VLAN Reconfiguration

[Hunterhearne1]

Good Morning All! 

First time posting here, so please be with me. 

I have been tasked with reconfiguring the VLAN environment at my current employer (along with a possible redo of IP scheme entirely 172.x.x.x to a 10.x.x.x network). 

Currently, they have VLANs for just about everything possible; (VLAN ID and names have been changed to ensure confidentiality)

12 - Old production 

14 - First Building 

15 - Third Building 

17 - Main Building 

70 - Guest / ISP 

90 - Robots 

110 - (possibly) Facilities 

190 - Wireless 

250 - Research 

270 - Second Building 

290 - Current Production 

310 - Main Building Shipping Area 

330 - Main Building Secure Area 

350 - Fourth Building 

370 - Fourth Building Work Area Security

390 - Main Building Work Area Security 

410 - Main Building (partial) Upstairs 

430 - Main Building (partial) Downstairs 

450 - Main Building Other Area Security

Those are just from one switch that isn't even fully integrated with VLANs. 

Also, they do not *CURRENTLY* use Cisco products, I am getting ready to propose a complete rip and replace for 3650s with 10g uplinks as they currently barely have 1g uplinks ... and no VoIP (using analog) ... and it's a multi-billion dollar company ... With no QoS EITHER or VLAN propagation or MAC filtering, or Web content blocker, or ... the list goes on. (I have my own demons and quirks with them) 

On to the point!

My current thesis is I can do this 1 of 2 ways ;

Way 1: Location-Based Vlans (Thinking about it this would be a bad decision and more of what they have now)

Way 2: Usage-Based Vlans 

(10 - data, 20 - VoIP, 30 - Security, 40 - TVs, 50 - Wireless, 60 - Research, etc.)

I guess more of what I am asking for is some tips to make this as smooth as possible? I think I have everything covered in the new VLANs in the mockups I have completed. 

[rasmus.elmholt]

Hi

You should take a look at Ciscos Validated Designs, they will give you a lot of examples on how best to solve this design problem.
www.cisco.com/go/cvd

I would combine the two. and make local-usage based VLANs. Either by doing L3 Access or Local VLANs for each switch and each function(usage).
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Campus-LAN-WLAN-Design-Guide-2018JAN.pdf

So on each Switch stack you have all vlan 10=Data, 11=VoIP,13=Security,14=TVs, 15=Wireless, 16=Research.
On the next switch stack it would then be 20=Data, 21=VoIP etc.

Hope this helps.

[Hunterhearne1]

Can you further explain what you mean about different VLANs on different stacks? There will be roughly 12 stacks in one domain, 15 in another, 3 in another, and 3 in another. So, basically, 4 different physical locations broken up by routers.

[Hunterhearne1]

Simplifying it:
Site 1: 3 closets, with 1, 2, 2 switches in them respectively
Site 2: 4 closets, with 4, 1, 2, 2 switches in them respectively
Site 3: 7 closets, with 1, 2, 2, 2, 6, 4, 1 switches in them respectively
Site 4: 5 closets, with 6, 6, 2, 4, 4 switches in them respectively
Site 5: 11 closets, with 3, 1, 3, 2, 1, 2, 2, 2, 2, 3, 1 switches in them respectively
Site 6: 2 closets, with 2, 2, switches in them respectively
Site 7: 4 closets, with 2, 4, 1, 2 switches in them respectively
Site 8: 3 closets, with 2, 1, 2 switches in them respectively

Old IP 172.X.X.X, New IP 10.40.X.X

Consolidated Vlans:
Data
Robots
Security
VoIP
TV
Wireless
Research
Printers
Management
Test
Servers

[paul driver]

Hello

So you already ha e a design in place ?

are you just querying how to implement it with minimum down time?

res

paul

[Hunterhearne1]

Basically attempting to gather more information to solidify my plan, see if I can get input on an easy way to go about this.

Basically, our current network is excessively segmented, and I am trying to consolidate and simplify, and on top of that also redo the IP scheme. Would it be better to do both at the same time, or to do one then the other? If so which on first?
What would be some additional basis to cover with co-workers (Server guys, admins, etc.) to ensure I meet their need?

[paul driver]

Hello

The actual migration TBH wouldn't be that hard to implement, but it will depend on what type of network you have now and going to have -  hierarchical network or collapsed core?

Are you going to re-address the network to create smaller broadcast domains or expand it?

res

Paul