How Cofigure multiple Vlan on 5304xl

[Bilotta Alessio]

I have a network based on defalt Vlan and a Vlan10:(see attachment schematic 1)

vlan10 ip switch on bulding 1 is: 192.168.10.1
vlan10 ip switch on bulding 2 is: 192.168.10.2
vlan10 ip switch on bulding 3 is: 192.168.10.3
vlan10 ip switch on bulding 5 is: 192.168.10.25

Host's group "A" are able to go to internet through a kerioWRF:: DNS 192.168.10.6 ALT DNS: 192.168.10.9 and they have not be able to go to Remote LAN.

Host's group "B" are able to go to Remote LAN through a kerioWRF:: DNS 192.168.10.5 ALT DNS: 192.168.10.7 and they have not be able to go to Internet.

Both host's A & B are able to comunicate each other.

All switches have a static routing:
0.0.0.0/0 192.168.10.4 Internet
10.0.0.0/8 192.168.10.11 Remote LAN

EVERYTHING IS WORKING REALLY FINE.

Now I need to add more host's so I will need more Ip's. I created more Vlan's and now my network has 4 Vlan's and I need help to configure the switches and vlan's.

My new network should be like the follow: (see attachment schematic 2)

Vlan10 192.168.10.x bulding 1 (host's A & B)
Vlan10 192.168.20.x bulding 2 (host's A & B)
Vlan10 192.168.30.x bulding 3 (host's A & B)
Vlan10 192.168.40.x bulding 4 (host's A & B)

I would like to have same services on both group of host's A & B and of courde they need to comunicate eachother (Host' A & B have to be able to comunicate with all other host's on different Vlan's) How I can configure my switches?

Thanks a lot Alessio

[Pieter 't Hart]

as you have this subnet: 10.0.0.0/8, adresses from 10.0.0.1 to 10.255.255.254 all hosts can communicate wich each other
so technically you don't need to do anything!

if you want to separate trafic into subnets (say /24) you need to configure routing.

Vlan10 192.168.10.x bulding 1 (host's A & B)
Vlan10 192.168.20.x bulding 2 (host's A & B)
Vlan10 192.168.30.x bulding 3 (host's A & B)
Vlan10 192.168.40.x bulding 4 (host's A & B)
will NOT do the job!

Vlan10 192.168.10.x/24 (building 1 host's A)
Vlan15 192.168.15.x/24 (building 1 host's B)
Vlan20 192.168.20.x/24 (building 2 host's A)
Vlan25 192.168.25.x/24 (building 2 host's B)
Vlan30 192.168.30.x/24 (building 3 host's A)
Vlan35 192.168.35.x/24 (building 3 host's B)
Vlan40 192.168.40.x/24 (building 4 host's A)
Vlan45 192.168.45.x/24 (building 4 host's B)
will do better,
maybe adding a seperate subnet between the swithces for routing
Vlan5 192.168.5.x/24 (interswitch routing)

configure all switches to route between their local subnets and the other switches

if technically possible (cabling between buildings) connect the switches in a star-topology instead of cascading from switch to switch (e.g. connect all switches to the switch in building-1)

[Bilotta Alessio]

So you are saying if I'll keep just the Vlan10 and I change Ip to the Host's in the other bulding's they are still comunicating eachother?

bulding 1 192.168.10.x
bulding 2 192.168.20.x
bulding 3 192.168.30.x
bulding 4 192.168.40.x

and I will not need all other Vlan's?

Thank's Alessio

[Pieter 't Hart]

Yes, with a single subnet "/8" and using a single vlan-10, all host can communicate with each other.

But I've overlooked something in your info.
the "/8" subnet is for the 10.0.0.0 remote subnet.
For the local subnets 192.168.10.x etc. you probably use a "/24" subnet?
Then you do need to configure routing.

The best way to extend the number of local adresses IS using multiple subnets and vlans.
(best practice one vlan <=> one subnet).
so not vlan10 on all switches, but
switch-building-2 = vlan20
switch-building-3 = vlan30
etc.
the vlans's stay within the building so on the links to other switches only vlan-10 trafic is passed.

steps to take
- give each switch an adres in a "central vlan" that routes to the default gateway
(allready done 192.168.10.1, 192.168.10.2 etc)
- give each switch an ip-adress for its own vlan.
=== switch-building-2 ===
vlan 20
ip adress 192.168.20.1 255.255.255.0
=== switch-building-3 ===
vlan 30
ip adress 192.168.30.1 255.255.255.0
etc.
- enable routing
ip routing
- on the default gateway 192.168.10.4 (and maybe also 192.168.10.11) configure the routes back
ip route 192.168.20.0 255.255.255.0 192.168.20.2
ip route 192.168.30.0 255.255.255.0 192.168.20.3
etc.

You can also add these static routes on all switches, but then you have multiple configs to maintain when a subnet is added. to keep it simple do this only on the default gateway.

[Bilotta Alessio]

Thank you very much,

I'll set everything as soon as possible.

Alessio