We currently have 40 employees on one network. We have purchased layer 3 and layer 2 switches. Is it best to break up the network into subnets based on the department that they work, or the applications/software that they access through the servers? ie If an executive uses an accounting software installed on a server, is he placed in the Executive VLAN or Accounting VLAN? The executive staff will be placed in same location..department employees will be placed together.
The theory side of things suggest that you break up your network depending on the departments (for large companies). This approach however might not work best for you since you've got 40 users in your company network.
Given the amount of users and physical network layout, it might be more practical to simply break your network into separate vlans for each floor or building you have. If your physical layout is simply flat, then I'd look into moving the servers into their own vlan along side with the management (they do tend to like the extra attention :>) and keep the rest in one vlan.
Again, the implementation really depends on how the company works and what you believe is best.
In any case, ensure you keep the management vlan (vlan 1) free of users as it should be dedicated to the network switches.
Thank you. Based on my suggestion, we purchased 1 x L3 and 2 x L2 switches. My suggestion was based on minimizing collissions, since we had 12 LAN printers as well. Lots of mysterious annomollies would happen, so I thought increasing the collission domains would solve the issues. I have to implement the VLANs. We will be on 2 floors. 1. Would it be more practical to base the VLANs on application programs with client server relations or by departments. Ex. the CFO would be using the accounting application which is accessed through the accounting application server. The CFO will sit on same area as the other executives.