Difference between revisions of "Galaxy Network - Network Layout"

Revision as of 12:11, 25 May 2009

While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.

1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
45: Management VLAN on all switches.
100–399: Access layer devices.
400–599: Data center devices.
600–699: Internet and partner connections.
700–899: Reserved for future use.
900–999: Point-to-point links between switches (Layer 3).

The following VLANs are in use.

vlan access-map NAME 10 match ip address <telnet access list> action drop vlan access-map 20 match ip address <ssh access list> action forward

switchport mode access (default) N/A (default) no cdp enable udld port disable

interface vlan <management vlan>

switchport trunk allowed vlan remove 1

switchport mode access (default) N/A (default) no cdp enable udld port disable spanning-tree portfast spanning-tree portfast bpduguard default

spanning-tree guard root

vtp mode transparent

no mls qos trust {default}

shutdown

@@ Line 25: / Line 25: @@
 * '''VLAN 45:''' Management VLAN used on all switches in the network.
+* '''VLAN 102:''' Skywalker Enterprises.
+* '''VLAN 400:''' Wireless access.
+* '''VLAN 401:''' Wide-Area Network access.
+* '''VLAN 402:''' ISDN/PSTN access.
 vlan access-map NAME 10