Quick VLAN Question regarding router

[snagrat]

Just a quick one....

 

Would anything need to be done on the router (managed by SWGfL) if I wanted to experiment with VLAN routing?

 

I'm thinking no

[twin--turbo]

Yes most probably if you want them to have internet.

 

The router will be expecting perhaps one subnet. without knowing about the other subnets with static routing it will assume all unknown adresses are out it's default route and in the instance of a private subnet they would be dropped.

 

So the GFL need to add a static route for each vlan. You maybe lucky and they have pointed the whole of each private subnet range at whatever your internal L3 device is.

 

Do you have a firewall between you and the GFL router??

 

TT

[FN-GM]

Unless you breakdown your existing subnet you will need to make changes to the router yes.

[twin--turbo]

Having said the above...

 

You could always have a PROXY server with two lans, one on the GFL and one on your new routable VLANS.

 

That's how we had it from 2000-2008 until we moved from the GFL. In fact we continued more or less the same even afterwards even though we had full control of our internal and external routing.

 

TT

[snagrat]

Unless you breakdown your existing subnet you will need to make changes to the router yes.

 

Yes I plan on taking a /23 and creating 2x /24 subnets.

 

So I won't have to make changes to the router.

 

Thanks

[FN-GM]

Yes I plan on taking a /23 and creating 2x /24 subnets.

 

So I won't have to make changes to the router.

 

Thanks

 

You will be ok then.

 

What you will need to add a static route in your L3 switch pointing to your LA router. What make of L3 switch do you have?

 

Something like this will work. Put the router the IP address falls in. In this case its VLAN 10.

Edited December 31, 2015 by FN-GM

[snagrat]

It'll be a Dlink switch of some sort.

 

I actually have an additional interface on the router configured so I can fully play before putting into production.

 

I'll get it working through the L3 switch first and then attempt to add some L2 to the setup.

 

Is one L3 switch enough when adding more and more remote buildings?

[FN-GM]

Are you sure that additional interface is configured?

 

How are these remote buildings connected?

[snagrat]

Yes additional interface works. Currently I use it for guest access so is on a completely different IP range etc.

 

All buildings are via 10GB fibre

[FN-GM]

Oh right you will be fine having 1 L3 switch then. Its the best way to go with your limitations as well. I thought you remote buildings where over slower WAN links, if that was the case the design would need something else.