1
vote
1answer
73 views

VLAN over three switches

We are connecting three offices via fiber optics. For each office we have one switch. In each office there will be one PC which has to be isolated in a VLAN A. There will be other PCs but those three ...
1
vote
2answers
152 views

How to implement firewall in LAN(out of users' os) like EC2 have done?

In aws ec2, users can set up security groups which works like a firewall, usually, firewall work behind a gateway/nat server, however, I found that firewall in EC2 works in the LAN, too. For example, ...
0
votes
3answers
3k views

Duplicate MAC address on the same LAN possible?

Let's say someone is on the same network as me and spoofs their MAC address to match mine: Is this possible? Can two or more clients with the same MAC address be on the same network at the same time ...
4
votes
2answers
261 views

Best security practice for small networks - wifi, lan,

We regularly setup small networks for clients in different locations to allow them to work on different products now the question what should be the best security practice. Currently we have a wifi ...
2
votes
4answers
283 views

Encrypt LAN and wifi traffic on small private network

I need some advice about encrypt all traffic on a small private network running wi-fi and LAN traffic on 192.168.0.x network. The network would comprise of client laptops connecting to the wi-fi ...
1
vote
5answers
1k views

Encryption between a LAN switch and an end device

What standards/protocols/products exist that support encryption of all data sent between a device (e.g. a workstation) and a LAN switch? Something like WPA for WLAN.
3
votes
2answers
647 views

802.1X needs single port per device?

We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
0
votes
1answer
128 views

How effective is a private lan in securing a server for intranet use?

We are building a Intranet using alfresco on Managed servers. We are considering using a private lan to separate the database on to its own server which is only accessible via the main internet facing ...
2
votes
4answers
1k views

Should / Can I use DNS Records to list “Private Hosts in Private LANs”?

This is a theoretical Question: Given I have several Serves that both have a Public IP Address as well as a private IP Adress (192.xxx Range). Both Addesses are used for different Services. I do not ...
2
votes
4answers
5k views

If you need to open ports from DMZ to LAN, at what point is the separation no longer worth it?

If you have a DMZ with one or more servers/services (maybe FTP, HTTP en SMTP). And you have a LAN with typical serversservices (like file sharing, Active Directory, database server). Depending on ...
1
vote
3answers
158 views

Is it normal for port 23 to be connected to periodically?

While working at a customer site (a LAN that includes several Windows machines, plus our server) I noticed that something was periodically attempting to connect to our server on port 23 via TCP. ...