Skip to main content

Welcome to a Grasp lesson

Create a free account to keep studying and create your own study path.

Lesson 40

Mapping VLANs to Subnets and Gateways

Recommended resources

Introduction

Welcome back! In our last session, you architected a complete hierarchical VLSM plan for Aperture Logistics. You took the company's requirements and our VLAN strategy and skillfully carved the 10.0.0.0/8 address space into right-sized, non-overlapping subnets. This gave us an efficient Layer 3 topology optimized for route summarization.

We now have our VLANs (the logical neighborhoods) and our subnets (the address blocks for those neighborhoods). Today, we're going to create the master blueprint that ties it all together: the IP Address Management (IPAM) document. This lesson directly addresses your goal of creating a comprehensive plan by mapping our VLAN and VLSM designs into a single, authoritative document that will guide the configuration and management of the entire network.

For any professional network, robust documentation isn't a "nice-to-have"; it's a necessity. It prevents errors, simplifies troubleshooting, and makes the network manageable as it scales. Let's start with a short segment from Jeremy Cioara that underscores this exact point.

DESIGNING Subnets for Your Company!

In this clip, Jeremy Cioara discusses the relationship between VLAN numbers, subnets, and the absolute necessity of good documentation. Pay attention to his point about why relying on memory or 'clever' numbering schemes fails in a scalable network.

Watch from 02:25 to 03:28. The key takeaway is that while matching VLAN numbers to subnets can be a nice bonus, it's no substitute for a formal, non-negotiable documentation plan.


The Anatomy of an IPAM Document

An IPAM document is more than just a list of subnets. It's a detailed spreadsheet that serves as the single source of truth for your network's Layer 3 addressing. A well-structured IPAM provides an at-a-glance understanding of your entire IP space.

What should it contain? While templates vary, a comprehensive IPAM for a large network should include the following fields for each subnet:

  • VLAN ID: The numeric identifier for the VLAN.
  • VLAN Name / Purpose: A descriptive name (e.g., DATA_HQ, SERVERS_DC).
  • Site / Location: The physical or logical location of the subnet (e.g., HQ Building, R&D Data Center).
  • Subnet Address (CIDR): The network address and prefix length (e.g., 10.10.0.0/24).
  • Subnet Mask: The mask in dotted-decimal notation (e.g., 255.255.255.0).
  • Network Address: The first address in the subnet.
  • Broadcast Address: The last address in the subnet.
  • Default Gateway (SVI): The IP address assigned to the Layer 3 interface for that VLAN. This is the gateway for all hosts in the subnet.
  • Usable Host Range: The range of IP addresses available for assignment to devices.
  • Static IP Assignments: A reserved range for devices that need fixed addresses (servers, printers, network gear).
  • DHCP Scope: The pool of addresses to be handed out by a DHCP server.
  • Notes: Any other relevant information, such as security policy notes or planned usage.

The Cisco IP Addressing Guide provides a solid framework for thinking about this.

[PDF] IP Addressing Guide - Cisco

Let's consult the Cisco IP Addressing Guide to see a professional perspective on address planning and documentation.

First, read 'Procedure 4: Document Plan' (Page 13) which emphasizes the need for a spreadsheet to document the entire IP space. Then, look at 'Appendix A: Subnet Design Worksheet' (Page 16). This simple table is the foundation of what we are building, and we will be expanding on it.


Defining Assignment Standards

Before you can populate the IPAM, you need a set of rules. A consistent set of standards for assigning addresses within each subnet is the mark of a professional design. It makes the network predictable and vastly simplifies configuration and troubleshooting. Since you're a CLI pro, you know the value of consistency when you're managing dozens or hundreds of devices.

Let's establish our standards for Aperture Logistics:

  1. Default Gateway Assignment: The default gateway (which will be the IP address of the Switched Virtual Interface, or SVI, on our L3 switch) will always be the first usable IP address in the subnet (e.g., .1). This is a widely adopted convention.
  2. Static IP Reservation: For subnets that contain user devices, we'll reserve a small block of addresses immediately following the gateway for static assignments (e.g., printers, special devices). Let's reserve .2 through .10.
  3. DHCP Scope: The remaining block of usable IP addresses will be allocated to the DHCP scope for dynamic client assignment.

This Cisco guide provides excellent recommendations for creating these standards.

[PDF] IP Addressing Guide - Cisco

This section of the Cisco IP Addressing Guide, 'Procedure 1: Define Addressing Standards', gives clear, practical advice on creating these rules. This is exactly what we're doing now.

Read 'Procedure 1: Define Addressing Standards' on page 11. Notice the specific examples given for assigning addresses to routers/gateways, printers, and DHCP ranges. This formalizes the process and removes guesswork.


Populating the Aperture Logistics IPAM

Now, let's execute. We will take the VLSM plan from our previous lesson, assign logical VLAN IDs, and build out the full IPAM document based on the standards we just defined.

