Hi All,
I am trying to get my head around VLANs and can do with some pointers/advice. Currently I have a “flat” (no VLANs) network with Cisco 200/500 switches, 3 computer rooms with some printers and other wired PCs dotted around; Ruckus wireless with internal and guest (BYOD) networks and few IP CCTV cameras (nothing major). In the next 12-16 months we are planning some changes, not as much on wired network but more wireless devices (Chromebooks and laptops – will get to about 700+), new IP CCTV and new VOIP phone system.
Obvious choice is to set three VLANs – computer network, CCTV and VOIP. There are plenty of guides and tutorials for setting them up, I already started testing it, and it works fine. But I’ve got couple of questions:
1 - Should I separate wired and wireless networks? If not, then all is fine, if yes then second question
2 – When I create different VLANs, the networks become completely separate from each other. So what do I need to do if I what to login to the domain or access printer/Internet (server/printer/proxy are on wired VLAN) from my wireless VLAN or if I want to connect from my PC (wired VLAN) to CCTV controller (CCTV VLAN) and VOIP controller (VOIP VLAN)?
If my understanding correct that I would have to route my traffic through Router or Layer 3 switch (it looks like there are advantages and disadvantages for both but I am leaning towards a switch as it doesn't need to strip the packets and a bit faster)? Does every switch have to be layer 3 or just one? Would Cisco Catalyst 3560-CX be good enough or do I need something different?
Or am I missing something and need a different approach?
Thank you for your help.