Benjamin Lutz <[EMAIL PROTECTED]> wrote: Hello jay,


I see no place for a wireless network in a professional network. It's hard to 
secure it (it's possible, encrypted-VPN-over-WLAN works, but it's difficult 
and expensive to set up). Stick with a wired LAN, and there'll be one 
security threat less that you have to worry about.

 No, problem with this as we already have wireless authentication wherein users 
are forced to login before accessing proxy servers.
 
 
 
 Keep in mind that a DHCP server needs to be in the same subnet it serves. 
Other services do not have this requirement.

  So you mean, If I have 1 pc router that has maximum of 8 lan ports, I can't 
do dhcp on 8 networks?? Let's say, dhcp will listen on each interface and serve 
only the assigned subnets....
 
 It sounds like you're planning to have all subnets connected through this one 
FreeBSD box. This is not necessary. You can put a router in between subnets, 
and have that one located elsewhere, where it's more convenient. 
   
  
 My partner say that having a separate pc router for each subnet and placing it 
in their designated area is not an option. He said we should try having a 
redundant/failover central pc router instead. If we were to deploy 5 or more of 
those, we should put it somewhere we can access it easily.. that is.... here in 
our NOC, at the 3rd floor. Unfortunately, we don't have much space left for 
tower pc's unless we can afford to buy rackmounted servers... Even purchasing 
those 5 servers will be a big issue....
 
 
 
And here's another thought: reliability and redundancy. Computers fail. If you 
have one central router that everything goes through, not only is it a 
performance choke point, but it'll also bring the whole agency to a 
standstill if it should fail. Maybe there isn't a better way to do things 
given your resources, but if there is, try to limit the impact of potential 
failures. Distribute things like routing, and most of the network will keep 
working if one machine fails. Or, if you can, make things redundant.

Cheers
Benjamin
 

                        
---------------------------------
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to