The only reason to route the voice VLAN is if you need the phones to access the Internet and/or vice-versa. If you only need to worry about the computers on the data VLAN accessing Trixbox's web interface, I would suggest using the Ethernet VLAN capabilities of Linux. You can create eth0.vlan1 for data on Trixbox, and have the "default" vlan for the port on the switch be voice. Then, the voice VLAN goes nowhere but to your PBX and the phones.
The other option is to put in another NIC, one for the voice VLAN, the other for the data VLAN. I've been pretty happy with the Linksys 24-port layer 2 switches (SRW224P). They're running around $400 right now. If you really need layer3 support, I would steer clear of the Netgear. I've had a lot of problems with them, and the support was disappointing. But then again, I got a bunch that don't work that I could sell you ;) Ahh, interesting idea…if I understood correctly, you’re basically using a layer 2 switch and trunking the voice and data VLAN to the asterisk box and doing the routing and ACL work there? Advantage is lower cost because you don’t need a layer 3 switch anymore and don’t have to learn a new CLI or other config method.? Here’s a bit more information…the client is a building owner who occupies the first floor and is renting out the rest of the building. In addition to his own voice/data network (which would be on separate VLANs) they want to offer the building tenants the ability to use their PBX and internet connection. Due to a quirk in the service providers SIP ALG all IP phones in the building must be on the same network (VLAN) which I don’t see a problem with, but each tenant’s data will be in a separate VLAN. I’m thinking I could trunk the voice VLAN and all of the individual tenant data VLANs to the Trixbox to allow them access to the web interface? Any other ideas out there based on this scenario? Thanks again No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.476 / Virus Database: 269.9.9/870 - Release Date: 6/26/2007 10:07 AM
_______________________________________________ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
