intermediate
Financial Services
Est. 45 mins • 60 Target Users
Financial Advisory Firm VLAN Segmentation & Inter-VLAN Routing
Apex Financial operates a 60-person branch with sensitive accounting records that must be strictly isolated from guest Wi-Fi and general staff.
Departments & User Breakdown
- Management & Finance (15 users)
- Brokers & Analysts (30 users)
- Guest Wi-Fi (up to 30 mobile devices)
- Corporate Servers (4 servers)
Physical Facilities & Sites
- Floor 2 - West Wing
Technical Requirements
vlan
Critical
VLAN Segmentation
Design separate VLANs: VLAN 10 (Finance), VLAN 20 (Brokers), VLAN 30 (Guest), VLAN 99 (Management & Servers).
ip
Critical
VLSM Subnet Plan
Subnet the base network 172.20.0.0/22 to provide appropriately sized subnets for each VLAN.
routing
Critical
Inter-VLAN Routing
Configure Router-on-a-Stick subinterfaces with default gateways on each subinterface.
Engineering Constraints
[security]
Guest Wi-Fi must never be allowed on the same broadcast domain as Finance.
[cabling]
Trunk links between distribution switches must support 802.1Q encapsulation.
Tasks & Expected Deliverables
Task 1:
Calculate VLSM Subnets
Deliverable: IP plan table specifying Subnet, Mask, Gateway, and Range for all 4 VLANs
Task 2:
Create VLAN and Port Plan
Deliverable: VLAN mapping table and switch access/trunk port assignment table
Task 3:
Document Router-on-a-Stick Interface Configuration
Deliverable: Router subinterface mapping table
Evaluation Criteria (Automated Checks)
✓
Exact VLSM subnets calculated for each department without IP overlaps
✓
802.1Q trunking configured between switches and router
✓
Inter-VLAN subinterfaces created with correct 802.1Q encapsulation tags
✓
Port security and VLAN tagging properly documented