Example Solution

This section describes an example of a tested and implemented data center, multi-tier network architecture shown in FIGURE 2-9. The network design is composed of segregated networks, implemented physically using VLANs configured by the network switches. This internal network used the 10.0.0.0 private IP address space for security and portability advantages.

Figure 2-9. Tested and Implemented Architecture Solution

This design is an implementation of the design described in "Designing for Security and Horizontal Scalability" on page 33. It includes availability design principles, which will be discussed further in Chapter 6.

The management network allows centralized data collection and management of all devices. Each device has a separate interface to the management network to avoid contaminating the production network performance measurements. The management network is also used for jumpstart installation and terminal server access.

Although several networks physically reside on a single active core switch, network traffic is segregated and secured using static routes, access control lists (ACLs), and VLANs. From a practical perspective, this can be as secure as separate individual switches, depending on the switch manufacturer's implementation of VLANs.