VLANs

[Mohamedseliem]

hello everyone, i will try to simplify it as much as i can.
our LAN consists of one subnet, this subnet is 192.168.1.0/24
it handles voice and data, some users are using hard phones and some are using web app and some are using both.
my question is, what do i need to create vlans ?
3 L2 SWs - 1 firewall

 

[Saqqara]

Now many devices on the network - as you may be over complicating the network creating vlans

Why do you want to create vlans

This is not a 3CX question, more a question for your switch manufacture

 

[Mohamedseliem]

thanks

 

[Alphabetic]

+1 Why do you want to make VLANs?

 

[Mohamedseliem]

planning to separate departments and prioritize voice traffic

 

[Saqqara]

What switches / firewall do you have ?

On the switches, they need to be managed to get vlan the functions (not unmanaged) which you have being layer 2

The firewall needs to understand Vlans

 

[Mohamedseliem]

cisco and UBNT switches, sophos FW

 

[princer800]

So when we initially decided to go live with 3cx I asked the same question.
After a discussion with 3CX Support - realized it was not necesary.
Not that you can't do it - but not strictly required as in past VOIP solutions. (ie on 10/100M networks)
If you are using a Gigabit network and you should be - and you are not in jeopardy of exhausting your IP pool then proceed. At this point 3CX supports using VLANS and provisioning - but in most cases just not required or worth it.
I know others will say it is required - and in many cases it would be the best practice and quite essential to do this. But for the average Gigabit network and plenty of available IP's not reason to do this.

 

[cobaltit]

It's extremely rare to need VLANs for any performance reasons. VLANs are primarily about security, either for compliance reasons (minimizing CDE for PCI for example), good network hygiene (treat phones like IoT devices and assume they will be hacked at some point), or to protect from network changes like IP conflicts or DHCP scope changes, particularly if you don't manage the data network.