How to properly divide the network into segments?

M

m2_viktor2015-05-20 11:27:01

Network administration

m2_viktor, 2015-05-20 11:27:01

Hello, the enterprise has a network 192.168.0.0/24. The network scheme is such that all devices are connected using unmanaged switches, and it turns out that servers, workstations, network printers, wifi access points, and even personal smartphones of employees are located in the same broadcast domain.
I want to change the scheme so that all listed categories of devices are on different subnets: for example
192.168.0.1/24 Internet gateway
192.168.1.0/24 Servers
192.168.2.0/24 Workstations
192.168.3.0/24 Access points, network printers
192.168 .4.0/24 Employees' personal smartphones
At the same time, so that devices from network 0,1,2,3 can exchange traffic, and network 4 has access only to the gateway to the Internet. I read that VLANs are just designed to solve this problem, I even have an hp 2650 managed switch where I can group ports into VLANs, but what does it give me? Well, I divided the ports into 1-10, 11-20, 21-30, 30-40 and then what to do? How can I allow traffic between VLANs?

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

O

other_letter, 2015-05-20
@other_letter

Read my own question Can I talk about VLAN "on the fingers"? I was given a lot of useful information there. Read with comments.
In short - you will need a router between different VLANs.

V

Valentin, 2015-05-20
@vvpoloskin

We read towards Inter vlan routing . Judging by the description of your switch, it can route itself, though at a basic level, a router may not be required.

T

throughtheether, 2015-05-21
@throughtheether

I read that VLANs are just designed to solve this problem, I even have an hp 2650 managed switch where I can group ports into VLANs, but what does it give me? Well, I divided the ports into 1-10, 11-20, 21-30, 30-40 and then what to do? How can I allow traffic between VLANs?

Transfer the necessary ports to the necessary vlans in the access mode (untagged). Create L3 interfaces for vlans. Turn on routing. Now traffic between vlans should be routed.
There is a minus - as far as I remember, the 2650 does not support ACL, so I think it will not be possible to organize traffic filtering using the switch.