Setting up a VLAN

[zag]

So I'd like to setup a vlan for our BYOD network to run on.

 

What's the best way to do this?

 

We currently have netgear GS724T managed switches around the school but I don't mind upgrading them to HP Procurves if needed.

 

I'm interested in how others are doing this?

[timbo343]

We have a smoothie for issuing DHCP and acting as our layer3 device.

 

I have 4 different SSIDs:

 

Staff BYOD / Post16 BYOD / Main Domain / Guests. Nothing for Yr 7 - 11 though.

 

This is how i have done it.. http://www.edugeek.net/forums/how-do-you-do/109684-byod-smoothwall-ruckus-3.html

[zag]

Thats a really nice guide and pretty much what I had planned.

 

But how do I actually setup the VLAN in the first place? I think thats my first task.

 

What do I need hardware wise? Are the netgear switches good enough do you think?

[timbo343]

Have you got a layer 3 switch or a router that can manage VLANs?

[IrritableTech]

Depends if you need things routing or not. The GS724T will not route, it's layer 2 only I believe.

 

If you don't have anything to route the traffic, you'll need two dhcp servers (or one with 2 nics), two routers to access the internet (or one with 2 ports)... but if you want access to internal stuff (wifi portal, vle, email etc.) then you'll need to think again.

 

If you want to upgrade to something like procurve, you'll need fairly deep pockets to get something layer 3 and which can act as a router for you. But then your netgears should be able to handle the traffic on the edges of your network.

 

What wifi kit are you running?

[zag]

We're running Aruba, there is an option to forward our guest network to a different ip range on a vlan.

 

Its currently running on the same network and I'm worried about the level of access our BYOD users have to the network servers.

 

Its actually getting the vlan setup that is confusing me.

[twin--turbo]

how is your internet provided as your edge router needs to know about all your internal networks.

 

Rob

[MicrodigitUK]

Have a read through these two sets of notes. It might help you get your head round the setup.

 

http://www.rm.com/_RMVirtual/Media/Downloads/Switch_configuration.pdf

 

http://www.rm.com/_RMVirtual/Media/Downloads/Notes-BYOD.pdf

 

Hope that helps you.

[zag]

how is your internet provided as your edge router needs to know about all your internal networks.

 

Rob

 

Standard BT 100mbit with smootwall as the firewall and filter.

 

It has 4 interfaces so that bit should be easy enough I reckon.

 

Guess I need to read up a bit on netgear vlans!

[IrritableTech]

Sounds to me like you have everything you need. I've set up a basic pair of VLANs on those switches - it was fairly straight forward. You just need to create an ID and name, then tag ports... IEEE 802.1Q VLAN Example Configuration

 

Ports connected to end devices will need to be 'untagged' in the correct vlan. Ports used to interconnect switches, and connect to your access points will need to be 'tagged' in the two VLANs (school machines & BYOD).

 

Then you should be able to setup another interface on your smoothwall and set your filtering policies. I haven't got a SW, but I'm fairly sure you should be able to get it to be your dhcp server, and allow access to internal services if you want to.

 

Once you have the basics setup, you might want to look at different vlans for different levels of filtering on your BYOD network.