Educause Security Discussion mailing list archives

Re: Virtual Routing for Voice Traffic


From: John Center <john.center () VILLANOVA EDU>
Date: Fri, 31 Mar 2017 11:39:12 -0400

Hi Brian,

Most schools keep voice & data on separate VLANs, but do you route them separately also?  The feedback I've received is mixed.  Some 
schools do & some don't, though several that don't have said they wish they did virtual routing to keep the traffic separate at 
L3.

Thanks.

        -John


On 3/24/17 11:39 AM, Brian T. Huntley wrote:
We've run a converged network for over a decade. QoS can be a challenge, especially if you have a heterogeneous hardware config on your 
network, but running your VoIP over a separate vlan on your data net shouldn't be a problem.  For us, anything considered "life 
safety" uses POTS lines.  Our network simply isn't engineered with sufficient redundancy to make it life-safety worthy.

Brian

--
Brian T. Huntley
Director of Network Services and Information Security
Office of Information Technology
Clarkson University
315.268.6723

On Fri, Mar 24, 2017 at 10:35 AM, Nicholas Garigliano <ngarigl8 () naz edu <mailto:ngarigl8 () naz edu>> wrote:

    Technically, it is easily doable.  The one thing to the keep in mind is the stability of your data network, i.e. 
layer 2-3.  Any issues will shut down your phones and that might be considered a safety issue (i.e. 911 for dorms) 
depending on where you are located.

    Nick Garigliano
    Network Security Engineer
    Enterprise & Network Solutions
    Nazareth College
    585 389-2109

    On Fri, Mar 24, 2017 at 10:10 AM, Rob Milman <rob.milman () sait ca <mailto:rob.milman () sait ca>> wrote:

        Hi John,

        We've been running our voice network on a separate VLAN on our data network for well over a decade. It's worked 
well for us with no problems that I can recall.

        Regards,

        Rob
        Southern Alberta Institute of Technology

        -----Original Message-----
        From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU <mailto:SECURITY 
() LISTSERV EDUCAUSE EDU>] On Behalf Of John Center
        Sent: Friday, March 24, 2017 6:40 AM
        To: SECURITY () LISTSERV EDUCAUSE EDU <mailto:SECURITY () LISTSERV EDUCAUSE EDU>
        Subject: [SECURITY] Virtual Routing for Voice Traffic

        Hi,

        (I posted this to the NETMAN list, but I thought I'd also ask the Security people, since this is one of our 
concerns.)

        We're having a debate about how to best route voice traffic over our data network.  Right now, we have a physically 
separate data & voice infrastructure, but want to consolidate for cost savings.  How many schools are using virtual routing to 
separate voice & data over a common network infrastructure?  How many are running both without any routing separation, except 
for voice VLANs?  Why?

        Inquiring minds want to know...  :-)

        Thanks.

              -John

        --
        John Center
        Villanova University





Current thread: