Quantcast
Channel: General Networking
Viewing all articles
Browse latest Browse all 27527

Best way of using VLANs to prevent broadcast traffic, tighten security

$
0
0

Hi,

So this office network I look after has gotten a bit out of hand. Every time I see a network card light flickering away on a machine that's idle is really driving me nuts. tcpdump is showing a *large* amount of broadcast traffic, and there's other issues which I'll share as well.

The network is a single subnet, around 90 machines, plus ~10-15 servers (virtual - Citrix XenServer). What I need to do is set something up to stop all this broadcast traffic from affecting the network's performance (I'm fairly certain it is). The other issue I have to address is that users like bringing their own laptops into the office as opposed to using company provided equipment. Some people use their macs at home as internet connection sharing devices, and thus have DHCP servers running, which conflict with the main DHCP server, and start causing support issues;

"I can't get on the network."
"Where on earth is this IP address coming from? It's not one of ours..."

The network's centered around 3 Cisco Catalyst switches. 2 x 3560's and 1 x 3500. I know that the 3560's are Layer3 capable, not sure about the 3500. What I'd like is other people's opinions on how you'd go about solving this. How would you set this network up? I'm not opposed to re-numbering into smaller/more subnets, but again - I'd like to know how you'd address this at a DHCP server level (does dhcpd know what VLAN the DHCP request came from, if so can it assign an IP from a given pool for a VLAN, etc..)?

Advice appreciated!

Dan


Viewing all articles
Browse latest Browse all 27527

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>