Firewall Wizards: VLAN Security

[Jeff Boles <bolesjb () yahoo com>]

FW List:

Anyone care to voice their consensus on contemporary
VLAN implementations as a security measure?  I'm
looking at a WAN design using a newly rolled out
MetroEthernet product, and provider network is built
on catalyst switches and VLAN's.  Every customer rides
a separate VLAN.  The provider's intention is to also
provide ISP services across this cloud.

Additionally, I have some internal needs that it is
tempting to fit into VLAN's - i.e. I need to load
balance some public traffic across sites, and I'm
tempted to do it by throwing the traffic in an
encrypted tunnel, and dropping it into a separate VLAN
across that same MetroEthernet cloud.

All of these solutions ride the same wire.  I used to
have some good educational material on the
vulnerabilities in VLAN's, but I no longer have it,
and I'm having little success in finding new material.

Anybody care to voice an argument on on VLAN integrity
in the provider network?
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards