0
votes
1answer
108 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
2
votes
2answers
88 views

VLAN & Communication

I'm working on a project regarding Network Security and I've come to the topic regarding VLANs. I was wondering if it is possible to set up multiple VLANs (VLAN0, 10, 20, 30) in a way that all VLANs ...
1
vote
1answer
73 views

VLAN over three switches

We are connecting three offices via fiber optics. For each office we have one switch. In each office there will be one PC which has to be isolated in a VLAN A. There will be other PCs but those three ...
-1
votes
2answers
144 views

What types of security threats does a vlan protect against? [closed]

I'm learning about vlans. The literature says that they provide improved performance and security by segrating the physical network into separate "virtual" networks. I understand the performance ...
1
vote
2answers
614 views

VLAN ingress filtering - understanding correctly and verify its functionality?

When I tag traffic wrongly on a port (to do VLAN hopping like an potential attacker) should I be able to see ingress traffic to this VLAN on the port - like by mirorring the port in question when VLAN ...
0
votes
3answers
3k views

Duplicate MAC address on the same LAN possible?

Let's say someone is on the same network as me and spoofs their MAC address to match mine: Is this possible? Can two or more clients with the same MAC address be on the same network at the same time ...
0
votes
1answer
162 views

Provide Internet access for different VLAN

I have several managed switches at work that connect all computer within our office to the ADSL modem. However I would like enforce a VLAN policy to isolate traffic within the network. Through my ...
2
votes
2answers
3k views

VLAN security on HP ProCurve 1810G-24?

I'm looking into the managed switch HP ProCurve 1810G-24 to see if it can meet our office demands. The specs say it has IEEE802.1Q - whatever that means. Our office consists of four companies that ...
1
vote
1answer
167 views

Offshore application development - Access to dev network (Security best practice)

Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist. The situation is: Dev and Prod subnets (Not sure if ...
1
vote
0answers
418 views

Dell PowerConnect 6224F ACL Not Performing as Expected

What I'm trying to achieve is as follows: Allow full access to the device on 10.58.9.32 (our VoIP server), from anywhere on our network. Allow ICMP to flow in all directions to/from any device. ...
0
votes
3answers
180 views

New Cisco Catalyst switches and ISL Trunks?

newer Catalysts do not offer the ISL trunk mode anymore. Now I fear VLAN-hopping/encapsulation attacks when using VLANs for WAN-isolation. What can I do to prevent such attacks? Can I mix ISL and ...
3
votes
2answers
1k views

how to separate a network for traffic

At the moment our all computers in one big LAN, it is the intention to separate the admin and edu (it's in a school) especially for traffic and less for security. How do this best? Firewall?, ...
14
votes
3answers
3k views

How can I set up VLANs in a way that won't put me at risk for VLAN hopping?

We're planning to migrate our production network from a VLAN-less configuration to a tagged VLAN (802.1q) configuration. This diagram summarizes the planned configuration: One significant detail is ...
0
votes
1answer
128 views

How effective is a private lan in securing a server for intranet use?

We are building a Intranet using alfresco on Managed servers. We are considering using a private lan to separate the database on to its own server which is only accessible via the main internet facing ...
0
votes
1answer
166 views

Deny DHCP relay by corporate security policy

I've been presented with some odd "security conventions" in a large company I'm contracting with and am trying to get some perspectives on them. I need to build a number of servers virtualization ...
20
votes
4answers
10k views

Why do people tell me not to use VLANs for security?

As per title, why do people tell me not to use VLANs for security purposes? I have a network, where a have a couple of VLANS. There is a firewall between the 2 VLANs. I am using HP Procurve switches ...
20
votes
8answers
39k views

OpenVPN vs. IPSec - Pros and Cons, what to use?

interestingly I have not found any good searchresults when searching for "OpenVPN vs IPSec": I need to setup a private LAN over an untrusted network. And as far as I know, both approaces seem to be ...
2
votes
1answer
452 views

What's the best method of achieving device isolation in a DMZ?

I have an ADSL connection which has a /29 subnet allocated to it, giving me 6 usable IP addresses. Currently this has a cheap Netgear ADSL router attached, which has a built in switch. There are 3 ...
1
vote
5answers
986 views

Bypassing VLAN with known MAC address

I am evaluating subneting our network with a Layer 2 switch and VLAN. From what I know, VLAN only works on broadcast domain, and if I know the MAC address of a remote computer on the same switch, I ...
0
votes
1answer
708 views

Wireless guest access with HP ProCurve 420

We have a HP ProCurve 420 wireless access point hooked up to our LAN, which then connects to the internet though a gateway router. Is it possible to set up a guest SSID, which can access the internet ...
2
votes
1answer
516 views

Restricting access on wireless vlan

We have 2 wireless networks set up using vlans on a system of HP Wireless Access points. The first is intended for staff, and uses WPA2+radius to authenticate to our AD server, and puts the user on ...