Switch redundency

I would like to have switch redundency for LAN and WAN segments and I am planning to implement this as shown in the attached diagram. Any recommendation is appreciated.
Also what is the best way to manage the switch in public segment as assigning public IP is not recommended to the switch.

Looks OK. It's not on your diagram so I don't know if you were going to do it, but you can trunk between your switches and your firewalls too. This way you can have many DMZs over one physical link (bandwidth permitting).
You can safely put some IP addresses on the public switches in the provate range and create a DMZ for administration and only allow ssh access to the switches for example. Turn of things like cdp and put access-lists also on the switches i.e. you don't need punlic IP addresses on the switches. With access-lists and username/passwords (with radius or tacacs if you have it - but you will have to remeber to allow that through the firewall as well), provate IPs, and in a DMZ for admin, you should be ready to go.
Regards,
Ian

Similar Messages

CNA & "switch redundant power supply"

Just configured trunking between these switches:
2950T-48-SI
3508G-XL
3548-XL
The traffic appears to be flowing correctly through both the default VLAN and also my additional VLAN.
Now, ALL of the 2950 switches on my network display this message: "switch redundant power supply failed" when I connect to them using the Cisco Network Assistant.
Seems like the error message must be related somehow to the VLAN configuration I did.
In a nutshell, I configured all connected Gigabit ports this way:
switchport mode trunk
switchport trunk encapsulation dot1q
I only configured SOME of my switches for the trunking and additional VLAN - must all of them be configured the say way, even if I don't anticipate needing the additional VLANS on those switches?
Thanks, Susan

Hi Susan,
Do you have redundant power supplies connected to the 2950s?
If not, you are probably running into a cosmetic bug, CSCee96721.
We can confirm this by issuing a "show env" in the CLI.
You should see something like this:
"switch#sho env all
FAN is OK
Internal POWER supply is OK
RPS is NOT present
RPS is FAULTY"
Note that the last line indicates that the RPS is faulty, even though the line above it indicates that no RPS is present.
If that applies to you as well, then you are hitting this bug. CNA is polling the same information, which is why you are seeing "switch redundant power supply failed" in CNA.
The fix is in 12.1(22)EA3 and later.
HTH,
Bobby
*Please rate helpful posts.

Dedicated switches needed for RAC interconnect or not?

Currently working on an Extended RAC cluster design implementation, I asked the network engineer for dedicated switches for the RAC interconnects.
Here is a little background:
There are 28 RAC clusters over 2X13 physical RAC nodes with separate Oracle_Home for each instance with atleast 2+ instances on each RAC node. So 13 RAC nodes will be in each site(Data-Center). This is basically an Extended RAC solution for SAP databases on RHEL 6 using ASM and Clusterware for Oracle 11gR2. The RAC nodes are Blades in a c7000 enclosure (in each site). The distance between the sites is 55+ kms.
Oracle recommends to have Infiniband(20GBps) as the network backbone, but here DWDM will be used with 2X10 Gbps (each at 10 GBps) links for the RAC interconnect between the sites. There will be separate 2x1GBps redundant link for the Production network and 2x2 GBps FC(Fiber-Channel) redundant links for the SAN/Storage(ASM traffic will go here) network. There will be switches for the Public-production network and the SAN network each.
Oracle recommends dedicated switches(which will give acceptable latency/bandwith) with switch redundancy to route the dedicated/non-routable VLANs for the RAC interconnect (private/heartbeat/global cache transfer) network. Since the DWDM interlinks is 2x10Gbps - do I still need the dedicated switches?
If yes, then how many?
Your inputs will be greatly appreciated.. and help me take a decision.
Many Thanks in advance..
Abhijit

Absolutely agree.. the chances of overload in a HA(RAC) solution and ultmate RAC node eviction are very high(with very high latency) and for exactly this reason I even suggested inexpensive switches to route the VLANs for the RAC interconnect through these switches. The ASM traffic will get routed through the 2x2GB FC links through SAN-Directors (1 in each site).
Suggested the network folks to use Up-links from the c7000 enclosure and route the RAC VLAN through these inexpensive switches for the interconnect traffic. We have another challenge here: HP has certified using VirtualConnect/Flex-Fabric architecture for Blades in c7000 to allocate VLANs for RAC interconnect. But this is only for one site, and does not span Production/DR sites separated over a distance.
Btw, do you have any standard switch model to select from.. and how many to go for a RAC configuration of 13 Extended RAC clusters with each cluster hosting 2+ RAC instances to host total of 28 SAP instances.
Many Thanks again!
Abhijit

