Difference between revisions of "Galaxy Network - Network Layout"

From Teknologisk videncenter
Jump to: navigation, search
(VLANs currently in use)
(Predefined VLAN assocations)
Line 6: Line 6:
  
 
==== Predefined VLAN assocations ====
 
==== Predefined VLAN assocations ====
----
 
 
<span>While only a few of these VLANs are actually in use,  
 
<span>While only a few of these VLANs are actually in use,  
 
the VLAN ranges will <span onmouseover="TagToTip('allow')" onmouseout="UnTip()" style="cursor:help">allow</span> our network to scale almost indefinitely.</span>
 
the VLAN ranges will <span onmouseover="TagToTip('allow')" onmouseout="UnTip()" style="cursor:help">allow</span> our network to scale almost indefinitely.</span>
Line 17: Line 16:
 
*'''700–899:''' Reserved for future use.  
 
*'''700–899:''' Reserved for future use.  
 
*'''900–999:''' Point-to-point links between switches (Layer 3).
 
*'''900–999:''' Point-to-point links between switches (Layer 3).
 
  
 
==== VLANs currently in use ====
 
==== VLANs currently in use ====

Revision as of 13:00, 25 May 2009

Network Layout

IP Topology

VLAN Topolog

Predefined VLAN assocations

While only a few of these VLANs are actually in use, the VLAN ranges will allow our network to scale almost indefinitely.

  • 1: Not in use; clear from all trunks. This is a Cisco best practice implementation (not required).
  • 45: Management VLAN on all switches.
  • 100–399: Access layer devices.
  • 400–599: Data center devices.
  • 600–699: Internet and partner connections.
  • 700–899: Reserved for future use.
  • 900–999: Point-to-point links between switches (Layer 3).

VLANs currently in use

The following VLANs are in use.

vlan access-map NAME 10 match ip address <telnet access list> action drop vlan access-map 20 match ip address <ssh access list> action forward

switchport mode access (default) N/A (default) no cdp enable udld port disable

interface vlan <management vlan>

switchport trunk allowed vlan remove 1

Interface security

switchport mode access (default) N/A (default) no cdp enable udld port disable spanning-tree portfast spanning-tree portfast bpduguard default

spanning-tree guard root

vtp mode transparent

no mls qos trust {default}

shutdown