Benjamin Lutz <[EMAIL PROTECTED]> wrote: Hello jay,
I see no place for a wireless network in a professional network. It's hard to secure it (it's possible, encrypted-VPN-over-WLAN works, but it's difficult and expensive to set up). Stick with a wired LAN, and there'll be one security threat less that you have to worry about. No, problem with this as we already have wireless authentication wherein users are forced to login before accessing proxy servers. Keep in mind that a DHCP server needs to be in the same subnet it serves. Other services do not have this requirement. So you mean, If I have 1 pc router that has maximum of 8 lan ports, I can't do dhcp on 8 networks?? Let's say, dhcp will listen on each interface and serve only the assigned subnets.... It sounds like you're planning to have all subnets connected through this one FreeBSD box. This is not necessary. You can put a router in between subnets, and have that one located elsewhere, where it's more convenient. My partner say that having a separate pc router for each subnet and placing it in their designated area is not an option. He said we should try having a redundant/failover central pc router instead. If we were to deploy 5 or more of those, we should put it somewhere we can access it easily.. that is.... here in our NOC, at the 3rd floor. Unfortunately, we don't have much space left for tower pc's unless we can afford to buy rackmounted servers... Even purchasing those 5 servers will be a big issue.... And here's another thought: reliability and redundancy. Computers fail. If you have one central router that everything goes through, not only is it a performance choke point, but it'll also bring the whole agency to a standstill if it should fail. Maybe there isn't a better way to do things given your resources, but if there is, try to limit the impact of potential failures. Distribute things like routing, and most of the network will keep working if one machine fails. Or, if you can, make things redundant. Cheers Benjamin --------------------------------- Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"