HSRP with layer 2 switching

I configure HSRP on two layer 3 switches (Switch A-Switch B), Sw A is connected to Router A, Sw B is connected to Router B
But I want to use also the Layer two features of my switch
- is it possible to use these switches also for LAN ?
lets say there is a simple LAN with 1 VLAN and 10 PCs. PCs have two ethernet ports, they are directly connected to L3 switches redundantly.
thanks for helping

thanks Martin
I want all of my PCs (total ten) in the same subnet
so what should I do is:
1. configure 10 ports of the L3 switch as switchport under VLAN 1 (these ports will conect ten PCs on the same subnet)
One port of Switch A will be connected to router A (2610),
One port of Switch B will be connected to router B (2610). So;
2. Configure one port of the each L3 switches as 'no switch port' and assign IP addresses. Since they are not switchports, I shouldnt create VLAN for them.
3. Configure HSRP
4. Configure EIGRP or OSPF
AFTER ALL: there is one VLAN that connects all PCs,there is one Layer 3 port on each Switches. And systems work :-)
Could you please confirm If I properly understand your post?
thank you very much for helping

Switch Logs _Power supply

Hi ,
Can anyone tell me why we got following logs on Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(55)SE3, RELEASE SOFTWARE (fc1)?
Help me out.
Mar 26 14:58:04.456 IST: %PLATFORM_ENV-1-FRU_PS_ACCESS: FRU Power Supply is not responding
Mar 26 14:58:07.719 IST: %PLATFORM_ENV-1-FRU_PS_SIGNAL_FAULTY: POWER_GOOD signal on power supply 1 is faulty
Mar 26 14:58:12.743 IST: %PLATFORM_ENV-1-FRU_PS_SIGNAL_OK: POWER_GOOD signal on power supply 1 is restored.
Regards,
Rohan

Hi Susan,
Do you have redundant power supplies connected to the 2950s?
If not, you are probably running into a cosmetic bug, CSCee96721.
We can confirm this by issuing a "show env" in the CLI.
You should see something like this:
"switch#sho env all
FAN is OK
Internal POWER supply is OK
RPS is NOT present
RPS is FAULTY"
Note that the last line indicates that the RPS is faulty, even though the line above it indicates that no RPS is present.
If that applies to you as well, then you are hitting this bug. CNA is polling the same information, which is why you are seeing "switch redundant power supply failed" in CNA.
The fix is in 12.1(22)EA3 and later.
HTH,
Bobby
*Please rate helpful posts.

SG500 LAG over multiple switches

Hello, does SG500 support LAG with ports on multiple switches? I would like to stack a pair of SG500 and connect each client to both using LACP in order to achieve switch redundancy.

Hi Christopher,
Thank for your reply, could you help me out at the same time while testing the performance of a LACP over two switches of one stack?
Could you connect a SGE2000 switch with four CAT6 UTP cables to the SG500 stack (two cables to each switch of the stack) and test why the SGE2000 switche dont work correctly as simple access switches for end systems like desktops (the ports take very long to go into forwarding and it seems the LACP port on the SG500 stack turns off and on). When the ports start forwarding the connection is stable but i never had this with sg300-52 or srw2048 switches in the same setup. I added my configs and question here: https://supportforums.cisco.com/message/4155309#4155309
Thanks in advance,
Jelle

How to define the HP LaserJet 1100 Series(SHARP AR-M550U )?

