Server IP addressing and VLANS

[Amit Dixit_2]

Hi,
I am having 15 HP-UX servers, on the
10.3.10.X subnet, and few of the workstation
are also on the same subnet

I want to have a VLAN so that Workstation
are on different subnet and servers are on
to different subnet apart from that I want to
assign IP's to LAN Console as well which I
want on to be the 3rd subnet.

Can I have 3 subnets on 10.3.10.X so as to
make my LAN more secure.

The problem is I am having few softwares
based on IP address.

Tell me what should I do.

Thanks,
Amit

[Steven E. Protter]

If they can ping each other it should not be a problem.

If you want an ignite server on the central vlan to service other machines for boot/software distribution, you have a few choices.

1) Set up a private lan on the built in nic's of the servers to a workstation or server tha acts as a boot helper. For ignite purposes a private single subnet network.
2) Set up a machine with nic's on both vlans to be a boot helper.

SEP

[Jeroen Peereboom · Accepted solution]

Amit,

you now have subnet 10.3.10.0, with subnet mask 255.255.255.0 (/24, 24 bit for the network, 8 bits for the hosts). If you want to split it into multiple subnets, you must change the subnetmask to 255.255.255.192 (/26).
This gives you the networks:
10.3.10.0 (hosts 1 to 62, broadcast 63)
10.3.10.64 (hosts 65 - 126, bc 127)
10.3.10.128 (hosts 129 - 190, bc 191)
10.3.10.192 (hosts 193 - 254, bc 255)

If you define these as VLANs on your switch, you'll also need a router to route the traffic between the VLANs. Maybe one physical interface with 3 logical interfaces may suffice; ask your network admins. And probably some firewall too to reach your goal of a more secure LAN. (How do you prevent ordinary users to access the 'LAN Console' LAN?)

If you change the IP address of a node on which you have software licenses tied to the IP address you'll have to renew the licence keys.

JP

P.S. You may want to improve your 'point assignment ratio'....

[rick jones]

How you go about setting up VLANs is somewhat independent (although not entirely) from the IP subnetting.

First you will want to decide if you want any of the hosts to connect to more than one VLAN. If so, then you probably want to use tagged VLANs which means installing the VLAN software on the systems.