Name: LanEvoVI Date: March 5, 2007 at 09:55:43 Pacific Subject: Layer 3 OS: Win 2k3 CPU/Ram: P4s
Comment:
Hi All,
Have a question about layer 3 switches. Say my LAN is 192.168.1.0/24 and I have 3 gateways attached directly with LAN IPs in the 192.168.1.0/24 network. 2 of the gateways are VPN boxes in the 10.1.0.0/16 networks. The last is the default gateway for internet.
Right now, the default gateway has static routes pointing to the other two VPN gateways to direct traffic. Can i just stick the layer 3 switch between my workstations and my gateways, assign it an IP in the 192.168.1.0/24 range and do the static routes from there? OR would i need to create another subnet and use the layer 3 like a router. For example, VLAN1 192.168.1.0/24 connects the workstations, and VLAN2 192.168.2.0/24 connects the gateways?
I perfer using only one subnet, just wondering if this is still possible while using the layer 3 switch.
Right now, the default gateway has static routes pointing to the other two VPN gateways to direct traffic
What are you using for Gateways? What are you using for VPN endpoints?
Can i just stick the layer 3 switch between my workstations and my gateways, assign it an IP in the 192.168.1.0/24 range and do the static routes from there? OR would i need to create another subnet and use the layer 3 like a router.
If the present setup is working and all clients can access what they need to, why do you think you need to add a layer 3 switch into the mix and put routes on it? If your present setup is working, add a unmanaged switch and leave it at that.
We have a PGP firewall at the gateway and nortel and sonicwall boxes for the vpns. The PGP will be replaced this year with a new unit... also, we are thinking of having a second gateway for reducency purposes out to the internet on a different ISP. Our current ISP is wireless 802.16 (not always stable), we are looking at a partial T1 backup. Those are the only choices for internet at the location.
Well, from your description, I shouldn't think so as you seem to already have routing in place (ie: Right now, the default gateway has static routes pointing to the other two VPN gateways to direct traffic.)
