One Org with Two Network

[AzeemHaider]

Hello

I am planning to upgrade my current network, which uses MX 95, Catalyst Cisco Switches, and MR. I have acquired another MX95, a couple of MS C9300, and couple of MS 225. Is it possible to create a new network within the same organization, add all the new devices (MX, MS) to this new network, and use the same IP address for the MX, Vans etc.?

The plan is to set up the new network, ensure everything is functioning correctly, and then gradually move the servers, desktops, and phones to the new network. Finally, I will move the MR and the current network MX to the new network as HA.

[cmr]

Yes you can set up a new network withing the same organisation and use all of the same IP addresses.  Just don't create an auto VPN between the two networks, or you'll need an awful lot of NATing.

[AzeemHaider]

Thank you @cmr 

[AzeemHaider]

So I guess on new Network's MX I have select "Site-to-Site VPN" to "OFF" until i move all my devices to new Network, or there is better way to stop auto VPN between to network?

[cmr]

That is the correct thing to do 👍

[PhilipDAth]

>and then gradually move the servers, desktops, and phones to the new network

If you have two separate networks, with the same IP addressing - you won't be able to move things across gradually because there will be no connectivity between the networks.  You'll need to do a "big bang" cutover and move everything at once.

[AzeemHaider]

Thank you for pointing this out. I understand that I need to implement the "big bang" approach at some point. However, I want to ensure that my new network is physically operational and that inter-VLAN traffic is functioning correctly before proceeding.

Currently, I am using a Cisco Catalyst switch for Inter-VLAN routing, MX as firewall, and a Windows server for DHCP.

I am considering moving DHCP and Inter-VLAN routing to the MX or possibly to the C9300 switch. What would be the best approach?

[PhilipDAth]

If the inter-vlan bandwidth requirements are low - move all layer 3 processing to the MX.

If the inter-vlan bandwidth requirements are high, you'll need to do the routing on the C9300.

[AzeemHaider]

My network is not very big, around 8 servers, 100 to 120 laptop and desktop, 15 to 20 Phone, couple of Network printer and MR with 3 SSID.