Here's the VLSM allocation we finalized last time:

VLAN/Link Purpose Assigned Subnet
VOICE_CORP VoIP Phones 10.20.0.0/23
GUEST_WIFI Guest Access 10.20.2.0/23
DATA_HQ HQ Staff 10.10.0.0/24
IOT_WH Warehouse IoT 10.30.0.0/24
MGMT_INFRA Network Management 10.20.4.0/25
DATA_WH Warehouse Staff 10.30.1.0/25
DATA_RD R&D Engineers 10.20.4.128/25
SERVERS_DC Data Center Servers 10.20.5.0/27
WAN HQ-R&D P2P Link 10.254.0.0/30
WAN HQ-WH P2P Link 10.254.0.4/30

We will now expand this into our final IPAM document. For clarity, I've assigned logical VLAN IDs that group similar functions.

Aperture Logistics - Final IPAM Document

VLAN ID VLAN Name Site/Location Subnet (CIDR) Subnet Mask Network Addr Broadcast Addr Default Gateway Usable Range Notes / DHCP Scope
80 VOICE_CORP Campus-Wide 10.20.0.0/23 255.255.254.0 10.20.0.0 10.20.1.255 10.20.0.1 10.20.0.2-10.20.1.254 QoS priority. DHCP: 10.20.0.11-10.20.1.254
90 GUEST_WIFI Campus-Wide 10.20.2.0/23 255.255.254.0 10.20.2.0 10.20.3.255 10.20.2.1 10.20.2.2-10.20.3.254 Internet-only via VRF. DHCP: Full range.
99 MGMT_INFRA Campus-Wide 10.20.4.0/25 255.255.255.128 10.20.4.0 10.20.4.127 10.20.4.1 10.20.4.2-10.20.4.126 Mgmt access only. All static assignments.
110 DATA_HQ HQ Building 10.10.0.0/24 255.255.255.0 10.10.0.0 10.10.0.255 10.10.0.1 10.10.0.2-10.10.0.254 Standard data. DHCP: 10.10.0.11-10.10.0.254
120 DATA_RD R&D Building 10.20.4.128/25 255.255.255.128 10.20.4.128 10.20.4.255 10.20.4.129 10.20.4.130-10.20.4.254 Standard data. DHCP: 10.20.4.140-10.20.4.254
130 DATA_WH Warehouse 10.30.1.0/25 255.255.255.128 10.30.1.0 10.30.1.127 10.30.1.1 10.30.1.2-10.30.1.126 Standard data. DHCP: 10.30.1.11-10.30.1.126
135 IOT_WH Warehouse 10.30.0.0/24 255.255.255.0 10.30.0.0 10.30.0.255 10.30.0.1 10.30.0.2-10.30.0.254 IoT scanners/sensors. All static or DHCP reservation.
200 SERVERS_DC R&D Data Center 10.20.5.0/27 255.255.255.224 10.20.5.0 10.20.5.31 10.20.5.1 10.20.5.2-10.20.5.30 Production servers. All static assignments.
N/A WAN_HQ_RD Infrastructure 10.254.0.0/30 255.255.255.252 10.254.0.0 10.254.0.3 N/A 10.254.0.1-10.254.0.2 P2P Link. .1=HQ, .2=R&D.
N/A WAN_HQ_WH Infrastructure 10.254.0.4/30 255.255.255.252 10.254.0.4 10.254.0.7 N/A 10.254.0.5-10.254.0.6 P2P Link. .5=HQ, .6=WH.

This table is the culmination of all our planning work so far. It's clear, detailed, and actionable. From this document, any network engineer can understand the addressing scheme and begin configuring interfaces, DHCP scopes, and static routes.


Conclusion

Congratulations! You have just created a professional-grade IPAM document. This crucial step transforms your theoretical VLAN and VLSM plans into a practical, operational blueprint for the Aperture Logistics network. You have not only mapped VLANs to subnets but also established and applied standards for gateway and host addressing, fulfilling a key requirement of enterprise network design.

Key Takeaways:

  • The IPAM is the Blueprint: It is the single source of truth for your network's Layer 3 addressing scheme.
  • Standards Enforce Consistency: Establishing rules for assigning gateways, static IPs, and DHCP scopes before you start makes the network predictable and easier to manage.
  • Documentation is Non-Negotiable: A comprehensive IPAM document saves countless hours of troubleshooting and prevents costly configuration errors like duplicate IP addresses or overlapping subnets.
  • From Plan to Action: The IPAM contains all the necessary information (VLANs, subnets, gateways) to begin configuring the network's Layer 3 interfaces and services.

Preview of the Next Lesson:
Our IPAM document looks complete, but in networking, the philosophy is "trust but verify." In the next lesson, we will focus on verifying the IPAM plan for completeness and the absence of overlapping allocations. You will learn how to audit your own work to catch any potential errors before they are implemented in a live environment, ensuring your design is flawless.