G'day,

One problem that springs immediately to mind is that there is probably a PHY
problem - unless your switch supports ADSL / ISDN / X.21 serial or whatever.

Another is that it would be very difficult to move to a firewall / DMZ
environment in the future (without using VLANS or something - which gives
security people the shudders).

I think the more useful question is - what are the advantages? Please don't
say speed, unless you have 100Mb+ fibre into your upstream ISP. If you do,
however, then I (personally) would look at pulling the fibre straight into
the external interface of your firewall (which I have seen in a few places),
and making sure that your FW supports that sort of speed.

Cheers!

--
Ben Nagy
Network Security Specialist
Marconi Services Australia Pty Ltd
Mb: +61 414 411 520  PGP Key ID: 0x1A86E304

> -----Original Message-----
> From: Dickens, Jon (MOL) [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, 6 February 2001 7:10 
> To: '[EMAIL PROTECTED]'
> Subject: Boundary switch ??
> 
> 
> Wondering if anyone has heard of any company moving from 
> having a router as
> their boundary device connecting to the internet to a a switch with a
> routing module.  Aware that you could possibly face loss of 
> more internal
> functionality from a DOS attack due to losing the switching 
> capability but
> can think of no other strong reasons assuming device has full 
> IP routing
> functionality.
> 
> Any thoughts ??
> 
> Jon Dickens
>       JLD Consulting Ltd.
>       [EMAIL PROTECTED]  
>       
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to