be a million and one different answers to the same kind of questions, so appologies up front for another post on this topic...

    Half Term is here so I am wanting to setup some VLANS in our school to try and reduce the amount of broadcast/network traffic going around the place... whee should I start?!?

    The majority of our network switches are the D-Link DGS Series (1248T/1224T and 1216T)

    We have one flat vanilla network at the mo...

    We have Network Data Projectors in the classrooms, that allow the staff to connect their tablet PC's wirelessly (Some projectors have Cat5 Network leads connected to them, some are wireless, they are all the same type of projector, all staff access the network wirelessly using Ruckus Wireless)

    We have 4 main IT rooms, a 6th Form study room and a library suite.
    We have an admin server that has SIMS installed on it and, Curriculum server which does all the Grou Policys/Print Server/DNS/DHCP etc etc for everybody and a storage server that has all the home drives/share drives etc for Staff and Pupils

    How should I plan for a VLAN with this setup?

    Should I create a VLAN for each IT Room? Should I create a VLAN for all IT Rooms together?

    Should I create a VLAN for all the Network Projectors? How would this work if some were on the wireless network?

    Any pointers would be great... and please let me know if you require any further info about our setup for this to work...

    Staff would need access to, Curriculum Server/Admin (SIMS) Server and Storage Server...

    Pupils only need to be able to see Curriculum and Storage Server...


    Cheers

    Matt

  2. #2

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,179
    Thank Post
    1,648
    Thanked 1,973 Times in 1,445 Posts
    Blog Entries
    2
    Rep Power
    443
    VLAN based on servers and IP ranges, not based on rooms, otherwise that will get too confusing. If you do it based on IP ranges, you can set your wireless to have VLANS based upon the SSID they connect too

    We did that with our Ruckus and 3COM stuff Works a treat

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,941
    Thank Post
    519
    Thanked 2,499 Times in 1,940 Posts
    Blog Entries
    24
    Rep Power
    840
    I created VLANs for each IT room, then one for wifi, one for our phone system, one for servers, one for admin machines and then a final one for general machines - so any random ones floating around.

    They're assigned by MAC address, rather than manually setting up ports, and it works quite nicely.

  4. #4

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,179
    Thank Post
    1,648
    Thanked 1,973 Times in 1,445 Posts
    Blog Entries
    2
    Rep Power
    443
    There you go...2 examples of how different vlan systems work well :-)

  5. #5


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    start with a topology diagram (enclosed our example)
    then configure the DHCP, then the core switches, then the edge switches, add the vlans to you AD and jobs a good'un.
    Attached Files Attached Files

  6. 4 Thanks to CyberNerd:

    cheesypete (30th May 2012), FragglePete (25th February 2011), jpaterson (16th April 2012), themightymrp (1st March 2011)

  7. #6
    IanT's Avatar
    Join Date
    Aug 2008
    Location
    @ the back of my server racks farting.....
    Posts
    1,891
    Thank Post
    2
    Thanked 118 Times in 109 Posts
    Rep Power
    60
    I believe its better for create VLANS based on devices not rooms, I did this at my place:

    VLANS:

    CLIENTS (WIRED)
    CLIENTS (WIRELESS)
    CASHLESS (CANTEEN SYSTEM)
    VOIP (PHONE SYSTEM)
    PRT (PRINTERS)
    MGMT (SWITCHES)
    VID (IP TV SYSTEM)
    SVR (Servers)

    We have a nice layer 3 HP ProCurve Switch 5406zl (J8697A) core.

  8. #7

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,941
    Thank Post
    519
    Thanked 2,499 Times in 1,940 Posts
    Blog Entries
    24
    Rep Power
    840
    Quote Originally Posted by IanT View Post
    I believe its better for create VLANS based on devices not rooms, I did this at my place:

    VLANS:

    CLIENTS (WIRED)
    CLIENTS (WIRELESS)
    CASHLESS (CANTEEN SYSTEM)
    VOIP (PHONE SYSTEM)
    PRT (PRINTERS)
    MGMT (SWITCHES)
    VID (IP TV SYSTEM)
    SVR (Servers)

    We have a nice layer 3 HP ProCurve Switch 5406zl (J8697A) core.
    Problem there is, you still end up with a massive number of 'clients' in your wired area... If we did that at our place, whenever we did a ghosting, the entire vlan would crawl due to it.

