Galaxy Network - Network Layout

Network Layout

---

VLAN Topology

---

Predefined VLAN assocations

While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.

• 1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
• 2-99: Management VLAN on all switches.
• 100–399: Access layer devices.
• 400–599: Data center devices.
• 600–699: Internet and partner connections.
• 700–899: Reserved for future use.
• 900–999: Point-to-point links between switches (Layer 3).

VLANs currently in use

• VLAN 45: Management VLAN used on all switches in the network.
• VLAN 102: Skywalker Enterprises.
• VLAN 400: Wireless.
• VLAN 401: Wide-Area Network.
• VLAN 402: ISDN/PSTN.

Configuration of VLAN Layer-2 Security

vlan access-map NAME 10
match ip address <telnet access list>
action drop
vlan access-map 20
match ip address <ssh access list>
action forward

switchport mode access (default)
N/A (default)
no cdp enable
udld port disable

interface vlan <management vlan>

switchport trunk allowed vlan remove 1

Configuration of Interface Security

switchport mode access (default)
N/A (default)
no cdp enable
udld port disable
spanning-tree portfast
spanning-tree portfast bpduguard default

spanning-tree guard root

vtp mode transparent

no mls qos trust {default}

shutdown