Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are in the process of installing a 20 Meg Metro-E connection and we need to be able to segment the bandwidth into 3 different VLAN's that should be completely separate for security reasons and be able to assign a max bandwidth usage rate per each VLAN.

First of all is this possible using 1 managed switch and would this be the recommended way to do it?

If yes, what is a good switch for this purpose?


share|improve this question
up vote 2 down vote accepted

Certainly you can do this using any QoS/CoS-capable switch but I'd advise you not to assign maximum bandwidth parameters to your segments but minimum ones, the reason I say this is why limit the second and third segments bandwidth if/when the first segment isn't busy and vice versa, what you want to do is protect what needs protecting and let everything else be done under 'best efforts'.

share|improve this answer
Thanks for the suggestion on the minimum bandwidth. That makes more sense. – rubendn Apr 5 '11 at 18:34
How would the VLAN's on non-routable subnets (192.x, etc.) get internet access? Do you setup a gateway on the switch similar to the way you set it up on a router? – rubendn Apr 5 '11 at 18:35
NAT usually.... – Chopper3 Apr 5 '11 at 19:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.