Best Way to Segment

[kmcelroy]

Myself and some coworkers began the following discussion:

A client of ours has two T1's one from qwest and one from sprint. He has a 3640 router and from the router he has a switch connected to the E0/0 port. From the switch he has several servers. Each server may be on a different network than the other. Ie 192.168.0.2 (qwest) is on one server 192.168.1.2 (sprint) is on another server. The config on the router is as follows:
int e0/0
ip address 192.168.0.1
ip address 192.168.1.1 secondary

would it not be better to create sub interfaces? Or can you have 20 network IP's on the Interface? What would be the best the better way or correct way?

 

[wybnormal]

Subinterfaces... you have a limit of 2 IPs on the secondary IPs but more importantly is that routing protocols do not really care for secondary interfaces.. where the subinterface is considered a *real* port by the protocols.

MikeS Find me at

http://www.packetattack.com

"The trouble with giving up civil rights is that you never get them back"

 

[kmcelroy]

So would it be ok to have it setup using the Interface and then add IP address as needed? What I am asking is there a "cisco way" to do this? I know that it will work to have say 10 ip addresses on FastEthernet 0/0, but is their a better way?

 

[jgercken]

It's no big deal for servers to have more than 1 IP. Actually I don't think there is even a limit to how many you can put on NT/2000.

Why do you need more than 2 on the router? You are using 192.168.0.2 255.255.255.0 for Quest right (1 subnet) or are you trying to use a 252 mask with each server in a different subnet? The latter won't work since you're limited to 2 ip's per router interface. Don't even think it would benefit you much anyhow.

If you give more info I could give a better response.

Jeff

 

[kmcelroy]

I have 8 actual Class C's. 4 from Sprint and 4 from Qwest. My issue is with the Ethernet Interfaces not the serial. On my Ethernet Interface I have a Catalyst switch connected. From the Catalyst switch I have 20 servers (Radius, Email, IIS, APache, ETc...) All my servers belong to different networks one subnet from sprint or one subnet from qwest. So I have to put the IP address for that network on my Interface Ethernet 0/0. I once read some where that this is not correct and not efficient? I tie all my machines together with AD on a private network and Different NIC in the machine.