adding router to existing network question?

[Prizmm]

We currently have a flat network with roughly 150 users using a class b private address (10.164.0.0). I have built a test network/lab and I want to keep it seperate from the rest of the current network. My plan is to just add a Cisco 2611 router that I have and use e1 for the existing network side and use e0 for my lab side. Is this correct thinking? Thanks

 

[ChrisAC]

That should work okay. By the way, technically your network is a class A network (using the old classful systems anyway).

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[JOAMON]

Just did something similiar. Needed a guest network and had an extra interface on my router. Created new subnet and applied inbound and outbound access-lists to block access to and from production network(s) while still giving them a path to the internet.

 

[Prizmm]

Thanks for the info. Could you share your ACL with me? Im interested to see how much you blocked. THanks

 

[JOAMON]

Basically I am blocking all access to and from the four internal subnets and the last line of the access list is to permit ip any any for internet access. Guests have no access to my subnets and vice versa. The only access from my production network to the guest network is to the switchs IP address on that network for management reasons. Important to remember to add the new subnet to the nat overload access-list if you want it to have internet access.

 

[Prizmm]

One thing I am concerned about is wehter or not I need to disable CDP? We just installed a new Cisco core in our production network and I dont want it to talk at all. Thanks.