请大家指点：三层交换机和路由器哪个比较实用。

[lxp_luo]

请各位高手指点：我公司现在一台路由器，通过一台ADSL线上网，公司两个网都接在这台路由器上；现考虑到安全问题，要将两个网分开。一家网络公司给我们提出了两套方案：一套是再加个路由器；另一套是给我们装一台三层交换机。但我现在对路由器及三层交换机的用途不是很了解，请各位高手给予指点，我该加路由器还是加三层交换机呢。还有路由器主要都有些什么用途呢！谢谢！！！

 

[kitaro]

根本不是一种东西，你们的要求很简单，只要一个switch支持vlan就行了

 

[avacao]

最初由 kitaro 发布
根本不是一种东西，你们的要求很简单，只要一个switch支持vlan就行了

不就2个网嘛，你那个是是么路由器？没有2个lan interface吗？如果你弄个支持vlan的switch，就要求那个router也支持vlan。

路由器有很多layer 3 interface to access WAN and do the layer 3 job like route, access control, qos etc, while layer 3 switch usually is used to route VLAN in your LAN, of course, high end layer 3 switch can have as many WAN interface as router has. for performace, using layer3 switch while to save money using one more cheap router.

 

[人在天涯]

最初由 avacao 发布


不就2个网嘛，你那个是是么路由器？没有2个lan interface吗？如果你弄个支持vlan的switch，就要求那个router也支持vlan。

路由器有很多layer 3 interface to access WAN and do the layer 3 job like route, access control, qos etc, while layer 3 switch usually is used to route VLAN in your LAN, of course, high end layer 3 switch can have as many WAN interface as router has. for performace, using layer3 switch while to save money using one more cheap router.

几乎全部家用的和大部分低端router都没有QoS

 

[shusheng]

主要还是楼主要解决什么问题。原贴是“考虑到安全问题”，才要将两个网分开。不知道希望达到什么样的安全目标。

 

[avacao]

最初由 人在天涯 发布

几乎全部家用的和大部分低端router都没有QoS

what u siad are 100 bucks adsl/cable router, anyway, i can say nothing for these routers, for enterprise router, the downtime should close to 0 while for those garbages...

 

[GreenGable]

For my understanding, Layer3 switch opens the option that you can do traffic engineering/routing (layer3) or ACL, QoS (layer4) on top of a switching (layer2) architecture, for example, Cisco Catalyst 6000/650X series. Based on a lot of features such as Supervisoring, PFC, MLS, it creates shortcuts when do routing, supposed to be much more effecient.

Comparing with regular routers, L3 switches provide more flexibilities for networking engineers to control the network traffic.

 

[zhoubill]

use VPN

can you use VPN to seperate 2 LANs?

 

[吾言]

Do you think VPN is a LAN technology? Actually, VPN does just the reverse.