My first post in this forum! At my work place, we use VLANs to break out our network, and to keep network traffic segregated. I'm a little confused with our VLAN structure because I've had comments from contractors saying that we aren't using VLANs, and when I've asked other contractors on their thoughts, they have said its all fine and dandy! So my question to you guys, is this, considering the below example, are these VLANs?
192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.89.0/24
The way I understand it, because the 3rd octet is different, these are VLANs, even though the subnet is the same at 255.255.255.0. Our switches are routing the traffic fine, and our router is routing traffic fine as well, which makes me believe we are right and these are indeed VLANs.
It looks like we have subnetted our network out rather than use VLANs.
To answer Ron's question, we have a Meraki firewall, which then feeds into a mixture of Dell and Cisco switches. On the Meraki firewall there is a page called 'Addressing and VLANs'. This is where we have our "VLANs" configured.
I know I used a class C network in my original post, but we use a class A network using a class B subnet. Our native VLAN is then 10.0.0.0/16.
On our Meraki firewall the VLANs are filled out as follows:
VLAN 2 - 10.2.0.0/16 VLAN 3 - 10.3.0.0/16 VLAN 4 - 10.4.0.0/16 VLAN 5 - 10.5.0.0/16
So what I understand from responses is that what I thought was VLANs are in fact subnets.
By default, the Meraki unit routes traffic between VLANs but rules have been created to stop this. Coming out of the Meraki unit, the port heading into our core switches (3 x stacked Dell PowerConnect switches) is set to a trunk port. The power connect then pipes the VLANs, via trunks, to other switches at our distribution layer, and then the distribution layer pipes the VLANs to the access layer, which then has ports in access mode. It might be worth noting at this point that we have a DHCP server on our main office LAN on our DC, and the other VLANs are served a DHCP address from the Meraki unit.
So devices which we have on VLAN 2, e.g. IP cameras, can't be accessed from VLAN 3. So I imagine we are using subnets in place of VLANs. How would a VLAN look in this example? Would I use the subnet of 10.0.0.0/16 and that breaks out to VLANs? Would these VLANs then use the same IP address range of 10.0.0.0? I apologise if this is frustrating to answer. I've watched a fair few YouTube videos, but I'm not blessed with the best of brains and I end up more confused!