Re: Different terms for the same or more secure?

What is wanted for a definition exactly? I believe I've given the
definition on a couple of occassions:
http://en.wikipedia.org/wiki/VLAN
Of import:
"Early network designers often configured VLANs with the aim of
reducing the size of the collision domain in a large single Ethernet
segment and thus of improving performance. When Ethernet switches made
this a non-issue (because they have no collision domain), attention
turned to reducing the size of the broadcast domain at the MAC layer.
Virtual networks can also serve to restrict access to network
resources without regard to physical topology of the network, although
the strength of this method remains debatable as VLAN Hopping is a
common means of bypassing such security measures."

On 9/12/06, David Gillett <gillettdavid@xxxxxxxx> wrote:
> NO ONE has answered the simple initial question of what is
> a VLAN?

A SWITCH is a box with a bunch of interfaces and a MAC address
table. For each incoming packet, it records in the table that it
has seen that packet's source MAC address show up at interface X,
and consults the table to see what interface Y it has seen the
destination MAC address from -- if the destination MAC address
isn't in the table, it forwards the packet to all interfaces
except X. [There's a bit more to it -- spanning tree to detect
and break loops, tools for manually seeding the table, and so on.]

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Problems with VLAN and Adaptec DuraLink NIC
    ... I have now tried to configure 802.1q VLAN interfaces on each of these ... vconfig add eth0 200 ... suspect the network driver for the Adaptec DuraLink has a bug in VLAN ...
    (comp.os.linux.networking)
  • Re: Multiple MAC on a single (physical) interface
    ... you could use a netgraph bridge to bridge several ... MAC address. ... interfaces is tipically something I'm afraid of doing through SSH. ... Since there is not much sense in saying that network 10.0.0.0/24 ...
    (freebsd-questions)
  • Re: wierdness in my security report
    ... > don't match the MAC addresses of either of the two cards in my free-bsd = ... I have not checked the MAC addresses of the other network cards on = ... interfaces; you get them for other interfaces on networks directly ... > the name I gave my kernel, ...
    (FreeBSD-Security)
  • Re: Howto resolve which interface a NICs is mapped to ( nic2if )
    ... OK, that I know, then I might ask you how do I map see which MAC - ... interfaces. ... I have two questions regarding the way NIC's are mapped to network ... (There have been manufacturing series of NICs with duplicate ...
    (comp.os.linux.networking)
  • Re: kern/109815: wrong interface identifier at pfil_hooks for vlans + if_bridge
    ... interfaces with the same MAC from the POV of a bridge. ... if several vlan interfaces are ...
    (freebsd-net)