Layer 3 switch configuration

[Guest Guest]

We're replacing our supplier provided router with an L3 switch later this week, I'm pretty sure I know what I'm doing, however, if anyone could give my plan the once over that'd be much appreciated

 

We're not so much replacing it but having it reconfigured to provide an L3 point to point link with a /30 and hosting the gateway IPs ourselves to allow for the creation of VLANs

 

1) Create VLANs and assign addresses in the desired subnets

2) Create static routes for each subnet back to the supplier provided router

3) Create ACLs so as to restrict traffic flow between VLANs

 

 

Any help is greatly appreciated

[steve]

Anything using UDP protocols that needs forwarding between your subnets - DHCP, TFTP, time protocol, etc. on Cisco its "ip forward-protocol"

[FN-GM]

Can you clarify point 2? You shouldn't have to create a route for each of your subnet. You should just need to create 1 for the desired destination subnet.

[Guest Guest]

Can you clarify point 2? You shouldn't have to create a route for each of your subnet. You should just need to create 1 for the desired destination subnet.

Of course you do, having a dumb moment

[Davit2005]

You may need a route back to each subnet from the supplier router otherwise return traffic will not be able to be routed back. Or you maybe able to do a summary route depending on your internal subnets so something to think about in the design process. I've done a summary route on my VDSL router at home for IPv6 as it made it a hell of a lot easier than doing individual routes.

 

We use static routes from the firewall to the main 2 core switches then OSPF internally as we have at least 1000 vlans, no joke. Not all our vlans have internet connectivity i.e. VOIP, desktop IP printers, Access points, BMS, CCTV, etc.

Edited July 23, 2020 by Davit2005

[Guest Guest]

You may need a route back to each subnet from the supplier router otherwise return traffic will not be able to be routed back. Or you maybe able to do a summary route depending on your internal subnets so something to think about in the design process. I've done a summary route on my VDSL router at home for IPv6 as it made it a hell of a lot easier than doing individual routes.

 

We use static routes from the firewall to the main 2 core switches then OSPF internally as we have at least 1000 vlans, no joke. Not all our vlans have internet connectivity i.e. VOIP, desktop IP printers, Access points, BMS, CCTV, etc.

That's all dealt with by our ISP