Re: VLANs and security (was:network performance problems)

2010-02-16 Thread James Peltier
--- On Tue, 2/16/10, Corey wrote: > From: Corey > Subject: VLANs and security (was:network performance problems) > To: misc@openbsd.org > Received: Tuesday, February 16, 2010, 8:54 PM > >>I did put all interfaces > (in,out,pfsync,management) through VLANs in msk0 >

Re: VLANs and security (was:network performance problems)

2010-02-16 Thread Diana Eichert
Just remember that "VLAN separation" is a misnomer. The VLAN tag is inserted in the Ethernet Frame, http://upload.wikimedia.org/wikipedia/commons/2/23/TCPIP_802.1Q.jpg There isn't anything magical about an 802.1q tag. It is possible to overload a switches CAM table which effectively turns them i

Re: VLANs and security

2010-02-16 Thread Kapetanakis Giannis
On 17/02/10 03:54, Corey wrote: >>I did put all interfaces (in,out,pfsync,management) through VLANs in msk0 Throwing out a topic for discussion...I have seen a couple of posts on here regarding use of VLANs to segregate traffic that I would usually use separate interfaces for. I am just curious

Re: VLANs and security (was:network performance problems)

2010-02-16 Thread David Gwynne
On 17/02/2010, at 12:12 PM, Jason Dixon wrote: > On Tue, Feb 16, 2010 at 07:54:47PM -0600, Corey wrote: >> >> Throwing out a topic for discussion...I have seen a couple of posts on >> here regarding use of VLANs to segregate traffic that I would usually >> use separate interfaces for. I am just c

Re: VLANs and security (was:network performance problems)

2010-02-16 Thread Jason Dixon
On Tue, Feb 16, 2010 at 07:54:47PM -0600, Corey wrote: > > Throwing out a topic for discussion...I have seen a couple of posts on > here regarding use of VLANs to segregate traffic that I would usually > use separate interfaces for. I am just curious what the thoughts of the > list are on th

VLANs and security (was:network performance problems)

2010-02-16 Thread Corey
>>I did put all interfaces (in,out,pfsync,management) through VLANs in msk0 Throwing out a topic for discussion...I have seen a couple of posts on here regarding use of VLANs to segregate traffic that I would usually use separate interfaces for. I am just curious what the thoughts of the list