Security Basics: [Fwd: Layer 2 Switches]

[Chris Scott <cgscott () ll mit edu>]

They may have features for improving security. For example:
- restricting which switch ports can communicate with each other
- defining MAC addresses to prevent flooding of frames to all ports
- using VLANs to isolate a management network from the operational network


-------- Original Message --------
Subject: Layer 2 Switches
Date: Thu, 30 Sep 2004 21:03:10 +0100
From: Andy Paton <andy.paton () gmail com>
Reply-To: Andy Paton <andy.paton () gmail com>
To: security-basics () securityfocus com

Hi All

I'm building a new network & firewall implementation with a DMZ.

I need basic L2 switch functionality in the DMZ and between the
firewall, should I avoid the more expensive switches with management?
as they have more potential for bugs/holes etc..


Thoughts please,
Andy