RE: Firewall and VLAN security design

["David Gillett" <gillettdavid () fhda edu>]

> Actually, if you don't offer up your management interface to 
> the publicly accessible side of things, the VLAN separation 
> makes things function exactly like a physically separate switch.  
> Without the routing between those VLANs, the traffic does not 
> magically go from one VLAN to another and the ability to 
> exploit/crack the switch is no greater than having a
> separate switch in place.  

  Barring, of course, edge conditions and bugs in the switch itself,
which we all know can't possibly happen in the Real World.

  Except, of course, they DO.

David Gillett