12-10-2011 08:21 AM - edited 03-07-2019 03:50 AM
Hello.
We have in mind contract a internet connection for our apartment house (16 neighbors) and I'm not sure about the optimal solution. These are the two and half posibilites:
1. cable-modem --> linux router/firewall (for QOS) --> switch (for manage the VLANs) --> switch (within each dwelling) --> PCs
1.1 cable-modem --> linux router/firewall (for QOS) --> switch (for manage the VLANs) --> router (within each dwelling) --> PCs
2. cable-modem --> linux router/firewall (for QOS) --> switch --> router (within each dwelling) --> PCs
Clarifications:
Each dwelling will have a rj45 connector and the neighbor will connect his choice (AP, router, switch).
The bandwidth is divided among all residents equally.
Within each household may have more than one computer connected by cable or wifi.
There will have to do port forwarding for p2p software.
The subnets that are each house, can not see the others.
Do not be shared nothing between houses beyond the own connection.
For not use much wires, there will be one only wire between the main switch and each house.
Reasoning:
Plan 1, So they can not be seen between each neighbor, VLANs are used.
Plan 2, it seems easier, but maybe not safer, use routers. My question is whether this way VLANs are needed, because in principle the subtnets don't see between themselves. (In this case, the connection between the switch and the router is using the router wan port, the Linux router/firewall IP as gateway in the wan configuration, and with the router firewall active)
Thanks for read this brick and my apologies for my bad english.
12-10-2011 12:14 PM
Use your favorite search engine and look for "Private VLAN"
HTH>
12-10-2011 04:48 PM
"switchport protect" for each switchport is good for this situation.
Sent from Cisco Technical Support iPhone App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide