Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: how to divide a LAN

how to divide a LAN 10 years 5 months ago #14006

  • monsky
  • monsky's Avatar
  • Offline
  • Distinguished Member
  • Posts: 177
  • Karma: 0
what is the best solution to divide a LAN with the objective of security? let's say 3 departments in the office.. the accounting.. engineering .. and production.

and what is the simplest solution? is subnetting one of the solution?


tnx in advance
The administrator has disabled public write access.

Segmenting your LAN .......... 10 years 5 months ago #14008

  • tHe-SwItCh
  • tHe-SwItCh's Avatar
  • Offline
  • New Member
  • Posts: 18
  • Karma: 0
hi

The best solution to partioning or segmenting your LAN is pretty much VLANing it. A VLAN or Virtual LAN will give you the much required isolation between different departments in your workplace and also accomodates hierarchy n scalability. Trunking will allow you to continue the VLAN on different switches located on perhaps ... say different floors.

For eg. u hv the frontline technicians accessing the network from floor 1 and their Technical Manager accessing the same workgroup/ network/ network subsection from floor 2. Since they are gonna be accessing the same network but from different floors ..... Trunking between Managed VLAN embedded switches is the best solution here. Subnetting in such cases may help .... but for specific requirements only ... and actually does not provide any sense of security. Subnetting sometimes will only end up create more problems than it solves. Simple MAC level or 802.1Q Tag based VLAN should be the simplest way to approach this problem ..... n more often than not ..... the simplest way to solve a challenge is very often the best one !

Cheerz n beerz
The administrator has disabled public write access.

subnetting or workgroups 10 years 5 months ago #14010

  • Arani
  • Arani's Avatar
  • Offline
  • Moderator
  • Posts: 745
  • Thank you received: 10
  • Karma: 4
yes subnetting could be a good solution provided how many divisions you want to make in the existing network structure, and how many hosts you need in each network subdivision. there are other options as well in forming workgroups, but at the end of the day it primarily depends on what your security needs are. you can even divide the network up by using hardware and subnetting combination.
Picking pebbles on the shore of the networking ocean
The administrator has disabled public write access.

hi guys, 10 years 5 months ago #14018

  • VINODM
  • VINODM's Avatar
  • Offline
  • Frequent Member
  • Posts: 47
  • Karma: 0
Hi,
just like to add to tHe-SwItCh & Arani

Subnetting & VLAN are the options we have, the only diffrence is that Subnetting help us to Eliminate the Department at Network (IP Layer) level where as VLAN segments the Network at the Layer 2 (MAC).

I personally prefer VLAN because it is more secure and Have the options of assigning Port Level security based on MAC address information & eliminate Broadcast domain at the L2 Itself.

Cheers,
-VINOD M
Cheers,
VINOD M :)

CCNA
~If You Cant Beat Him Join Him~
The administrator has disabled public write access.

Re: how to divide a LAN 10 years 5 months ago #14097

  • kunaltyagi
  • kunaltyagi's Avatar
  • Offline
  • Frequent Member
  • Posts: 40
  • Karma: 0
for this the best resolution is configuring VLAN's port wise because this is the only option that provide the best security when we think about the secured division of LAN
I'm an artist by living --- my art is my life
The administrator has disabled public write access.

Re: how to divide a LAN 10 years 5 months ago #14115

  • monsky
  • monsky's Avatar
  • Offline
  • Distinguished Member
  • Posts: 177
  • Karma: 0
ok. i will keep those informations.

thanks to all! :D
The administrator has disabled public write access.
Time to create page: 0.086 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup