Setting up a "simple" network with separate users

[Dujith]

I'm trying to figure out how to setup a network for a building with roughly 20 office spaces.
The way it works is that this is a free building in which anyone can sign up and take an office for a period of time todo work and/or startup a small business.

Atm we have internet and 1 big switch (Cisco SG500 24ports). People would just connect to the switch get an ip adress and thats that.
This system is in no way safe and you can pretty much see everyone and their shared stuff from anywhere.

So after a bit of digging vlan's seemed the best bet.

So as far as i understand:

I create multiple vlans and set the appropriate port to a vlan in access mode as this will make this port only that vlan?

I would then need a good router to connect to the SG500 so it will act as an dhcp server for all the separate vlans.

This is the part i'm unclear on: when reading the documentation on different routers it seems they only support 1 vlan per port? and if they do support multiple vlans over 1 port do i just setup dhcp pools on the router that fall into the ip adress range of the vlan access port?

For example:

Port 1 on the switch is setup as access vlan 10 and has IP 10.0.10.1
Port 2 on the switch is setup as access vlan 20 and had IP 10.0.20.1
Port 24 is set as trunk? and allows vlan 10,20 and is connected to the router

On the router i create dhcp pool 10: 10.0.10.100-10.0.10.200
and dhcp pool 20: 10.0.20.100-10.0.20.200

Would this just work and wouldnt i need a gateway?

Any help is much appreciated :thumbsup:

 

[dave_the_nerd]

You're getting there. Used to be you'd need a separate router (see: "router on a stick") but most enterprise switches like yours include some routing logic too. ("L3 Mode," "L3 Switch," or "Smart Switch" it might be called, depending.)

See this thread for configuration tips.

https://supportforums.cisco.com/discussion/11841606/sg500-vlan-configuration

Otherwise, it's a pretty basic configuration - each vlan just needs a default route to the internet connection - you probably don't want to route between vlans. (This would allow people to see each other.)

If you get stuck, call up the local tech school or community college that offers a CCNA prep course and see if they have a student who wants to make an extra $50.

 

[Dujith]

Thanks, i'll give it a go next week. And keeping the student thing in mind