[fw-wiz] VLAN Security

From: Jeff Boles (bolesjb_at_yahoo.com)
Date: 06/08/04

  • Next message: Dan Harp: "Re: [fw-wiz] Putting MS servers behind firewalls" 
    To: firewall-wizards@honor.icsalabs.com
Date: Tue, 8 Jun 2004 10:18:02 -0700 (PDT)

    FW List:

    Anyone care to voice their consensus on contemporary
    VLAN implementations as a security measure? I'm
    looking at a WAN design using a newly rolled out
    MetroEthernet product, and provider network is built
    on catalyst switches and VLAN's. Every customer rides
    a separate VLAN. The provider's intention is to also
    provide ISP services across this cloud.

    Additionally, I have some internal needs that it is
    tempting to fit into VLAN's - i.e. I need to load
    balance some public traffic across sites, and I'm
    tempted to do it by throwing the traffic in an
    encrypted tunnel, and dropping it into a separate VLAN
    across that same MetroEthernet cloud.

    All of these solutions ride the same wire. I used to
    have some good educational material on the
    vulnerabilities in VLAN's, but I no longer have it,
    and I'm having little success in finding new material.

    Anybody care to voice an argument on on VLAN integrity
    in the provider network?
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Dan Harp: "Re: [fw-wiz] Putting MS servers behind firewalls"

    Relevant Pages