Подскажите по правильной настройке сети

[Palamar 0]

Всем привет.Есть локальная сеть,пример на фото.Маршрутизация настроена на L3 коммутаторе,каждый отдел в своём vlan.

 

DGS-3120-24SC:admin#show ipif 
Command: show ipif

IP Interface                : sip
VLAN Name                   : sip
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.130.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : sbyt
VLAN Name                   : sbyt
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.40.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : user
VLAN Name                   : user
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.50.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Enabled


IP Interface                : guest
VLAN Name                   : guest
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 172.16.210.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : phone
VLAN Name                   : phone
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 172.16.200.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : video
VLAN Name                   : video
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.2.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : System
VLAN Name                   : default
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.1.50/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled
DHCP Option12 State         : Disabled
DHCP Option12 Host Name     : 


IP Interface                : printers
VLAN Name                   : printers
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.110.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : management
VLAN Name                   : management
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.99.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Disabled

IP Interface                : buhgalteriya
VLAN Name                   : buhgalteriya
Interface Admin State       : Enabled
Link Status                 : LinkUp
IPv4 Address                : 192.168.30.1/24 (Manual)  Primary
Proxy ARP                   : Disabled   (Local : Disabled)
IPv4 State                  : Enabled
IPv6 SLAAC state            : Disabled   (Default Router: Disabled)
DHCPv6 Client State         : Disabled   (Rapid commit : Disabled)
IPv6 State                  : Enabled

L2 свичи и роутер в naitive vlan(ip 192.168.1.0/24)

Подскажите как правильно сделать,оставить свичи и роутер в naitive vlan или создать на L3 комутаторе ещё один vlan с ipif и переместить свичи и роутер туда?

 

[Небесный 26]

Для чего создавать ipif во влане со свичами? Вы собираетесь делать маршрутизацию между вланами? Отдельный влан на управление свичами делают с соображением обезопастности, чтобы другие сети не попадали в сеть управления.

Відредаговано 2019-08-09 04:36:22 Небесный