0
votes
0answers
24 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
47 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
-1
votes
1answer
74 views

Transfer VLAN tagged packets over WLAN? [closed]

I have the following composition of devices: [selfmade router] - ethernet - [WLAN router 1] ----- wlan ------ [WLAN router 2] WLAN router 2 has 5 ethernet ports, each as an own VLAN, so 5 VLANs. I ...
-2
votes
1answer
107 views

VLAN routing setup with VPN on Cisco ASAs

We currently have two ASA5515-X firewalls, what we want to do is dedicate one of them to providing AnyConnect VPN and two site to site VPNs only, with the second ASA handling firewall ACLs for ...
1
vote
1answer
170 views

Configuring a firewall appliance with 2 VLANs - how are the outbound links on the firewall configured?

We just ordered a sonicwall NSA 4500 firewall and I am preparing a network diagram for its arrival. We have 12 servers in a newly setup rack, a 48-port switch, and a Sonicwall NSA 4500 firewall I ...
0
votes
1answer
77 views

Check if Vlan is accesible through the firewall

I want to check if a Vlan (10.253.240.11) is accesible to Our network thorugh the firewall. I've logged into the fw through Linux console, I run the command route -n | grep 10.253.240. To find out ...
0
votes
0answers
476 views

Network Segmentation - router, switches, or both?

I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage. Currently, the network is flat and almost ...
2
votes
1answer
872 views

Routing between subnets on different vlans connected by a router/firewall

I have two networks that I'd like to connect with a router/firewall to filter traffic between the two. One network is on a public subnet, let's say 64.22.12.192/27 and the other network is on a ...
2
votes
3answers
1k views

Isolate clients on same subnet?

Given n (e.g. 200) clients in a /24 subnet and the following network structure: client 1 \ . \ . switch -- firewall . / client n / (in words: all clients connected to one ...
1
vote
2answers
764 views

Is it possible to assign a VLAN to an alias of network interface in pfsense?

My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) The problem is that i only have 2 ...
3
votes
2answers
139 views

Is there additional risks to firewalling between VLANs on a single Dot1Q trunk, as opposed to discrete ethernet links?

I'm looking at implementing a pfSense firewall on a network, and I've a number of options when it comes to implementation. Specifically, I can either: Stick each network zone (WAN, DMZ, core) on ...
2
votes
4answers
1k views

Best way of isolating VM's to protect network?

On our network (1.0/24) we have a number of servers. One of those servers is running VMware ESX with three virtual machines which are hosting various websites and applications to the outside world. ...
0
votes
1answer
658 views

Cisco Catalyst 3750 connected to Cisco ASA 5505 and dropping packets

(Cross posted from Super User per suggestion there) At the office, I have inherited a network that I am still trying to fully comprehend. I have a problem today with a new connection between: A ...
1
vote
1answer
2k views

Cisco ASA subinterface limit - per interface or global?

A Cisco ASA can have sub-interfaces defined on an interface, vlan tags through that physical interface which are considered by the software as a separate logical interface. This page includes ...
3
votes
2answers
1k views

how to separate a network for traffic

At the moment our all computers in one big LAN, it is the intention to separate the admin and edu (it's in a school) especially for traffic and less for security. How do this best? Firewall?, ...
3
votes
1answer
2k views

VLAN ACLs and when to go Layer 3

I want to: a) segment several departments into VLANs with the hopes of restricting access between them completely (Sales never needs to talk to Support's workstations or printers and vice-versa) or ...
6
votes
9answers
2k views

Need prosumer router/firewall/vpn/vlan/nat advice [closed]

Looking for a recommendation on a device (or devices I guess) to do router/firewall/vpn/vlan/nat functons for my home network. Right now, I'm doing this with an IPCop box, but I'd prefer a little ...
2
votes
1answer
2k views

Dell PowerConnect VLAN Trunking with a Fortigate

I am using a Dell Powerconnect 6248 (layer 3 48 port gigabit Switch) and a Fortigate 310. I am attempting to use the switch in layer two mode and assign a vlan to each port where a server is attached ...