vlan interlink

[suthomas1]

Hi, guru's i have a query on network connectivity for an application server & its database part. both these servers are to be connected to a single 6500 switch. application server is what users will be allowed to access. database server will only be used by the application server to fetch the data.

let us say, application server is on vlan 100. database server needs to talk to this application server.

should the application server and database server be put on same vlan or should be put on different vlan. Different vlan from security perspective.

How can this be achieved and what is the best way, both on same vlan or on different vlans.

thanks in advance.

[kapathak]

Hello!

Do you have any specfic requirements with respect to security? Is there any reason why you want to separate the app server and database server via VLANS? From what I understand, they do need to communicate with each other.

You can configure this both ways as you mentioned, either by puttinng them in same vlan or by putting them in different vlans and configure the 6500 for intervlan routing to enable communication between the two.

Cheers!

Kapil

[suthomas1]

Thanks Kapil, the user wants the database to be not accessible from user segment and put it as an isolated segment with communication only with app server segment. yes, they do need to communicate amongst them.

if i were to put it in different vlan, will it have any merits or demerits in either case.