Re: Better way to do VLAN in Linux

Private VLANs - a feature available in some switches to enhance the 
security of VLANs.

http://www.google.com/search?hl=en&ie=UTF-8&q=Cisco+PVLAN&btnG=Google+Search

... should help narrow it down a little. :-)

Kind Regards,
-dsp

Jose Maria Lopez wrote:

> El vie, 27 de 08 de 2004 a las 14:02, Dave Paris escribiÃ:
>
> > Additionally, be sure to check with various online resources (i.e. 
> > Bugtraq) regarding the switch's vulnerability to VLAN hopping and apply 
> > appropriate methods/patches/etc. available to mitigate this risk.
> >
> > Remember, VLANs aren't a security "magic bullet".  They help, to be 
> > sure, and PVLANs are better, but neither are as good as physically 
> > isolating LANs on their own switches.
> >
> > Kind Regards,
> > -dsp
>
>
> Thanks for the advice. I read in some articles about the dangers of
> VLANs, so I was quite involved with the security considerations. What
> I didn't know was where Linux could solve some of this dangers or
> make them worse. The conclusion I have made it's Linux doesn't make
> the situation better or worse, it just can work with a VLAN without
> much trouble to configure it.
>
> For the shake of completeness, what it's a PVLAN? I never have heard
> about them. I suppose it's a kind of more Physically isolated VLAN,
> but I've been googling about it and it's like chinese for me (really,
> I write PVLAN in google and it shows a lot of chinese/korean/whatever
> pages).