  9. #8
    IanT's Avatar
    Join Date
    Aug 2008
    Location
    @ the back of my server racks farting.....
    Posts
    1,891
    Thank Post
    2
    Thanked 118 Times in 109 Posts
    Rep Power
    60
    Quote Originally Posted by localzuk View Post
    Problem there is, you still end up with a massive number of 'clients' in your wired area... If we did that at our place, whenever we did a ghosting, the entire vlan would crawl due to it.
    We don't have that problem at all.

  10. #9

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,179
    Thank Post
    1,648
    Thanked 1,973 Times in 1,445 Posts
    Blog Entries
    2
    Rep Power
    443
    depends on the size of the establishment i would suppose

  11. #10

    Join Date
    Jan 2011
    Posts
    14
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    VLAN's

    It really does depend on your organisation and there is no right or wrong way of what to use VLAN's for but work out what you want the VLAN's to achieve. Definetly one for VOIP though.

    There are two types of VLAN implementation:

    Local VLAN's- Local to that switching closet.

    End-to-end VLAN's- organisation wide.

    Cisco now recommend using Local VLAN's there are advantages and disadvantage to both along with best practices. One reason for the change is Layer 3 distribution.

    I tend to go for the functionality route.

    How about:

    VLAN for IT roos
    VLAN for Library
    VLAN for administration and staff room
    VLAN for sixth form
    VLAN for humanities
    VLAN for .....

    Anyway hope it helps.
    Last edited by CISCODISCO; 20th February 2011 at 08:09 PM. Reason: VLAN types

  12. #11

    Join Date
    Aug 2005
    Location
    Shropshire
    Posts
    292
    Thank Post
    17
    Thanked 11 Times in 8 Posts
    Rep Power
    21
    Thanks for all the replies soo far... I'm still at a slight loss of what to do!

    I've printed out the manual tonight for the switches to see what it says... I might try with one area of the school first (or one IT Suite) and see how I get on.

    Do I need to do anything special to the servers/printers as I would need all VLANS to be able to see and connect to these machines.

    Thanks

    Matt

  13. #12
    nicholab's Avatar
    Join Date
    Nov 2006
    Location
    Birmingham
    Posts
    1,511
    Thank Post
    4
    Thanked 98 Times in 94 Posts
    Blog Entries
    1
    Rep Power
    52
    Note the L3 core switch will become the default gateway. You need to set this to set default gateway on the switch to 0.0.0.0 0.0.0.0 192.168.1.254 where the internet router is 192.168.1.254
    Last edited by nicholab; 21st February 2011 at 07:58 PM.

  14. #13

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,188
    Thank Post
    285
    Thanked 775 Times in 585 Posts
    Rep Power
    336
    Where you should start is doing some analysis on your network using Wireshark to find out what are causing the problems. VLANS aren't the whole solution, you need to clear out any unnecessary traffic first as you'll still have loading on your switches from this, even if you implement VLANs.

  15. #14


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126
    Quote Originally Posted by localzuk View Post
    They're assigned by MAC address, rather than manually setting up ports, and it works quite nicely.
    How do you do that?

  16. #15


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Quote Originally Posted by K.C.Leblanc View Post
    How do you do that?
    Use RADIUS Authenticated Device Access (RADA) ie you can authenticate devices based
    on their MAC address against a RADIUS server, and then automatically assign VLAN ID's and ACL's

SHARE:
+ Post New Thread

Similar Threads

  1. Setting network save setting in Kar2ouche
    By Little-Miss in forum Windows
    Replies: 3
    Last Post: 12th December 2011, 03:44 PM
  2. VLANs
    By tmcd35 in forum How do you do....it?
    Replies: 16
    Last Post: 7th December 2009, 03:21 PM
  3. Vlans
    By Sunderwood in forum Wireless Networks
    Replies: 6
    Last Post: 30th August 2008, 03:13 PM
  4. VLANs?
    By GoldenWonder in forum Wireless Networks
    Replies: 14
    Last Post: 19th August 2008, 07:41 PM
  5. Vlans
    By strawberry in forum Wireless Networks
    Replies: 2
    Last Post: 4th October 2007, 02:09 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •