0

I am working on setting up a small vm host cluster and I have the following setup :

  1. Windows server with multiple network interfaces
  2. Aruba 2930f switch
  3. Switch is connected to internet (gateway 192.168.0.1)

I would like to configure multiple subnets as this will be a Hyper-V host with iscsi storage for the vms and failover clustering setup with another server. I would like the switch to be in its own subnet.

Some questions :

  1. When there are multiple nics on a server, is there a "default" for the machine?
  2. If I put the switch on a separate subnet what is the best practice for accessing the switch from this host?

Some background, I just recently started to work on networking/infrastructure due to a small business that I am now part of. My background is in software development but I now wear multiple hats so sorry if my questions or phrasings seem "off".

Thanks

7
  • Does your router handle VLANs? If it does, you could bond the ports on your server, connected to the switch - and get the needed VLANs through the bond. Something on the network would need to be able to route between the networks (if communications between the subnets are required)
    – xstnc
    Jan 19, 2021 at 9:54
  • Hi thanks for the response, yes the 2930 will do vlans, however, my main question is related to different subnets. I would like to access the switch from a machine on a different subnet. Jan 19, 2021 at 9:57
  • Which ties in to my comment :) Having an interface on the host on a different subnet than the IP of the switch - you would need something to route between the networks. It's normal to have several gateways (one per subnet), which would be responsible for routing inbetween the separate networks.
    – xstnc
    Jan 19, 2021 at 10:11
  • So are you saying that I should have a second gateway configured on the host machine for the additional subnet I want it access? Would that second gateway be the ip of the switch? Jan 19, 2021 at 10:16
  • If you have multiple interfaces (and a spare one), you could put an IP on that interface on your windows host, and connect it directly to the switch. On the same subnet as the switch. Make sure to NOT put a default gateway on that interface. The best way to do it, would have your router to route between the current network on your windows server, and the IP network of your switch.
    – xstnc
    Jan 19, 2021 at 10:21

1 Answer 1

0

To adress the questions in your post (in a simplified explanation) -

  1. Multiple NICs will behave separately, and send the traffic via each NIC dependant on the destination. When IP adresses are configured on the NICs they are added to the local routing table (which can be displayed with the show route command in powershell or CMD on Windows). If no route is found for a given destination it will use the configured 0.0.0.0 route (default route / default gateway), to see if that will lead anywhere. In a very simple way, you could look at the interface with a set default gateway as the default interface. Multiple 0.0.0.0 routes (default gateways set) for the same host usually cause both problems and confusion.

  2. Separate subnets can be solved by your router. If your router knows both about the subnet where your switch is configured, and the subnet that your host is configured at - it will be able to route the traffic between the two subnets (unless you speficially tell it not to).

On the switch, the IP interface should have a gateway set or you would enter a static route to the host network. On the host you would do exactly the same in using the router as a default gateway, or specifying the switch IP network in a static route (and which interface to use).

In regards to the discussion in the comments, I've quickly drawn up an example of how one could configure your solution.

quick explanation

For any host (also the switch) with a set default gateway or static route configured where the "next-hop" or IP is set as one of the router interfaces would be able to communicate with eachother. When configuring something like this, it's also common (close to mandatory) to control which subnets are actually -allowed- to talk to eachother. In most cases a simple filter on the router would suffice.

For more control and active handling of the traffic between VLANs and IP-subnets a firewall could replace the router in my drawing. Most firewalls today are capable of simple inter-subnet routing; and one would go for a dedicated router in the case of a more advanced setup.

2
  • Thanks forr the explanation, im a newbie in networking and these type if answers help a lot! Jan 22, 2021 at 17:30
  • You're welcome! It's highly simplified and there are about a million ways to solve your task, but hopefully it will give you a tad more insight than before. Welcome to the networking club :)
    – xstnc
    Jan 28, 2021 at 14:27

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .