105 reputation
419
bio website
location
age
visits member for 4 years, 2 months
seen May 17 '13 at 15:00

Jun
23
comment Barracuda Web Application Firewall in routed mode
Does my IP addressing make sense?
Jun
23
asked Cisco IOS: NAT overload for two WAN interfaces
Jun
22
asked Barracuda Web Application Firewall in routed mode
Jun
18
comment Small Business Network Switches/General network configuration
You say that now...
Jun
18
awarded  Teacher
Jun
18
answered how do I make solaris shell more familiar for a linux user?
Jun
18
answered Small Business Network Switches/General network configuration
Jun
17
awarded  Commentator
Jun
17
comment Planning trunk capacity for multiple GbE switches
This might be the most practical way to go and scales well in the pocket book too. :)
Jun
17
comment Planning trunk capacity for multiple GbE switches
Having one big broadcast domain isn't really affecting anyone negatively right now, as you suggested in my prior question. However the main motivator is security: a pen-test was performed and their recommendations were to isolate departments in separate VLANs and to restrict access at Layer 3 (packet-filtering). Besides router-on-a-stick, which I can't see scaling well, I don't really see any other option to meet these pen-test requirements.
Jun
16
revised Planning trunk capacity for multiple GbE switches
edited body
Jun
16
awarded  Editor
Jun
16
revised Planning trunk capacity for multiple GbE switches
added 128 characters in body
Jun
16
asked Planning trunk capacity for multiple GbE switches
Jun
16
comment VLAN ACLs and when to go Layer 3
I'm going to post another more narrowly-scoped question regarding throughput.
Jun
16
awarded  Supporter
Jun
16
accepted VLAN ACLs and when to go Layer 3
Jun
16
comment What is the optimum way to secure a company wide wiki?
Correct. You want to guard against data loss in transit, but in order to do that, you need to know where your sensitive data lies at rest.
Jun
16
comment VLAN ACLs and when to go Layer 3
Another question: is this overkill? Are other SMBs doing this sort of thing (Layer 3 ACL/inter-VLAN routing)? I'm hesitant to do router-on-a-stick; seems like it would be a major bottleneck trying to cope with dozens of workstations trying to access servers over one "stick" interface.
Jun
16
comment VLAN ACLs and when to go Layer 3
Thanks for taking the time to answer this. So based on my requirements (2 workstation VLANs, 1 server VLAN), if I want to do any sort of Layer 3 ACL, I need a Layer 3 capable switch in the equation to be able to do this? The quasi-L3 ACLs were specifically in the D-Link 3100; it states that "ingress ports" are filtered according to IP/TCP/UDP/port, but doesn't mention routing, so I guess this would be kind of useful for say a web server on access port #15 with an ACL that only permits incoming TCP 80 or 443 traffic to possible mitigate a worm or another machine using that access port.