SMI or EMI on C3750?

[destinyml]

I'm thinking of buying a C3750 switch and I'm not sure if I should get the SMI (Static routing only) or the EMI version (full dynamic routing).

I have two primary reasons why to get a layer 3 switch.

1: Redundancy: I have the posibility to connect the switch to two C6509 routers in a redundant network. I would like to make a primary and a failover connection, so that the failover connection will take over in case of a problem on the primary. As I have understood this is no problem with static routing and "administrative distance".

2: VLANS: I have one global ip network, where each ip is allocated to different customers... that is the customers are able to "see" each other and may be able to sniff each others packages.... not great. I have previously set up VLANs based on ports, however, my customers where complaining that they could not exchange trafik (like SMTP). So, I need a solution which is able to route between VLANs in the same subnet.

So the question is if I need SMI or EMI to configure a solution to the above problems?

 

[ADB100]

My personal view would be it depends on your network infrastructure model. If you have a reasonable size network and have implemented the classic Core, Distribution & Access model then I would use the SMI (IP Base) image and only run the switches as Layer-2 devices (in the access layer obviously). If you have a smaller network where you don't have a separate Distribution Layer and you Access Layer switches connect directly to the Core I would use the EMI (IP Services) image and make the uplinks Layer-3 routed links.
If you have a very small network and don't have the distincion between the core, distribution & access layers then I would use the EMI image and route between few switches you have.

What you are explaining though is a different scenario. On a high level my recommendations are that you should implement VLAN's and segment each customer into thier own VLAN's. Then on the Layer-3 device that would route between these VLAN's implement some access control between VLAN's with ACL's. I assume you have a common internet connection that everyone should use but not everyone should be able to see each other?
How you implement the design will depend on where the users are in relation to thier colleagues, the number of switches you have and how these are (should be) connected.

HTH

Andy

 

[destinyml]

All clients do share a common internet connection and should not be able to see each other. It's a pretty simple network. Take a look at this diagram which shows how I plan to implement it:

http://www.itu.dk/people/mala/Network.pdf

Please note that I do not have access to the Cisco 6509 routers. The take care of routing the trafic to the internet.

Is it posible to make a solution using the SMI image to this scenario? (I would hate to pay an extra $2K for the EMI image if I do not have to). Also since the two 6509 routers takes care of the routing on the internet I do not understand why I would need the advanced routing functionality the EMI software provides?

Thank you