Hi,
Once the SHARP AR-M550U got plugged to my HP laptop on which Windows 7 Home 64BIT is installed, this screen shot showed me.
I have checked for drivers using Windows Update. But it didn't find any. As this screen shot below.
I don't have the drivers disc which came from manufacture.
This is hardware ID for SHARP AR-M5501UB104
I have googled for USBPRINT\SHARP AR-M5501UB104, but no results showed.
Also, What new featuers are there in HP LaserJet 1100 Series(SHARP AR-M550U ) different from other HP LaserJet P2015 PCL6 and HP laserJEt Professional P1102?

could anyone please reply to me since I am in an urgent need for using this this photocopier.
By entering my Enter product name/number, which is SHARP AR-M550U and pressing 'serach', these results found:
Product search resultsSoftware & driver downloads
Results for "sharp ar-m550u" (22 products)
HP NC550m 10Gb 2-port PCIe x8 Flex-10 Ethernet Adapter
HP NC550m 10Gb 2-port PCIe x8 Flex-10 Ethernet Adapter
HP Pavilion t500 Desktop PC series
HP Pavilion t550m Desktop PC
HP SFP and Mini-GBIC BX10-U Transceivers
HP X115 100M SFP LC BX 10-U Transceiver
HP SFP and Mini-GBIC SX Transceivers
HP X126 1Gb/s SFP LC SX MM 550m 850nm Transceiver
HP Networking Switch Redundant Power Cords
HP X290 500 U 1m RPS Cable
Micron M550 256GB mSATA-3 Solid State Drive
Micron M550 256GB mSATA-3 Solid State Drive
HP Tape Drive SAS Cables
HP 1U SAS Ext-Min 1x-4m Cable Assembly Kit
HP 1U SAS TP I-E 3HDDs X 1Tape Drive X4M Server Cable Assembly Kit
HP SFP and Mini-GBIC BX-U Transceivers
HP 114 100M SFP LC BX-U Transceiver
HP X112 100M SFP LC BX-U Transceiver
HP 3PAR Drive Chassis
HP M6710 2.5 inch 2U SAS Drive Enclosure
HP M6720 3.5 inch 4U SAS Drive Enclosure
HP SecPath Licenses
HP SecPath U200-M 1 Year Anti-spam Service License
HP SecPath U200-M 1 Year Anti-virus Update License
HP SecPath U200-M 1 Year IPS Update License
HP SecPath U200-M 1 Year Web Content Filter Service License
HP StoreFabric Premier Flex OM4 Cables
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 4M Cable
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 6M Cable
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 10M Cable
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 25M Cable
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 50M Cable
HP Premier Flex LC/LC LSZH 50/125u OM4 MM 1.6mm Zipcord Short-boot 100M Cable
I am quite confused which ones should be installed to define the SHARP AR-M550U on my HP laptop on which Windows 7 64bit is installed.

Designing a new small network

Hi,
We are in process of starting our new branch office. This office has one 1841 router, two 3750 switch and 3 Cat500 switch. Could anyone give the best possible way to connect it together . Requirements are Core switch redundancy,VLANs must be enabled,DSL connection to established. Diagram of the network has been attached.
Thanks in advance

One recommendation for connecting your devices would be to "stack" the pair of 3750 and connect one uplink from each Cat500 to each 3750. The pair of uplinks from each Cat500 to the 3750 stack would be configured as a Etherchannel. If you plan on having multiple VLANs extended to the CAT500s, then the Etherchannel would be also configured as a trunk.
You didn't note the particular model of Cat500 or 3750. Hopefully you'll be able to run the Cat500 uplinks at gig speed. Copper if distance permits, otherwise fiber.
If you will have multiple VLANs within the 3750 stack, enable routing. (If you only have one internal subnet, you could do all your routing on the 1841, but would still be good to enable routing on the 3750 stack, better positions you for routing between LAN VLANs.)
Between the 3750 stack and the 1841, again you should run a link from each of the 1841's Ethernet ports to each member of your dual 3750 stack. You can Etherchannel between some 2800/3800 Ethernet ports and 3750s, don't know whether this could be done with your 1841. If it could, beside making an Etherchannel between the 1841 and 3750 stack, you could also trunk all VLANs to the 1841 (I assume it supports trunks). The 3750 would be the default gateway for your VLANs with a default route to the 1841.
If it's not possible to Etherchannel between the 3750 stack and the 1841, you'll need to route across both links. If the number of subnets is small, you might just use static routes, or perhaps RIP.

