I have a network setup with multiple buildings, each with its own router connected using fiber cable to the main router. Each router has its own DHCP server. I want to change it so that there is only one DHCP server in the main router, with dynamic VLAN assignment from RADIUS server.
To get users obtain IP address from the main DHCP server I can either use DHCP relay or I can just bridge all the interfaces and VLANs.
Which method works best in this case?
Which one is more secure?
I think using bridge is much simpler, but maybe there’s a catch?
Please advise me on this. Thanks.
If you can use one VLAN per building … and bring them to main router, then this would give you most flexibility … building routers would become switches (bridges).
With bridge there might be more traffic on the connection towards main router (broadcasts mainly) then with routed traffic. If capacity of that/those connection(s) is not a limiting factor, then I’d go with bridge solution.
I forgot to add that users will get dynamic VLAN assignemt from RADIUS server. So VLAN for user devices will be separated from access points, routers, etc.
Which means that VLANs are in the mix already. IMO another point in favour of VLAN-enabled bridges (and against DHCP relay).
I see. Then I will use the bridge method. Thank you