Which IP address (network) to use, LANs (with VLANS) different type of physical hardware?

--Petzu-- · ‎02-19-2010

Hi all

I'm trying to understand how to assign IP addresses to my network equipments.

I have planned to use:

- Router ISR2801

- Catalyst Express CE520G-24TC (gigabit)

- Catalyst Express CE520-24PC (POE, 100mb)

- Access points

- IP Cameras

- ESXi Server, (multiple NICs)

- Desktop workstations

I'm thinking to create multiple VLANs for a different type of needs.

- Management

- Guest (for wireless APs)

- Surveillance (for IP cameras)

- Storage

- etc...

Let's say router is configured as:

NAT outside:

BVI1 xxx.xxx.xxx.xxx (IP from ISPs DHCP)

NAT Inside:

FastEthernet0/0 192.168.1.1/24 VLAN 01 (native) Connected to CE520G-24TC (port 26)

Subinterfaces:

FastEthernet0/0.2 192.168.2.1/24 VLAN 02 (Management)

FastEthernet0/0.3 192.168.3.1/24 VLAN 03 (Surveillance)

FastEthernet0/0.4 192.168.4.1/24 VLAN 04 (Storage)

FastEthernet0/0.101 192.168.101.1/24 VLAN 101 (Cisco-guest) CE520G doesn't allow me to change it.

etc..

CE520G-24TC port 25, is connected to CE520-24PC port 25.

(Can I somehow assign CE520-24PC port 26 to ISR2801 FastEthernet0/1, to avoid WAN traffic

from CE520-24PC first go through CE520G-24TC?)

Access points will be connected to CE520-24PC POE ports.

IP cameras will be connected to CE520-24PC POE ports.

ESXi NICs will be connected to CE520G-24TC Gigabit ports.

Desktops vill be connected to CE520G-24TC Gigabit ports.

I would like to hear how I should assign IP addresses to my hardware,

I mean to which network will each physical equipment belong. (router, switches, IP cameras, APs, ESXi)

Should I assign all physical hardware to 192.168.1.x network, and assign them to VLAN 01 (native) or,

should I for example assign IP cameras to 192.168.3.x network?

How about desktop computers? What if desktop computers need to access different VLANs?

How about ESXis different physical NICs?

Thanks already in advance,

p.s.. I'm new with this type of networking, so please let me know if there is better (correct) way of doing this.

p.s2.. Does anybody know, if this is possible at all, by using Catalyst Express series switches?

Regards

--Petzu--

nqtran1979 · ‎02-19-2010

you should have a read of this on campus designs http://www.cisco.com/application/pdf/en/us/guest/netsol/ns431/c649/ccmigration_09186a008093b876.pdf

Granted you're not designing a campus, its still good theory.

If you get your hands on a HWIC-4ESW card, you can trunk the two switches straight into the router. This way if one of the switch goes down it won't affect the other one, unlike your suggestion which would bring everyone down if the middle switch goes down.

IP Addressing depends on how many devices you'll need for each VLAN.

Use http://www.subnet-calculator.com/ to check what mask you need for each vlan.

HTH

Nhat