mattpant Posted February 19, 2011 Posted February 19, 2011 Hi All... I know there are many posts on this topic, but all seem to be a little confusing and seem to be a million and one different answers to the same kind of questions, so appologies up front for another post on this topic... Half Term is here so I am wanting to setup some VLANS in our school to try and reduce the amount of broadcast/network traffic going around the place... whee should I start?!? The majority of our network switches are the D-Link DGS Series (1248T/1224T and 1216T) We have one flat vanilla network at the mo... We have Network Data Projectors in the classrooms, that allow the staff to connect their tablet PC's wirelessly (Some projectors have Cat5 Network leads connected to them, some are wireless, they are all the same type of projector, all staff access the network wirelessly using Ruckus Wireless) We have 4 main IT rooms, a 6th Form study room and a library suite. We have an admin server that has SIMS installed on it and, Curriculum server which does all the Grou Policys/Print Server/DNS/DHCP etc etc for everybody and a storage server that has all the home drives/share drives etc for Staff and Pupils How should I plan for a VLAN with this setup? Should I create a VLAN for each IT Room? Should I create a VLAN for all IT Rooms together? Should I create a VLAN for all the Network Projectors? How would this work if some were on the wireless network? Any pointers would be great... and please let me know if you require any further info about our setup for this to work... Staff would need access to, Curriculum Server/Admin (SIMS) Server and Storage Server... Pupils only need to be able to see Curriculum and Storage Server... Cheers Matt
featured_spectre Posted February 19, 2011 Posted February 19, 2011 VLAN based on servers and IP ranges, not based on rooms, otherwise that will get too confusing. If you do it based on IP ranges, you can set your wireless to have VLANS based upon the SSID they connect too We did that with our Ruckus and 3COM stuff Works a treat
localzuk Posted February 19, 2011 Posted February 19, 2011 I created VLANs for each IT room, then one for wifi, one for our phone system, one for servers, one for admin machines and then a final one for general machines - so any random ones floating around. They're assigned by MAC address, rather than manually setting up ports, and it works quite nicely.
featured_spectre Posted February 19, 2011 Posted February 19, 2011 There you go...2 examples of how different vlan systems work well :-)
CyberNerd Posted February 19, 2011 Posted February 19, 2011 start with a topology diagram (enclosed our example) then configure the DHCP, then the core switches, then the edge switches, add the vlans to you AD and jobs a good'un.network topology.pdf 4
IanT Posted February 20, 2011 Posted February 20, 2011 I believe its better for create VLANS based on devices not rooms, I did this at my place: VLANS: CLIENTS (WIRED) CLIENTS (WIRELESS) CASHLESS (CANTEEN SYSTEM) VOIP (PHONE SYSTEM) PRT (PRINTERS) MGMT (SWITCHES) VID (IP TV SYSTEM) SVR (Servers) We have a nice layer 3 HP ProCurve Switch 5406zl (J8697A) core.
localzuk Posted February 20, 2011 Posted February 20, 2011 I believe its better for create VLANS based on devices not rooms, I did this at my place: VLANS: CLIENTS (WIRED) CLIENTS (WIRELESS) CASHLESS (CANTEEN SYSTEM) VOIP (PHONE SYSTEM) PRT (PRINTERS) MGMT (SWITCHES) VID (IP TV SYSTEM) SVR (Servers) We have a nice layer 3 HP ProCurve Switch 5406zl (J8697A) core. Problem there is, you still end up with a massive number of 'clients' in your wired area... If we did that at our place, whenever we did a ghosting, the entire vlan would crawl due to it.
IanT Posted February 20, 2011 Posted February 20, 2011 Problem there is, you still end up with a massive number of 'clients' in your wired area... If we did that at our place, whenever we did a ghosting, the entire vlan would crawl due to it. We don't have that problem at all.
featured_spectre Posted February 20, 2011 Posted February 20, 2011 depends on the size of the establishment i would suppose
CISCODISCO Posted February 20, 2011 Posted February 20, 2011 (edited) It really does depend on your organisation and there is no right or wrong way of what to use VLAN's for but work out what you want the VLAN's to achieve. Definetly one for VOIP though. There are two types of VLAN implementation: Local VLAN's- Local to that switching closet. End-to-end VLAN's- organisation wide. Cisco now recommend using Local VLAN's there are advantages and disadvantage to both along with best practices. One reason for the change is Layer 3 distribution. I tend to go for the functionality route. How about: VLAN for IT roos VLAN for Library VLAN for administration and staff room VLAN for sixth form VLAN for humanities VLAN for ..... Anyway hope it helps. Edited February 20, 2011 by CISCODISCO VLAN types
mattpant Posted February 21, 2011 Author Posted February 21, 2011 Thanks for all the replies soo far... I'm still at a slight loss of what to do! I've printed out the manual tonight for the switches to see what it says... I might try with one area of the school first (or one IT Suite) and see how I get on. Do I need to do anything special to the servers/printers as I would need all VLANS to be able to see and connect to these machines. Thanks Matt
nicholab Posted February 21, 2011 Posted February 21, 2011 (edited) Note the L3 core switch will become the default gateway. You need to set this to set default gateway on the switch to 0.0.0.0 0.0.0.0 192.168.1.254 where the internet router is 192.168.1.254 Edited February 21, 2011 by nicholab
teejay Posted February 21, 2011 Posted February 21, 2011 Where you should start is doing some analysis on your network using Wireshark to find out what are causing the problems. VLANS aren't the whole solution, you need to clear out any unnecessary traffic first as you'll still have loading on your switches from this, even if you implement VLANs.
K.C.Leblanc Posted February 22, 2011 Posted February 22, 2011 They're assigned by MAC address, rather than manually setting up ports, and it works quite nicely. How do you do that?
CyberNerd Posted February 22, 2011 Posted February 22, 2011 How do you do that? Use RADIUS Authenticated Device Access (RADA) ie you can authenticate devices based on their MAC address against a RADIUS server, and then automatically assign VLAN ID's and ACL's
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now