Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

VLANs Security..

Dear All,

According to SAFE architecture notes, “Avoid using VLANs as the sole method of securing access between two subnets"

Does this mean that instead of assigning the router to do the routing between VLANs I have to assign the FW to isolate between the two subnets? Or how is it gonna be?

Regards..

Tamer Bayomy

1 REPLY
Silver

Re: VLANs Security..

Tamer,

I believe what this SAFE article is speaking of is that to be truely secure between two subnetworks physical separation is the only way. VLANs do offer a very high level of security but some feel that since they can occupy the same device that there is always a possibility of compromise that might lead to one vlans traffic getting to another vlan, either by means of adminstrative take over of the device or other.

This would mean, according to your SAFE notes, that using separate, non inter-connected, layer 2 devices would ensure that VLAN traffic stay where it should and require Layer 3 device (router) transit for communications to occur.

Hope this helps you,

Don

186
Views
1
Helpful
1
Replies
CreatePlease to create content