Connecting 3560X-24PS to core 4507R+E over layer 2 - 500 Miles away

[douglas.mckee]

We are currently in the process of connecting less than 10 users at a remote site approximately 500 miles away. Our circuit will be a strictly layer 2 connection (Sonet) connecting at 1GIG. Instead of using a router and switch at the remote site we are planning to install a 3560X (1GIG SFP) at the remote location and connect directly to our 4507R+E locally using a 1GIG SFP port. We are expecting no more than a 9MS delay based another site that was established around the same area. Does this solution sound feasible or will we need to add a router with the additional expense?

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

That should work fine, although unless your 3560X only has a LANBase image, you could also route across it.

[douglas.mckee]

Joe,

We will be using the Universal image on our 3560X and sounds like everything will work well. As Jon mentioned someone inadvertently adding a hub could cause issues to our core. We will be using port security to hopefully mitigate someone plugging in unauthorized devices into the remote sites 3560X.

Thank you!

Doug

[Jon Marshall]

I agree with Joe, unless you need the same vlan/IP subnet at both sites and you usually don't I would use L3 if possible.

If you don't that means STP, among other things, needs to run across that link. If the remote site did something silly such as connecting a hub to two ports etc. then any STP issues could propagate back to your 4500 and beyond.

Another advantage is there should be little or no broadcasts going across that link.

It really does depend on whether you need the same IP subnet at both sites.

Jon