Hi to all,
I have a complicated network with at least 50 MT devices(CCRs, CRSs, Hapac2, HEXs, Dude, and so on, is a MT/ROS only network) on a 24h/24 enviroment, with no room for any mistakes. I manage this network remote most of the time, but only in week-ends I can go on site.
And in this nework I have some linux servers, 2 Proxmox cluster (6 nodes with windows guests and linux guests, about 20 VM /lxc Containers) .
Also ospf is present, some vpn's, some dhcp servers....
Now I think that I will need to create vlans.
I read a lot about vlans, I made some tests, I create some vlans on my home labs using MT devices, CHR, and GNS3. I start to create some vlan's on some not so important zones on this network, using tutorials from this Forum, adapted for my own case (2 years ago, starting with ros 6.x, with no problem).
My think until now, was, mesure twitce and cut once ... Test and retest.
As a side note, I am the only network admin on this network.... think like "one man show"
This is my landscape.
I have start to create a vlan admin for all my MT devices, and 2 other vlans, not so important.
Because I can not have the time to make ALL vlans that I need in one weekend, and to be sure 100 % that monday all wiil be ok, I think that a good migration scenario to vlans only will be to create all vlans step by step, but without filtering(tagg only on trunking ports). After all my vlans are made I could filter on trunking ports for vlan taggs only, and also ingress....
Now my big question is, could be other variants in my case?
Thx. a lot in advance for any opinion.