Networks·41,460 discussions

Setting up 3-Tier network

Tags: Networking

hi

i am busy setting up a Aruba/HP lab and have a few questions:

1.  when and where would i use spanning-tree in a 3-tier design?

2.  when would i use the ip-default-gateway command if i have static routes configured on the distibution and core layer?

3. how do i enable routing between my management-vlan and data vlan?  i have created a vlan for management of switches and a vlan for user data but need to access the management ip  from the data vlan.  i have IP routing enabled on the core and dist switches but still cannot access the management vlan from the data vlan.

4.  what is the difference between the primary-vlan and the management-vlan?  should i make use of the primary-vlan command?

i can upload configs if needed

thanks

Topic

reply

In reply to Setting up 3-Tier network

1. Spanning tree is used to prevent loops and it should be enabled on all your switch access port. Not really needed for trunk ports.
2. IP-default-gateway is used for layer 3 (router) devices, not switches. So it would be used on any layer 3 device you have that routes traffic.
3. This would be done on your router. You should have all you vlans defined on your core device so it will route. I would recommend using an access-list or whatever security mechanism your router uses to control access between the vlans. Only allow traffic that is necessary.
4. I’m not familiar with those terms. But I primarily use Cisco and Juniper devices, not home equipment. Usually a vlan is just vlan and you determine what you do with it. Primary could mean native, which is untagged on a trunk port.

[Author]

Replies