ESXi Management not working with SG500 LAG

I am setting up a 3 host ESXi cluster. I am using a pair of stacked SG500-28 switches for switching redundancy. Each host has 8 NICs. 4 to each switch. I have successfully setup a 3 NIC LAG with 1 path to one switch and 2 paths to the other. These LAGs work. When I setup a 2NIC LAG via the console for management, and the associated ports on the switches, I lose managment communication with the host. Before setting up the LAG in the ESXi console, I set that vswitch properties to us IPHASH as instructed here bit.ly/VLaTEt I have attempted to follow those instructions as closely as possible. The one thing that I am wondering is whether the SG series supports etherchannel. I can't find any reference. Either way, it works on the other vswitch that is for vMotion. I can vmkping between the hosts over that LAG. But setting up a LAG on the management vSwitch doesn't?
Thanks,
Stephen

Port Management > Link Aggregation > LAG Management.
MAC Address—Perform load balancing by source and destination MAC
addresses on all packets.
• IP/MAC Address—Perform load balancing by the source and destination IP
addresses on IP packets,
Here's a good document
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1001938
Enabling either Route based on IP hash without 802.3ad aggregation or vice-versa disrupts networking, so you must make the changes to the virtual switch first. That way, the service console is not available, but the physical switch management interface is, so you can enable aggregation on the ports involved to restore networking.
-Tom
Please mark answered for helpful posts

Vpc topology help for nexus 7k

hi team,
i have attached topology 1 and topology 2 for nexus 7k for vpc scenario.
Access switches got only 2 x 10 g capacity to Nexus switches.
What are the benefits in topology 1 and topology?
In topology 2, inter-switch links can be possible only through gigabit link rather than 10G links.

Hi Sampath,
Both topology looks good.
The only thing which i can say is that the topology 2 is awesome as you would have the Access switch redundancy available, Were as in Top1 you dont have that.
Incase something breaks down(Example: Links to the Nexus goes down from Switch1 you would have the backup way to reach the external network using switch 2.)
HTH
Regards
Inayath.

Cluster VMs not accessible from other node hyper-v 2012 r2

I have implementing 3 node cluster using Windows server 2012 r2 hyper-v environment, Scenario as below....
3 HP server, every server 4 NIC`s, i made team using 4 NIC`s, and Cisco switch port configured as ether-channel and trunk port.
cluster up and running across all node, suddenly i have faced that i can`t access VM when its not on the same node from where i am accessing Cluster manager. but i can access that VM only if i log on that owned node via cluster manager.\
Please help.
Thanks
Shipon

Hi Shipon,
Your network configuration not meet the cluster network requirement,
Network adapters and cable (for network communication): The network hardware, like other components in the failover cluster solution, must be marked as "Certified for Windows
Server 2008 R2." If you use iSCSI, your network adapters should be dedicated to either network communication or iSCSI, not both.
In the network infrastructure that connects your cluster nodes, avoid having single points of failure. There are multiple ways of accomplishing this. You
can connect your cluster nodes by multiple, distinct networks. Alternatively, you can connect your cluster nodes with one network that is constructed with teamed network adapters, redundant switches, redundant routers, or similar hardware that removes single
points of failure.
The related KB:
Network Recommendations for a Hyper-V Cluster in Windows Server 2012
http://technet.microsoft.com/en-us/library/dn550728.aspx
Understanding Requirements for Failover Clusters
http://technet.microsoft.com/en-us/library/cc771404.aspx
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

VLAN Help needed ...

Hii Everybody,
I am new to the VLANS , so i would like to have suggestions from you people .
I have a 10 MB Internet >> connected to Firewall >> connected to L3 Switch >> There are about 40 L2 switches beneath this L3 Switch with no STP as the physical design itself was not done for switch to switch redundancy .
And for your information I have Windows DHCP Server which assigns IPs to the clients . As of now I haven't created any VLANS . My clarifications are :
1>> How can I create VLANS here ? Do I need to create the same in L3 switch ?
2>> If i am assigning different subnets to different VLANS how would the clients get IP from DHCP ?
3>> If possible can anyone here provide some basic configuration here to give me the idea ?
Thanks in Advance,
Max

Please use one thread for your question.
I have answered you on the other thread, so we can continue using that one. Please delete this one.
Thanks
Victor

