Recently I wish to split the network by VLANs. Mainly for two reasons
- Exclude management interfaces from the commonly accessible lan
- Separate WiFi traffic (security and broadcasts)
The current idea is to enable vlans and Layer 3 features of 2960s cisco switch. We have a Mikrotik router and it increases the lag in the network, even while forwarding packets between vlans. That is why I want to dedicate this work to cisco.
Here is the schema:
Switch(config)#ip route 0.0.0.0 0.0.0.0 184.108.40.206
- In Vlan 1 I have servers, printers and other things.
- In Vlan 2 I have PCs
- In Vlan 3 I have WiFi
- And one more Vlan, not shown on the figure.
Client PCs in Vlan 2 and 3 do receive IPs from DHCP (in Vlan 1).
It is configured on the switch using
ip helper-address 220.127.116.11
Fortunately the schema works perfect. But I have tested it only with few devices and do not know if there could be any problems in future.
Maybe any of you have any idea about this implementation. How reliable is it?
- For example, I am not sure how good is cisco 2960 working as DHCP relay.
- Or how does Mikrotik know the destination MAC of the host. (It is clear that now the switch replies to every request and in ARP table of Mikrotik everything is assigned to the Mac of Cisco, but let's assume we initialize the connection from another network and Mikrotik does not know the destination mac, it will send the arp to cisco, but how cisco will reply, if his arp is also empty?)