https://community.extremenetworks.com/t5/network-architecture-design/switch-routing-and-vlan/m-p/13465#M869 Hello everyone I have two Network Switches (AT) and one firewall (Sonicwall Tz600). i have configured 10 different vlans on the both switches. assign ip on vlans. now my question is if i configure vlan same ip on both switch like vlan20 ip 192.168.20.1 same on the other? i configured and i am able to ping but want to ask as confusion. second i configured trunk between switches and LACP Trunk means 2 ports lacp trunk on both switches. what is the best practice.? also if i want internet on client with switch gatway. Fri, 22 Jan 2016 17:35:00 GMT umair 2016-01-22T17:35:00Z https://community.extremenetworks.com/t5/network-architecture-design/switch-routing-and-vlan/m-p/13465#M869 Hello everyone I have two Network Switches (AT) and one firewall (Sonicwall Tz600). i have configured 10 different vlans on the both switches. assign ip on vlans. now my question is if i configure vlan same ip on both switch like vlan20 ip 192.168.20.1 same on the other? i configured and i am able to ping but want to ask as confusion. second i configured trunk between switches and LACP Trunk means 2 ports lacp trunk on both switches. what is the best practice.? also if i want internet on client with switch gatway. Fri, 22 Jan 2016 17:35:00 GMT https://community.extremenetworks.com/t5/network-architecture-design/switch-routing-and-vlan/m-p/13465#M869 umair 2016-01-22T17:35:00Z https://community.extremenetworks.com/t5/network-architecture-design/switch-routing-and-vlan/m-p/13466#M870 Hi Umair<BR /> <BR /> Just to clarify. Are you assigning the same IP address ie 192.168.20.1/xx on 2 different switches? If yes, you'd need to change that. Use one switch as routing mechanism with the other as only a layer 2 extension. Are you attempting to build a redundant topology? If yes, consider MSTP. Do the switches support VRRP?<BR /> <BR /> Looking at the LACP trunks. What specific switch model are you using?<BR /> <BR /> As for the routing. You'll have routing interface configured on the switch. Ie <BR /> <BR /> VLAN10=192.168.10.1/xx<BR /> VLAN20=192.168.20.1/xx<BR /> VLAN30=192.168.30.1/xx <BR /> <BR /> and so on<BR /> <BR /> You can then create a final VLAN=Internet and configure a port as access (untagged) that will connect to your firewall. Let's say the firewall's IP address is 10.10.10.254/24. Configure a routing interface on the switch as 10.10.10.1/24 as the default next-hop needs to be in the same subnet. <BR /> <BR /> You'll next configure a default route as follows:<BR /> 0.0.0.0/0 10.10.10.254 to match all outbound traffic.<BR /> <BR /> On the firewall you'd need reverse route to each of the internal subnets. The next hop from the firewall's perspective would the routing interface in the internet VLAN.<BR /> <BR /> 192.168.10.0/xx 10.10.10.1<BR /> 192.168.20.0/xx 10.10.10.1<BR /> 192.168.30.0/xx 10.10.10.1<BR /> <BR /> And so on. <BR /> <BR /> Hope this helps. Please send me answer to questions above and I'll provide more detailed configuration. <BR /> <BR /> Regards,<BR /> Francois<BR /> <BR /> Fri, 22 Jan 2016 18:15:00 GMT https://community.extremenetworks.com/t5/network-architecture-design/switch-routing-and-vlan/m-p/13466#M870 Francois_Scheun 2016-01-22T18:15:00Z