""simon watson"" wrote in message news:[EMAIL PROTECTED] > Hi > > Some how I was thinking VLAN tagging was something more than just "Trunking" > in Cisco talk,as you can guess I'm pretty rusty when it comes to switching.I > have another question.Look at the example below. > > > REMOTE SITE > MAIN SITE > > PC's-----CISCO 3550--------CISCO 2600~~~~~~CISCO 3600--------ALCATEL L3 > SWITCH..............PIX...INTERNET ROUTER---INTERNET. > (VLAN3) (802.1q TRUNK) (256K LINK) (802.1q > TRUNK) (VLAN3) > > > A client wants to allow a group of PC's on a remote site, access to the > internet via the main site's ISP.But wants these group of Pc's on their own > VLAN so they have no connection to the rest of the network (except for the > internet router which the whole network uses to access the internet) they > have been advised by a third party to do it as above.They have a Cisco > 3550EMI switch at the remote site & a Alcatel Omnicore L3 switch at the Main > site.The WAN link is a 256k lease line.They want to configure the PC's on > the remote site with the same VLAN as a dedicated PIX on the Main site (also > on the same subnet). > > The Cat 3550 is not using it's L3 capabilities and is trunked to the remote > site's router > > Can this be done ?????????
sure. not sure you need to worry about switching. use the inbound ( from the branch office ) router to route to the default gateway for internet access. put in policy routing and access lists denying access from the branch net to anything on the host site net. where is all this vlan trunking coming from? looks to me like a red herring. > > > I'm sure thinking of the basic laws of routing it won't be possible to have > devices being on the same subnet but across different WAN links, as routing > loops can occur.Also would it be best to enable the layer 3 capabilities of > the switches, or to let the routers do the work. > > I'm looking forward to your answers > > > Thanks in advance > > Simon. > > > > > > > > > > > > ----- Original Message ----- > From: "Henrique Issamu Terada" > To: "simon watson" > Cc: > Sent: Tuesday, July 01, 2003 2:09 PM > Subject: RES: VLAN Tagging on Cat 3550 [7:71703] > > > Vlan tagging is commonly called by Cisco as trunks. > Have you ever configured trunks as ISL ou 802.1q ? > Actually the name vlan tagging makes more sense on non Cisco equipment, > where only exists 802.1q . > ISL doesn't do tag as 802.1q , but reencapsulates the packet with a new > header . > > My 0,02 > > > _____________________________________ > > Henrique Issamu Terada, CCIE # 7460 > > IT Support - Open Network > > CPM S.A. - Tecnologia criando valor > > Tel.: 55 11 4196-0710 > > Fax: 55 11 4196-0900 > > [EMAIL PROTECTED] > > www.cpm.com.br > > -------------------------------------------------------------------------- > > ------------------- > > Esta mensagem pode conter informagco confidencial e/ou privilegiada. Se > > vocj nco for o destinatario ou a pessoa autorizada a receber esta > > mensagem, nco pode usar, copiar ou divulgar as informagues nela contidas > > ou tomar qualquer agco baseada nessas informagues. Se vocj recebeu esta > > mensagem por engano, por favor avise imediatamente o remetente, > > respondendo o e-mail e em seguida apague-o. Agradecemos sua cooperagco. > > > > This message may contain confidential and/or privileged information. If > > you are not the addressee or authorized to receive this for the addressee, > > you must not use, copy, disclose or take any action based on this message > > or any information herein. If you have received this message in error, > > please advise the sender immediately by reply e-mail and delete this > > message. Thank you for your cooperation. > > > > > > -----Mensagem original----- > > De: simon watson [SMTP:[EMAIL PROTECTED] > > Enviada em: terga-feira, 1 de julho de 2003 05:02 > > Para: [EMAIL PROTECTED] > > Assunto: VLAN Tagging on Cat 3550 [7:71703] > > > > Hi Guys > > > > A client wants a Cat 3550 configured for VLAN tagging, I have not done one > > of these before so how do I configure the switch, also there is a Cisco > > 2600 > > router also connected to the switch.Do I need to configure the router to > > accomodate VLAN tagging (and any router that packets of the VLAN goes > > through ?) > > > > Thanks > > > > Simon. > > Incoming mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.495 / Virus Database: 294 - Release Date: 30/06/2003 > > > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.495 / Virus Database: 294 - Release Date: 30/06/2003 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=71854&t=71703 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
