Firewall Wizards: RE: VLAN Security

[John Kougoulos <koug () intranet gr>]

> * Never deliver VLAN 1 downstream (switchport trunk allowed vlan remove 1)

Is this possible? As far as I know you can not remove vlan 1 from a trunk
at least on a cisco switch. Even if it doesn't appear on the allowed
vlans, if you put a sniffer you will see traffic from vlan 1 and on show
spanning-tree you will see it running an STP instance for vlan 1.

Regards,

John


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards