Add a VLAN with DHCP Range

[pwynne2009]

Hi,

I am looking to create a vlan for visitors to my network to isolate them from the LAN. Below is the breakdown of my LAN.

IP Range:

192.168.16.0 - 254 - LAN Devices. (VLAN1)

172.21.60.0 - 254 - IP Telephony Devices.(VLAN10)

The gateway is my CME 192.168.16.254 which sends traffic to my ASA5505 which connects to the web. My switches are a 2960-POE & 3560 POE.

I am a little unsure of how to create this VLAN, Assign a DHCP Scope and route to the outside interface of the Firewall to connect to the web.

All suggestions would be greatly appreciated here.

Rgds,

Paul.

[Sebastian Helmer]

Hi Paul,

In my enviroments we go this way.

Vlan X for Guests

This vlan is in the hole network configured (using VTP), so I can use it where I need it, also WLAN. The Default Gateway and DHCP Relay is our Firewall (Trunk Port to Firewall). So it has no connection to the rest of the network and the traffic is inspect by the firewall and routet to the "internet". In the Future, we will use Guest only over WLAN and use the WLC's and the authentication method. We trust VLAN's so it is the best and secured was for us.

There are some more other posibilities. How the CME (I think you mean Communication Manage Espress) could help you here. I don't know.

Hope that gives you some ideas. Or let's discuss  some others..

- Sebastian