Re: multiple subnets




stueken@xxxxxxxxxxx wrote:

we are running a private class C network with a few servers and
about 60-100 hosts. By now we use several fast ethernet switches
and a few gigabit switches to connect all hosts directly.

Is it a problem, to run an other subnet in parallel on the same
switches? If both subnets use distinct netmasks and broadcast patterns,
they should not affect each other, right? Someone else tells me,
this is not possible without using VLAN capable switches.

It will work, but most likely you will ultimately regret it. Unless you
plan on placing several machines in both subnets, I would try to keep
them logically separate. VLANs are one way to do this. I would strongly
urge that non-VLAN switches be dedicated to a single subnet unless the
switch can be partitioned, in which case each partition should be
dedicated to a single subnet.

There are a variety of reasons why you are likely to eventually regret
running separate networks over the same switches (without separating
them into VLANs or otherwise paritioning them).

One reason is security. Someone who comromises a machine will
compromise all the machines on all the networks. Gateway hijacking is a
serious problem.

Another reason is limiting the damage due to accidental bad behavior.
This includes things like broadcast storms.

There are a variety of other reasons you are likely to regret
overlapping your networks this way. The only time you won't regret it
is in a very small application (for example, overlapping a NATed home
network in private IP space with a routable office network in a
home/office type setup).

Must all traffic between both networks be routed thru a router?

Essentially, yes.

We will get a router soon, but it is fast ethernet only. So I can't
establish a gigabit connection between hosts of different subnets
any more, even if they are connected to the same gigabit switch?

Nope, that's not what switches do.

DS

.



Relevant Pages

  • Re: Change DC from multi-homed to single homed segmented
    ... but you still have multiple subnets and multiple NICs. ... Once you have a routed network independent of the DC, ... Browser problems is the reason for removing the other subnets. ... This is in preparation for moving away from 100MB switches to 1GB ...
    (microsoft.public.windows.server.networking)
  • Re: Single domain two IP subnets
    ... VLANs would be the way to go. ... subnets in IP are far more than purely logical. ... VLANs switches, and switches in general, by many people. ... both Routers and Bridges -- we can call the features something ...
    (microsoft.public.win2000.dns)
  • Re: DNS replication on 2 domain on 2 forests
    ... Switches "route" (hate to use that term with a switch since it is ... to use when referring to those switches (layer 3 or router switches.) ... subnets, therefore, the answer is you need a router. ... It makes the network more efficient. ...
    (microsoft.public.win2000.dns)
  • Re: multiple subnets
    ... and a few gigabit switches to connect all hosts directly. ... If both subnets use distinct netmasks and broadcast patterns, ... We will get a router soon, but it is fast ethernet only. ... VLANs create separate "broadcast domains", and you would generally put different subnets on different VLANs so you could route between them. ...
    (comp.os.linux.networking)
  • Re: L3 switches-> Efficient bandwidth utilization, for Campus network
    ... Many campus networks now have a need for a lot of different vlans and there ... However, L3 switches can be much less expensive, ... things get complicated in that distributed layer 3 ...
    (comp.dcom.sys.cisco)

Loading