Collaborate Disseminate
At home I have a connection to my provider via glass fiber that provides two VLANs: IPTV and Internet.
The structure of the network is exactly as shown in the following image, except for the phone connection, that I don’t ha… Continue reading What are the risks resulting from having a switch without strong access control directly facing the Internet?
I am looking to increase the security of my home network as much as possible.
An option I came across was to create two home networks. One would be used by less secure devices, and another for more secure devices. What’s the best way to s… Continue reading Create 2 separate networks at home [closed]
We have LAN internet connections for our employees , but I want to restrict visitors from accessing the LAN through some authentication that only my employees can bypass by the credentials I provide them . MAC Addressing is n… Continue reading Network access control for a wired network
We deploy our internet facing applications in multiple vlans and there is a rule that talking from one vlan to the next has to be done in another protocol or an other implementation of the protocol.
E.g.
[Internet] –https… Continue reading Is switching protocols a security measure worth implementing?
I am currently working with a client that has all their external traffic going through the core switch and then is being passed to the router and back through the core switch and then to the rest of the network.
Diagram:
I… Continue reading Are there risks in not having a edge firewall?
To mitigate the risk of malware propagating through a network, how reasonable is it to place each and every device on its own VLAN (complete isolation)?
Note:
The devices do not need to communicate to each other at all.
I’m trying to setup a homelab with a laptop imaged with pfSense. The laptop will act as secondary NAT server in my house, where I link the WAN interface to my ethernet card (which is connected to a WiFi extender which is then… Continue reading Can a wireless card be used as the NAT/DHCP Server/LAN on pfSense?
Are Cisco switches vulnerable to VLAN hopping? We use Layer 2+ and Layer 3 switches in a hardened environment. They are IE-3000 and IE-4000 series switches.
We want to perform a vulnerability scan at many levels, but we ar… Continue reading Are Cisco switches vulnerable to VLAN hopping?
Should a backup server be on a separate VLAN/subnet from the systems it backs up? And should the routes only go one way from inside the VLAN/subnet of the backup server out to the clients and subnets that it backs up? So th… Continue reading Should a backup server be on a separate subnet / vlan from other machines on the network?
I’ve been reading about Switch Spoofing for some homework, and found that the attack is based on Cisco DTP protocol.
In case I want to replicate the attack in class, I would use HP switch 2510 from our lab, which doesn’t use… Continue reading Is VLAN Hopping through switch spoofing possible without DTP?