Microsoft NLB and Cisco 4500 VSS

Hi,
I have a pair of Cisco 4507 switches in VSS mode. An server (10.4.1.166) using Microsoft NLB MAC address (03bf.0a04.01a6) is connected to VSS Node 1 on port Gi1/6/43. The following is configured on the switch.
arp 10.4.1.166 03bf.0a04.01a6 ARPA
mac address-table static 03bf.0a04.01a6 vlan 31 interface Gi1/6/43
The second command appears differently in running-config but looks good in mac-address-table:
# show running-config | inc mac address
mac address-table static 03bf.0a04.01a6 vlan 31 interface Gi6/43
# show mac address static | inc 01a6
31 03bf.0a04.01a6 static Gi1/6/43
Now, from a PC I can ping the VIP address 10.4.1.166 when connected to VSS Node 1 or any other switch connecting to VSS Node1. If the PC attachment is to VSS Node 2 directly or indirectly, then the ping times out. Doing the same for all the rest of servers not using Microsoft NLB but connected to Node 1 only, is successful from anywhere.
Why is the traffic not traversing the the VSL link i.e. PC -> VSS Node 2 -> VSL -> VSS Node1 -> Server.
Thanks,
Rick.

Thanks Reza, Please find the output of the commands below. The VSS switch looks to be good and working for all other services.
#show switch virtualExecuting the command on VSS member switch role = VSS Active, id = 1Switch mode : Virtual SwitchVirtual switch domain number : 1Local switch number : 1Local switch operational role: Virtual Switch ActivePeer switch number : 2Peer switch operational role : Virtual Switch StandbyExecuting the command on VSS member switch role = VSS Standby, id = 2Switch mode : Virtual SwitchVirtual switch domain number : 1Local switch number : 2Local switch operational role: Virtual Switch StandbyPeer switch number : 1Peer switch operational role : Virtual Switch Active# show switch virtual redundancyExecuting the command on VSS member switch role = VSS Active, id = 1 My Switch Id = 1 Peer Switch Id = 2 Last switchover reason = none Configured Redundancy Mode = Stateful Switchover Operating Redundancy Mode = Stateful SwitchoverSwitch 1 Slot 3 Processor Information :----------------------------------------------- Current Software state = ACTIVE Image Version = Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 15.1(2)SG, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2012 by Cisco Systems, Inc.Compiled Wed 05-Dec-12 04:38 by prod_rel_team BOOT = bootflash:cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin,1; Configuration register = 0x102 Fabric State = ACTIVE Control Plane State = ACTIVESwitch 2 Slot 3 Processor Information :----------------------------------------------- Current Software state = STANDBY HOT (switchover target) Image Version = Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 15.1(2)SG, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2012 by Cisco Systems, Inc.Compiled Wed 05-Dec-12 04:38 by pro BOOT = bootflash:cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin,1; Configuration register = 0x102 Fabric State = ACTIVE Control Plane State = STANDBYExecuting the command on VSS member switch role = VSS Standby, id = 2show virtual switch redundancy is not supported on the standbySKR_4507_01#show switch virtual link port-channelExecuting the command on VSS member switch role = VSS Active, id = 1Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator M - not in use, no aggregation due to minimum links not met m - not in use, port not aggregated due to minimum links not met u - unsuitable for bundling d - default port w - waiting to be aggregatedGroup Port-channel Protocol Ports------+-------------+-----------+-------------------15 Po15(SU) - Te1/3/1(P) Te1/4/1(P)16 Po16(SU) - Te2/3/1(P) Te2/4/1(P)Executing the command on VSS member switch role = VSS Standby, id = 2Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator M - not in use, no aggregation due to minimum links not met m - not in use, port not aggregated due to minimum links not met u - unsuitable for bundling d - default port w - waiting to be aggregatedGroup Port-channel Protocol Ports------+-------------+-----------+-------------------15 Po15(SU) - Te1/3/1(P) Te1/4/1(P)16 Po16(SU) - Te2/3/1(P) Te2/4/1(P)#show run int gi1/6/43interface GigabitEthernet1/6/43 switchport access vlan 31 switchport mode access spanning-tree portfast spanning-tree guard root
Regards,
Rick.

3850 HSRP IP BASE or ENTERPRISE

Hello,
I just started a evaluation license for IP Base on my 3850 switches. But i can't configure HSRP cause the commands are not there (I rebooted allready). Do you need enterprise for HSRP on the 3850?
With kind regards,
Martijn.

