Introduction
Welcome back! In our last session, you architected a complete hierarchical VLSM plan for Aperture Logistics. You took the company's requirements and our VLAN strategy and skillfully carved the 10.0.0.0/8 address space into right-sized, non-overlapping subnets. This gave us an efficient Layer 3 topology optimized for route summarization.
We now have our VLANs (the logical neighborhoods) and our subnets (the address blocks for those neighborhoods). Today, we're going to create the master blueprint that ties it all together: the IP Address Management (IPAM) document. This lesson directly addresses your goal of creating a comprehensive plan by mapping our VLAN and VLSM designs into a single, authoritative document that will guide the configuration and management of the entire network.
For any professional network, robust documentation isn't a "nice-to-have"; it's a necessity. It prevents errors, simplifies troubleshooting, and makes the network manageable as it scales. Let's start with a short segment from Jeremy Cioara that underscores this exact point.
DESIGNING Subnets for Your Company!
In this clip, Jeremy Cioara discusses the relationship between VLAN numbers, subnets, and the absolute necessity of good documentation. Pay attention to his point about why relying on memory or 'clever' numbering schemes fails in a scalable network.
Watch from 02:25 to 03:28. The key takeaway is that while matching VLAN numbers to subnets can be a nice bonus, it's no substitute for a formal, non-negotiable documentation plan.
The Anatomy of an IPAM Document
An IPAM document is more than just a list of subnets. It's a detailed spreadsheet that serves as the single source of truth for your network's Layer 3 addressing. A well-structured IPAM provides an at-a-glance understanding of your entire IP space.
What should it contain? While templates vary, a comprehensive IPAM for a large network should include the following fields for each subnet:
- VLAN ID: The numeric identifier for the VLAN.
- VLAN Name / Purpose: A descriptive name (e.g.,
DATA_HQ,SERVERS_DC). - Site / Location: The physical or logical location of the subnet (e.g., HQ Building, R&D Data Center).
- Subnet Address (CIDR): The network address and prefix length (e.g.,
10.10.0.0/24). - Subnet Mask: The mask in dotted-decimal notation (e.g.,
255.255.255.0). - Network Address: The first address in the subnet.
- Broadcast Address: The last address in the subnet.
- Default Gateway (SVI): The IP address assigned to the Layer 3 interface for that VLAN. This is the gateway for all hosts in the subnet.
- Usable Host Range: The range of IP addresses available for assignment to devices.
- Static IP Assignments: A reserved range for devices that need fixed addresses (servers, printers, network gear).
- DHCP Scope: The pool of addresses to be handed out by a DHCP server.
- Notes: Any other relevant information, such as security policy notes or planned usage.
The Cisco IP Addressing Guide provides a solid framework for thinking about this.
[PDF] IP Addressing Guide - Cisco
Let's consult the Cisco IP Addressing Guide to see a professional perspective on address planning and documentation.
First, read 'Procedure 4: Document Plan' (Page 13) which emphasizes the need for a spreadsheet to document the entire IP space. Then, look at 'Appendix A: Subnet Design Worksheet' (Page 16). This simple table is the foundation of what we are building, and we will be expanding on it.
Defining Assignment Standards
Before you can populate the IPAM, you need a set of rules. A consistent set of standards for assigning addresses within each subnet is the mark of a professional design. It makes the network predictable and vastly simplifies configuration and troubleshooting. Since you're a CLI pro, you know the value of consistency when you're managing dozens or hundreds of devices.
Let's establish our standards for Aperture Logistics:
- Default Gateway Assignment: The default gateway (which will be the IP address of the Switched Virtual Interface, or SVI, on our L3 switch) will always be the first usable IP address in the subnet (e.g.,
.1). This is a widely adopted convention. - Static IP Reservation: For subnets that contain user devices, we'll reserve a small block of addresses immediately following the gateway for static assignments (e.g., printers, special devices). Let's reserve
.2through.10. - DHCP Scope: The remaining block of usable IP addresses will be allocated to the DHCP scope for dynamic client assignment.
This Cisco guide provides excellent recommendations for creating these standards.
[PDF] IP Addressing Guide - Cisco
This section of the Cisco IP Addressing Guide, 'Procedure 1: Define Addressing Standards', gives clear, practical advice on creating these rules. This is exactly what we're doing now.
Read 'Procedure 1: Define Addressing Standards' on page 11. Notice the specific examples given for assigning addresses to routers/gateways, printers, and DHCP ranges. This formalizes the process and removes guesswork.
Populating the Aperture Logistics IPAM
Now, let's execute. We will take the VLSM plan from our previous lesson, assign logical VLAN IDs, and build out the full IPAM document based on the standards we just defined.
