ERS 8600, simple setup, IP, VLANs, etc.

Hi I am looking at a relatively simple setup: a dozen networks,
each with its own switch and /24 IP subnet are linked to one
router which has a link to the campus net. The root router is an
8600 and the leaves are 5530s or 5520s.

The idea is that the 8600 is configured as a pure router, and
the 5530s/5520s as pure switches. So the 8600 has N+1 addresses,
where N addresses are the gateway addresses used by nodes in the
N leaf subnets, and the last one is the address on the link to
the campus net. Therefore I also need N+1 routes, N routes to
the leaf subnets, and 1 default route to the campus net.

To give some numbers, let's assume:

* The link to the campus net has the 192.168.0.0/30 subnet, the
8600 end is 192.168.0.2, the campus net gateway (which is
another 8600) is 192.168.0.1.

* The leaf subnets are 10.0.1.0/24 to 10.0.12.0/24, and the
gateway address each subnet expects is to be the .1 address in
each subnet.

* The 8600 then must have N ports with addresses 10.0.1-12.1,
and one port with the 192.168.0.2 address.

* The internet gateway must two routes back to the 8600, one
to 192.168.0.2/32 via 192.168.0.1 and the other to 10.0.0.0/8
via 192.168.0.2 (or similar).

* One of the leaf networks should be connectable with a MLT
connection between the 8600 and its 5530.

So far so good. My questions are:

* What address to give to the real or virtual management port?
Possibilities: 192.168.0.2, something like 10.0.0.1, something
arbitrary, ...

* User IP based brouter ports or port based VLANs to bind the
10.0.1-12.1 addresses (and related routes) to the ports to
which the leaf switches are connected?

* Assuming that this has to be done, how to relay DHCP queries
from the 10.0.1-12.0/24 subnets to the campus subnet and
responses back to them?

Ideally the choices would satisfy these constraints:

* Minimal use of VLANs, in particular avoid on-wire VLAN tags
(VLANs entirely internal to the 8600 are sort of OK).

* Other then DHCP, no relaying of broadcasts outside the network
they originated from. In other words, traffic among the leaf
networks (very little is expected anyhow) should be purely
routed, and so should traffic between the campus net and the
leaf networks, with the exception of DHCP.

* The config should be done with CLI commands. In particular the
config should be saveable to a text file and checked into a
version control system...

Any suggestions and example warmly welcomed, as while I am very
familiar with networking configuration in the UNIX/Linux/...,
rather less so with the Nortel CLI.
.

Relevant Pages

  • Re: VPN or not to VPN SBS to external pcs?
    ... "Claus" wrote: ... I have to admit changing the sub net on the remote sites is the option I ... have to change the SBS subnet, ... Home networks are normally 192.168.0.x or 192.168.1.x ...
    (microsoft.public.windows.server.sbs)
  • Re: I want to link 2 lans at home
    ... > have to change the least significant bit of the sub net mask. ... So that for the original poster to add the two networks ... Anyway, if the two linksys' were just routers, just changing the subnet ... puttin everything on a /22 subnet as discussed previously in the thread. ...
    (comp.os.linux.networking)
  • Re: Increase Addresses
    ... Maybe he has to have a subnet larger than a /24 ... > Microsoft Internet Security & Acceleration Server: ... Do I need to change my mask on the router to? ... networks. ...
    (microsoft.public.windows.server.networking)
  • Re: Wireless + Wired LAN?
    ... In that case, there would be two entries in the laptops routing table for the same subnet, so Windows will load-balance across the two routes, sending some traffic via the wireless and some via the LAN. ... If it's all one big network, ie you have your laptop plugged in to a wireless router, and also setup on the wifi, then you'll likely encounter problems because again both interfaces will be on the same subnet, here at least though it doesn't matter which is used as they both go to the same place. ... So, in short, unless both networks are separate physically and/or at least separate subnets then only have one enabled at a time. ...
    (alt.sys.pc-clone.dell)
  • Re: ERS 8600, simple setup, IP, VLANs, etc.
    ... router which has a link to the campus net. ... The link to the campus net has the 192.168.0.0/30 subnet, ... What address to give to the real or virtual management port? ... Every interfaces of VLANs on ERS8600 can be the management IP ...
    (comp.dcom.sys.nortel)
Loading