Collaborate Disseminate
I am currently implementing a new network with different segments. The separation of those segments is achieved using VLANs. To enable some segments to communicate with each other and to be reached from the internet, a firewall is planned…. Continue reading Network Segmentation – Single Firewall VM vs Multiple
I saw a network setup recently that looked like the following:
The ISP provides two static public IPs on a specific VLAN and one is used for an internet network and the other for a server exposed to the Internet.
They wanted the server to… Continue reading VLANs for public and private network segregation
Assume that:
Router connect to FA0/1 port on the switch. This port is configured to be trunk port.
I also configure Router on Stick on the Router. And the router connect to modem
Port FA0/2-3 and FA0/3-4 on the switch are configured to vl… Continue reading Sharing Internet between vlan(s) [migrated]
I’m having some difficulty understanding when people say that VLANS provide security by logically separating/dividing the switch into different sections after trunking the VLANs on a router and allowing the hosts on the different VLANs to … Continue reading How are VLANS logically separating a switch?
I have a single home server with a single NIC. I intend to run numerous services — some will be internet exposed, some will not. I don’t know if I am going to run them as VMs or Docker container but it shouldn’t matter for this question.
… Continue reading What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?
While VLAN switches can be used to provide security between network segments using VLAN filtering rules. Is there any possibility to have an security issue which is exploited to VLAN switches?
I need to expose my PC through TeamViewer. However, I don’t want this PC to have any connections to my other devices in the network.
I only want for that PC to have access to the Internet all other things would be blocked (primarily viewin… Continue reading Secure Windows PC on the netwrok [migrated]
Just reviewing some logs and I am seeing local scans to several local IP addresses on port 137 within my network. The source IP however is the broadcast IP of the VLAN (.255).
I have checked the logs and I can see the broadcast IP trying… Continue reading Local Scans initiated from a VLAN Broadcast IP address
for a secure network, I now have the requirement to encrypt the network traffic between two locations (within a building, connected via one ethernet cable) so that no man-in-the-middle attacks are possible at the management l… Continue reading Encrypt L2 traffic between two buildings via network cable [on hold]
We have so many devices (IoT and wintel, macs, androids, ios) spread across a few VLANs. Worried about any one device getting affected (e.g. Ransomware) and potentially infecting all other devices on the VLAN. Do you see this… Continue reading micro segmentation in the campus