Here's the VLSM allocation we finalized last time:
| VLAN/Link | Purpose | Assigned Subnet |
|---|---|---|
VOICE_CORP |
VoIP Phones | 10.20.0.0/23 |
GUEST_WIFI |
Guest Access | 10.20.2.0/23 |
DATA_HQ |
HQ Staff | 10.10.0.0/24 |
IOT_WH |
Warehouse IoT | 10.30.0.0/24 |
MGMT_INFRA |
Network Management | 10.20.4.0/25 |
DATA_WH |
Warehouse Staff | 10.30.1.0/25 |
DATA_RD |
R&D Engineers | 10.20.4.128/25 |
SERVERS_DC |
Data Center Servers | 10.20.5.0/27 |
| WAN HQ-R&D | P2P Link | 10.254.0.0/30 |
| WAN HQ-WH | P2P Link | 10.254.0.4/30 |
We will now expand this into our final IPAM document. For clarity, I've assigned logical VLAN IDs that group similar functions.
Aperture Logistics - Final IPAM Document
| VLAN ID | VLAN Name | Site/Location | Subnet (CIDR) | Subnet Mask | Network Addr | Broadcast Addr | Default Gateway | Usable Range | Notes / DHCP Scope |
|---|---|---|---|---|---|---|---|---|---|
| 80 | VOICE_CORP |
Campus-Wide | 10.20.0.0/23 |
255.255.254.0 |
10.20.0.0 |
10.20.1.255 |
10.20.0.1 |
10.20.0.2-10.20.1.254 |
QoS priority. DHCP: 10.20.0.11-10.20.1.254 |
| 90 | GUEST_WIFI |
Campus-Wide | 10.20.2.0/23 |
255.255.254.0 |
10.20.2.0 |
10.20.3.255 |
10.20.2.1 |
10.20.2.2-10.20.3.254 |
Internet-only via VRF. DHCP: Full range. |
| 99 | MGMT_INFRA |
Campus-Wide | 10.20.4.0/25 |
255.255.255.128 |
10.20.4.0 |
10.20.4.127 |
10.20.4.1 |
10.20.4.2-10.20.4.126 |
Mgmt access only. All static assignments. |
| 110 | DATA_HQ |
HQ Building | 10.10.0.0/24 |
255.255.255.0 |
10.10.0.0 |
10.10.0.255 |
10.10.0.1 |
10.10.0.2-10.10.0.254 |
Standard data. DHCP: 10.10.0.11-10.10.0.254 |
| 120 | DATA_RD |
R&D Building | 10.20.4.128/25 |
255.255.255.128 |
10.20.4.128 |
10.20.4.255 |
10.20.4.129 |
10.20.4.130-10.20.4.254 |
Standard data. DHCP: 10.20.4.140-10.20.4.254 |
| 130 | DATA_WH |
Warehouse | 10.30.1.0/25 |
255.255.255.128 |
10.30.1.0 |
10.30.1.127 |
10.30.1.1 |
10.30.1.2-10.30.1.126 |
Standard data. DHCP: 10.30.1.11-10.30.1.126 |
| 135 | IOT_WH |
Warehouse | 10.30.0.0/24 |
255.255.255.0 |
10.30.0.0 |
10.30.0.255 |
10.30.0.1 |
10.30.0.2-10.30.0.254 |
IoT scanners/sensors. All static or DHCP reservation. |
| 200 | SERVERS_DC |
R&D Data Center | 10.20.5.0/27 |
255.255.255.224 |
10.20.5.0 |
10.20.5.31 |
10.20.5.1 |
10.20.5.2-10.20.5.30 |
Production servers. All static assignments. |
| N/A | WAN_HQ_RD |
Infrastructure | 10.254.0.0/30 |
255.255.255.252 |
10.254.0.0 |
10.254.0.3 |
N/A | 10.254.0.1-10.254.0.2 |
P2P Link. .1=HQ, .2=R&D. |
| N/A | WAN_HQ_WH |
Infrastructure | 10.254.0.4/30 |
255.255.255.252 |
10.254.0.4 |
10.254.0.7 |
N/A | 10.254.0.5-10.254.0.6 |
P2P Link. .5=HQ, .6=WH. |
This table is the culmination of all our planning work so far. It's clear, detailed, and actionable. From this document, any network engineer can understand the addressing scheme and begin configuring interfaces, DHCP scopes, and static routes.
Conclusion
Congratulations! You have just created a professional-grade IPAM document. This crucial step transforms your theoretical VLAN and VLSM plans into a practical, operational blueprint for the Aperture Logistics network. You have not only mapped VLANs to subnets but also established and applied standards for gateway and host addressing, fulfilling a key requirement of enterprise network design.
Key Takeaways:
- The IPAM is the Blueprint: It is the single source of truth for your network's Layer 3 addressing scheme.
- Standards Enforce Consistency: Establishing rules for assigning gateways, static IPs, and DHCP scopes before you start makes the network predictable and easier to manage.
- Documentation is Non-Negotiable: A comprehensive IPAM document saves countless hours of troubleshooting and prevents costly configuration errors like duplicate IP addresses or overlapping subnets.
- From Plan to Action: The IPAM contains all the necessary information (VLANs, subnets, gateways) to begin configuring the network's Layer 3 interfaces and services.
Preview of the Next Lesson:
Our IPAM document looks complete, but in networking, the philosophy is "trust but verify." In the next lesson, we will focus on verifying the IPAM plan for completeness and the absence of overlapping allocations. You will learn how to audit your own work to catch any potential errors before they are implemented in a live environment, ensuring your design is flawless.