We are running out of IP addresses on our expanding network. The current range is 192.168.1.0/24. Considerations:
We use an ISA server as a proxy for all web traffic, this is our current default gateway
Our current backbone is 4 x L2 dell switches connected by LAGs to effectively create 168 port backbone
We have remote site2site vpns connecting into our network from 192.168.102.0,192.168.103.0 etc. They will need access to all the internal networks
2 possible solutions:
Change the mask from 255.255.255.0 to 255.255.252.0, which gives us the range of 192.168.0.1 to 192.168.3.254. The downside is we need to change the mask in a lot of places (static ip hosts, dhcp server etc)
Put a layer3 switch in before the L2 switches, and split it into vlans. This would be a simpler fix. We would change the default gateway to the layer 3 switch, and have the ISA as the gateway for the switch. Would we use the L3 switch as the default gateway for clients then, or could we leave it as the ISA?
What's the best method of gaining some extra IP addresses? Anything to look out for or be wary of?