Well it seems HSRP isn't supported! See release notes IOS XE Version 03.02.00SE
Important Notes
The following features are not supported in Cisco IOS XE Release 3.2.0SE:
•Outdoor Access Points
•Mesh, Flexconnect and OEAP deployment
•Full-features Web-based User Interface (Monitoring-specific pages are supported.)
•Secure Group Access (SXP, SGT)
•Profiling and on boarding
•Wireless Guest Anchor Controller (The Catalyst 3850 switch can be configured as a foreign controller.)
•IPv6 Multicast Routing
•Resilient Ethernet Protocol
•Hot Standy Router Protocol (HSRP)
•Virtual Router Redundancy Protocol (VRRP)
•Private VLANs
•Device Sensor
•MVR (Multicast VLAN Registration)
•Secure Group Access - Security Group Tag (SGT) Secure Goup Access List (SGACL)
•Security Group Tag (SGT) Exchange Protocol (SXP)
•EnergyWise
•IPv6 routing - OSPFv3 Authentication
•Call Home
•Critical VLAN for voice devices
•IPv6 First Hop Security: IPv6 Source Guard
•DVMRP Tunneling
•Port Security on Etherchannel
•802.1x Configurable username and password for MAB
•Gov't Certs: Common Criteria & FIPS
•802.3z (CWDM)
•Link State Tracking (L2 Trunk Failover)
•Disable Per VLAN MAC Learning
•IEEE 802.1X-2010 with 802.1AE support
•IEEE 802.1AE MACsec (MKA & SAP)
•Command Switch Redundancy
•CNS Config Agent
•Dynamic Access Ports
•IPv6 Ready Logo phase II - Host
•IPv6 IKEv2 / IPSecv3
•OSPFv3 Graceful Restart (RFC 5187)
•Fallback bridging for non-IP traffic between VLANs
•Support for 16 static IPv4 routes in LAN Base
•DHCP snooping ASCII circuit ID
•Protocol Storm Protection
•802.1x NEAT
•Per VLAN Policy & Per Port Policer
•Packet Based Storm Control
•Ingress/egress Shared Queues
•Trust Boundary Configuration
•Cisco Group Management Protocol (CGMP)
•Device classifier for ASP
•IPSLA Media Operation
•Mediatrace
•Passive Monitoring
•Performance Monitor (Phase 1)
•AAA: Radius over IPv6 transport
•AAA: Tacacs over IPv6 Transport
•Auto QoS for Video endpoints
•EX SFP Support (GLC-EX-SMD)
•IPv6 Strict Host Mode Support
•IPv6 Static Route support on Lanbase images
•VACL Logging of access denied
•RFC5460 DHCPv6 Bulk Leasequery
•DHCPv6 Relay Source Configuration
•RFC 4293 IP-MIB (IPv6 only)
•RFC 4292 IP-FORWARD-MIB (IPv6 only)
•RFC4292/RFC4293 MIBs for IPv6 traffic

Implementing subnets / vlan's

Hi,
Hoping to get some advice on network design and best practice... We inherited a small and simple flat network that has steadily increased in terms of PC's (400) on the network and sites (8).
It consists of a single class B network with subnet mask 255.255.252.0 with a VLAN for data and a VLAN for voice.
The main site has a single Catalyst 4500 switch connected via gigabit fiber to the 8 smaller sites. The smaller sites mostly consist of either a single 24 or 48 port switch (Catalyst 3550 or 2950).
My question is, in terms of best practice and performance should we be implementing additional VLAN's or subnets? e.g at the smaller sites? Also, if we were wanting to implement redundancy in our switches, what should we be doing in terms of design?
Any advice you can give would be most appreciated.

Here are some personal opinions:
1) should we be implementing additional VLAN's or subnets?
[ans]: Depends on your company's policy and your ease of administration. Also, if you want more security like restricting access to other PCs within the company, yes you can seggregate into multiple vlans.
Well, lot of stuffs depend on your network setup. Decide how you would want to manage the network and do a good design review. Keep in mind the future growth of the company.
In terms of redundancy, you can either have a SUP redundancy for SUPERVISOR failures or a switch redundancy for switch failures. (It all depends on how much your company can spend :) )
Additional link:
This is a good place to start with for designs.
http://www.cisco.com/en/US/docs/internetworking/design/guide/idg4.html

Switch redundency

Similar Messages

Maybe you are looking for