cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2513
Views
10
Helpful
20
Replies

Routed Access Layer,

pmcallion
Level 1
Level 1

Hi,

I think I have the answer to this one but just need clarification if somebody wouldn't mind.

I'm in the process of redesigning our campus network which currently employs campus wide vlans. (10 in total)

I'm looking at the routed access layer design however we have one application which requires one of the existing VLANS to remain as a campus wide VLAN due to the application requiring MAC address information.

I take it there is no way I can keep this single campus wide vlan but still employ the routed access layer design in the rest of the campus?

I'm thinking that the routed uplinks will not be able to carry the single vlan to all switches on campus.

Hope it makes sense.

Thanks

20 Replies 20

Michael

Apologies for the confusion. L2TPv3 is indeed used to extend L2 vlans across a L3 routed network but as far as i know it is only supported on routers and not L3 switches.

So you're right in that your 4500 switches wouldn't support it.

Jon

STP might be an issue for the "global" VLAN, the "routed" VLANs, as I described them, should be configured to be unique between L3 switches. I.e. They can't loop.

We're not doing L2 and a half (although I like the term), but just using the same connection for multiple purposes. I.e. we have both a non-routed access layer and a routed access layer. Depends on what VLAN the host is connected to.

[edit]

PS:

If the idea of using non-routed ports for L3 connections seems odd, they might be required for VRF-Lite, which I believe can use VLANs between routers.

"We're not doing L2 and a half (although I like the term), but just using the same connection for multiple purposes."

I know, i was just being facetious :-)

Personally i agree with Victor on this. If you design a L3 routed access-layer and have L3 routed uplinks ie. not L2 vlans where the only 2 members of that vlan are L3 peers, but true routed links with no STP, and then realise you need to span a vlan across switches you should probably be looking at a different design.

Problem with using the same link for multiple purposes is if there is a loop in the global vlan then the loop will affect the entire link. And that for me is one of the major reasons for using a L3 routed access design ie. eliminate STP.

Jon

"If you design a L3 routed access-layer and have L3 routed uplinks ie. not L2 vlans where the only 2 members of that vlan are L3 peers, but true routed links with no STP, and then realise you need to span a vlan across switches you should probably be looking at a different design."

Jon, I'll tell you what I would do, though.

If I had to span a vlan across two access switches for, lets say, a floor of users at an office, I would do that. I would run the routed access layer and still span the vlan across those two switches only with an L2 trunk.

If, on the other hand, I had to span a vlan across the entire campus distribution block, that I would not do a routed access layer, but stay switched.

I agree with you that an L2 trunk between routed access switches is not an orthodox access layer, but then again, I have always been an apostate. :-)

Victor

(I knew you were being facetious; and still like 2 and a half.)

As to mixing L2 and L3, OP makes that a requirement. Otherwise, there would be no need for the one global L2 VLAN (and something we try to avoid with L3.)

The real question is whether to use two links or one. Either can work. Personally, I would rather use a 2nd link for additionally bandwidth and redundancy in a Etherchannel configuration. Assuming the 2nd link is even currently available. (If STP is involved with dual parents, you would need either 2 uplinks, my method, or 4 uplinks, dedicated method.)

However, for those who find it easier to understand and maintain dedicated links, that's certainly a valid consideration.

(For example I worked on one project were we needed to span OSPF areas between a pair of 7500s. I configured multiple subinterfaces on a FastEthernet port. Another engineer found that complex, so he found some multi-port Ethernet cards, and dedictated one port to each OSPF area. 7500 had spare card slots and user traffic didn't normally transit the links, so although I was happy with the subinterfaces, not a problem to do it his way either.)

As to impact of loop issues, if you configured it wrong in either case, you'll likely know it when it happens. Often a loop is more of a problem than just link saturation, and that might be addressed by port QoS. Personally, I would worry more about something like STP configured correctly to break a loop rather than whether a dedicated loop can handle the looped traffic. Again, though, if those maintaining the network want to trade off a link for, what they consider, less complexity, and they have considered other tradoffs, feel free to do so. There's often many ways to deliever the same results.

nidesai
Level 1
Level 1

Hi,

you can use routed access with VSS, which will allow you to use routed subnets and yet allow few vlans to span.. Using a hybrid topology where one can define VLAN at distribution latyer for spanning. The key thing is use VSS because it eliminates loops and thus the main risk associated with spanning VLAN and also removes the inflexibility with Routed Access of not able to span vlan.

HTH

Nimish