I have a network setup with multiple buildings, each with its own router connected using fiber cable to the main router. Each router has its own DHCP server. I want to change it so that there is only one DHCP server in the main router, with dynamic VLAN assignment from RADIUS server.
To get users obtain IP address from the main DHCP server I can either use DHCP relay or I can just bridge all the interfaces and VLANs.
Which method works best in this case?
Which one is more secure?
I think using bridge is much simpler, but maybe there's a catch?
Please advise me on this. Thanks.