I need a 24 port switch

[loudmouth]

I am looking for a 24 port switch that has each port on a different vpn by default. Come someone recommend a cheap switch that has this feature?


Thanks

 

[cleverhandle]

I'll be the first to admit that I don't know all the possible things you can do with VPN's, but in my experience VPN's are something you'll do with a router, not with a switch. That is, your question doesn't make any sense to me. Could you elaborate a bit?

 

[w0ss]

hmm I can't think of any way to do this. You could do it with a cisco router and etherswitch card. But the Config would be horrible. All I can picture is 24 gre tunnels and 24 VRF's messy messy. Then if you need to go between them vpns have fun

could be done but what is the problem you are trying to solve?

 

[InlineFive]

It sounds like he might be trying to bridge 24 offsite networks.

 

[skyking]

do you mean vlan, or virtual lan? Set up so each computer cannot "see" another?

 

[loudmouth]

sorry guys....getting my terms mixed up. I do mean VLAN....skyking is correct in what I want the switch to do...by default.

 

[nweaver]

I don't think any switches will, by default, make a seperate VLAN for each port, although it would be easy to setup that way. Although if you want to pass traffic from one to the other, you had better make a dot1q trunk to a router on a stick that understands what's going on.

 

[w0ss]

I know of no switch that does this by default. Although as others have mentioned it isn't that hard to configure just remember to look at the specs some equipment will have a max number of vlans supported.

 

[Tazanator]

well dude only thing close would be a 4U SBC computer with all the slots filled with NIC's giving you a 13 port router running *nix. I made one once... it works but at peak performance the lag skyrockets...

 

[letstalkcisco]

Originally posted by: nweaver
I don't think any switches will, by default, make a seperate VLAN for each port, although it would be easy to setup that way. Although if you want to pass traffic from one to the other, you had better make a dot1q trunk to a router on a stick that understands what's going on.

Agree. This is above and beyond a "simple" config, as not only will you need to configure each switch port to be part of a different access VLAN you'll need to configure the new router with SVI's (switched virtual interfaces -- sorta like VLANs with IP addresses) in order for it to route between them. Unless of course you're connecting to some existing network, then hopefully there's an engineer to figure it out...

 

[loudmouth]

found a switch made by cabletron els10-27mdu but it is only supports 10Mbps. With each port only using 3.0Mbps internet connection I think 10Mbps is plently???

 

[spidey07]

ok, if you'll explain what you're trying to do maybe we can help.

No switch is going to default every port into a separate VLAN. But just about any "real" switch will allow you to put every port into a different VLAN. That would be a little pointless however as no port could communicate with the other unless you did routing on the switch.

 

[melthemoose]

it sounds like you want to set up what is called a "private VLAN"...where every port (save one) is completely isolated from the others and all traffic from one port can only be sent out to and received from the common promiscous port. This is quite common when you set up a multiple dwelling unit for internet access, you don't want the folks in Apt 1A being able to see (and hack) the folks in Apt 3C, so each port is on its own VLAN and 1 port is trunked out to the internet router.

http://www.cramsession.com/articles/fil...vate-vlans---a-look-at-982003-1700.asp

 

[skyking]

I've seen a 10BaseT switch that does exactly that on ebay. 10BaseT is plenty for an internet connection.

 

[nweaver]

10BaseT that DEFAULTS to every port vlaned?

I still would like to hear WHAT he needs (rather then what he thinks). This setup would require a decent router that supports dot1q trunking to route this traffic, I don't think any SOHO gear will do that.

 

[nsafreak]

No SOHO gear that I know of will do this either. He's looking for a decent grade managed switch to do what he wants to do and I'm not sure WHY he wants to go through this kind of hassle in the first place.

 

[skyking]

Originally posted by: nweaver
10BaseT that DEFAULTS to every port vlaned?

I still would like to hear WHAT he needs (rather then what he thinks). This setup would require a decent router that supports dot1q trunking to route this traffic, I don't think any SOHO gear will do that.

yes, amazingly enough. I just can't remember the make/model

It said right in the description it was for apartments/hotel rooms.

 

[metalstorm203]

Just as spidey07 says - check into any of the decent Cisco or Extreme layer 3 switches. Though by default, the ports aren't isolated from each other.