<(E-Mail Removed)> wrote in message
news:bdc20727-daa9-40fe-a615-(E-Mail Removed)...
> Do I go Cable modem to my PIX, then to my switch that houses my vlans,
> and then just hang my router off of my switch for the internal routing
> of the vlans? There is a wireless dlink router hanging off one of the
> switchports of my PIX and the PIX is doing dhcp.
Switches cannot "house" VLANs. They can be partakers of the "action" but
cannot create or control the action.
The 2600 Router would "own" the VLANs and they would never exist "outside"
the Router unless you used one interface (and the line comming from it) as
a Trunk Line that ran between it and the switch. This would be the "Router
on a Stick" concept. This is not a performance thing,...just to
opposite,... the performance will degrade because you are running multiple
subnets over a single physical line instead of 1 subnet = 1 line.
The Switch would be setup the same way, and then would have various ports
associated with a particular subnet and the subnets would "break out" from
there.
There is really no good reason (performance or otherswise) to do any VLANs
in this situation other than to able able to pat your self on the back for
your enginuity.
If you want to learn networking,..then learn networking first,...deal with
VLANinng when networking becomes second nature and you can do it without
thinking about it. The most logical approach would be to have this
equipment (with no VLANs):
1. One Firewall (PIX is fine)
2. One LAN Router with at least 2 Ethernet ports (serial ports will be
unused)
3. Two Switches (yep, 2)
Lay them out like this:
[Internet]
|
<PIX>
|
<Switch #1> (This is the first subnet)
|
| {E0 interface}
<LAN Router>
| {E1 interfeace}
|
<Switch #2> (This is the second subnet)
-- The Hosts (PCs) simply run off of the Switches
-- Everything uses the LAN Router as the Default Gateway
-- LAN Router uses the Firewall as the Default Gateway
-- Firewall needs a Static Route telling it to the the LAN Router and the
"gateway" to get to Subnet #2
-- Most likely the PIX cannot provide DHCP for two subnets (I dunno). Use
a Windows Server as a Domain Controller running DNS, DHCP, and WINS for
handling LAN infrastructure. Configure the LAN Router to forward DHCP
Queries to the DHCP Service. Consider it an opportunity to learn Active
Directory Domain design and maintainence while you are learning your
networking.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------