SwitchConf Tool: VLAN Assignment Guidelines

Overview

To provide guidelines on what VLAN to assign to a port based on the device being connected.

Procedure

1. Consider the type of device being connected. Do you know the IP address of another working device in the same building that is similar to this one? If so, most likely this device should be on the same VLAN as that similar device.

   • Browse to NetInfo and enter in the IP of the similar device into the "IP Subnet Address" field, then click "Submit".

   • The network name of the similar device will show up in the results. Copy that name, then browse to NetDash.

   • Use SwitchConf to find the port for the device you want to assign. Click on that port to edit the VLAN, and select the network name you found in netinfo. If applicable, enter in a description for the port and enable it.

     • If you cannot find the appropriate network name in the SwitchConf dropdown list, submit a help request ticket and assign to ITS -> Network.

2. If you do not know the IP of a similar device, you can make an educated guess based on the available VLANs listed in Netinfo for that building. In Netinfo, search for the building (all or part of the official building name) in the "Network Location" field. A list of all the networks should come up. Some important things to know about network names:

   • The following network types are for network management and should never be used in VLAN assignments:

     • Names that start with "O-" (though there are a few exceptions) or "D-".

     • Names that end with "-MGMT" (vlan 3) or "-AP" (Vlan 9)

   • Network names that start with CFW, DFW, or NGFW are firewalled networks - NGFW is the Next Generation firewall. Many departments that handle sensitive data (like Business and Finance) put their machines on firewalled networks.

   • Network names that contain "VOIP" (usually Vlan 2) can be assigned to ports that are ONLY going to be used for VoIP phones or teleconference devices. If you are going to plug a PC into the VoIP phone, you need to assign assign the VLAN for the PC to that port, submit a help request ticket, provide the switch IP and port number, and assign to ITS -> Network. They can configure the VoIP piece.

   • Networks with associated subnets of 10.x.x.x or 192.168.x.x are in private IP space and can only talk to other on-campus devices (no internet). These networks are typically used for devices like printers or Plant Ops devices (card readers, HVAC, etc).

   • Most end user/workstation VLANs use public addresses (anything not 10.x.x.x or 192.168.x.x) and are DHCP enabled. Netinfo will not tell you if a network is DHCP enabled, to figure that out you will have to look in BlueCat (aka Proteus). You can also just try plugging in the DHCP-enabled device and seeing if it gets a valid address (note that 169.254.x.x does not count as a valid address).

3. If you find a network you think would be a good assignment in Netinfo, click on the network name to see more information about it, including a short description and contact info. If you are unsure whether this is the network you want, contact the Administrators for that network and they should be able to tell you. If the Administrator contact information is invalid, report it by submitting a help request ticket and assigning to ITS -> Network.

4. Once you find the appropriate network in Netdisco, locate the device's port in SwitchConf and set it for that VLAN. If the VLAN does not show up in the drop-down list in SwitchConf, most likely it has not been configured on that switch yet. Submit a help request ticket, provide the switch IP and desired VLAN, and assign to ITS -> Network. For an immediate response call 7-4200.