cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
991
Views
0
Helpful
1
Replies

Need assistance with best practices design for a relatively simple network

Darren Watts
Level 1
Level 1

My home network currently has two switches (3560G's) routed at L3 by a Sophos UTM box. For a variety of reasons, I have decided to replace the Sophos with a 2951, but I'm a little stumped as to how to structure the interlinks. Here's my structure:

 

SW1 - 6 VLANs, all data /no voice. Client ports all configured as access, vlans defined as L3 interfaces on the switch. They are the default gateways for the clients in the same VLAN.

 

SW2 - 3 VLANS, 2 data, 1 voice. Same structure as SW1 (access ports, L3 vlan ints, etc.)

 

In my proposed new setup, the 2951 will fulfill multiple roles - border / firewall with my ISP (ZBFW and hopefully IOS IPS) , SSLVPN, and controller for CUCME. I've increased the memory on the router to 2.5gb in anticipation of the need for more memory imposed by the multiple roles. I've also installed an EHWIC-4ESG and VIC2-2FXO.

 

Here's my problem - the config above gives me 3 L2/L3 ports (GI0/0,0/1, and 0/2) and 4 L2 only ports (GI0/0/0,0/0/1,0/0/2, and 0/0/3). How best to connect the switches to the router in order to facilitate all that I'm trying to do? L2 trunks? L3 ptp?

 

Any help / suggestions appreciated!

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame

L2 Ports use it are Lan side to connect to your switches.

 

Use gigabit for Internet connection side. ( since you may need Point to Point L3 interface config)

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

L2 Ports use it are Lan side to connect to your switches.

 

Use gigabit for Internet connection side. ( since you may need Point to Point L3 interface config)

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help