vlan design issue on HP procurve 5406zl

[puliramesh]

Hi members...

 

i am a new bee here.. i need a help.. i am working on one five star hotel networking project. find the attached network diagram.

 

9 floors are there. we have a 2 HP 5406zl switch in server room. HP 2610 switches are there in each floor. Nine HP 2610 switches are connected to first HP 5406 through fiber. Another nine HP 2610 switches are connected to second HP 5406 switch through fiber. guest vlan, admin vlan, wifi vlans are created in every 2610 switch. same vlans are there in both 5406 switch. i have created vlan trunk between 2610 to 5406.

 

Above both HP 5406 switch, we have firewall and router. My question is, do i need to connect the both 5406 switches through vlan trunk and then connect one 5406 to firewall. whether this will create any loop.

 

Second question is, i have a guest vlan. guest users machine should not communicate with each other. i heard about one port isolation concept. please somebody elaborate how to do that....

 

Thx in advance...

Edited June 24, 2010 by puliramesh
adding a new diagram

[puliramesh]

pls someone out there... have a look and advice me

 

my network diagram is shared in the below link,

 

http://networkdiagram.weebly.com/

Edited June 24, 2010 by puliramesh
to add extra content

[puliramesh]

pls help me

[AIT]

First Question:

If you mean connect Core Switch one on the left to Core Switch to then yes you are correct you do (as in the diagram)

 

Second Question:

IT's called Virtual Switch Port Isolation: It provides a security mechanism that restrict guest-to-guest communications within a virtual switch.

What I dont know is if your switches support this.

[puliramesh]

Virtual switch port isolation?.. I checked with HP support. That tech support guy unaware of it.. anyway really thanks..