I have a couple of questions that would help in answering your question.
1. Do you get to assign all of the vendors IP addresses?
2. Do the vendors need to get to the same services on your network or
different services?
Without knowing the answer to these questions I would say that a small Layer
3 switch might be usefull for you. Foundry sells a 24 port Layer 3 switch
that might be what you need.
-----Original Message-----
From: Ivan Fox [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 21, 1999 5:26 PM
To: [EMAIL PROTECTED]
Subject: VLAN - a semi-firewall related question
It is a semi-Firewall related question.
A firewall for the Extranet allows, say 10 vendors, contractors, to connect
to it. There are two options that we can think of:
Option 1:
Have 10 NICs in the firewall. This option is clumsy, but it is secure in
the sense that competitive suppliers cannot sniff each other's data.
Option 2:
A smarter approach, one says. Have an intelligent switch connecting to a
NIC in the firewall. Each port of the switch is isolated, a VLAN approach.
Competitive suppliers cannot "peer" into each other's data.
Being a non-router/switch guy. How can I configure and secure the switch?
I have also heard a router guru mentioned that, in order to provide
security, we should not use intelligent switch as someone connect to the
console of a switch, he/she can sniff the packets.
Any pointers are appreciated.
Thanks,
C.K.
**********************************************************************
Gruntal & Co., L.L.C.'s e-mail system is for business
purposes only. Messages are not confidential. All e-mail
may be reviewed by authorized supervisors, compliance or
internal audit personnel. E-mail will be archived for at least
three years and may be produced to regulatory agencies or
others with a legal right to access such information. Gruntal
will not accept trade order instructions via e-mail. Please
telephone your Account Executive to place trade orders.
www.gruntal.com
**********************************************************************
begin 600 winmail.dat
M>)\^(A4-`0:0"``$```````!``$``0>0!@`(````Y`0```````#H``$(@`<`
M&````$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06``P`.````SP<*`!D`
M"0`!`#4``0`Y`0$@@`,`#@```,\'"@`9``D`!``3``$`&@$!"8`!`"$````T
M1D5!,T4X-T(Q.#=$,S$Q039#.3`P.#`U1CE&044S,P!#!P$$@`$`+````%)%
M.B!63$%.("T@82!S96UI+69I<F5W86QL(')E;&%T960@<75E<W1I;VX`V@X!
M#8`$``(````"``(``0.0!@"T"@``,@````,``(`((`8``````,````````!&
M`````%*%```G:@$`'@`!@`@@!@``````P````````$8`````5(4```$````$
M````.2XP``L`"X`((`8``````,````````!&``````:%`````````P`"@`@@
M!@``````P````````$8``````84````````+``.`""`&``````#`````````
M1@`````#A0````````L`!(`((`8``````,````````!&``````Z%````````
M`P`%@`@@!@``````P````````$8`````$(4````````#``:`""`&``````#`
M````````1@`````1A0````````,`!X`((`8``````,````````!&`````!B%
M````````'@`(@`@@!@``````P````````$8`````-H4```$````!````````
M`!X`"8`((`8``````,````````!&`````#>%```!`````0`````````>``J`
M""`&``````#`````````1@`````XA0```0````$``````````@$)$`$```"H
M!```I`0``'`'``!,6D9U\=:H1`,`"@!R8W!G,3(UXC(#0W1E>`5!`0,!]_\*
M@`*D`^0'$P*`#_,`4`16/PA5![(1)0Y1`P$"`&-HX0K`<V5T,@8`!L,1)?8S
M!$83MS`2+!$S".\)][8[&!\.,#41(@Q@8P!0,PL)`60S-A90"Z8@28(@$^!V
M92!A(`6@AG4+4!U`;V8@<0I0V'-T:0(@!"!T$^`%0!)W"&!L9!T`96QP+B`+
M@!U0`(!W!G%N9^P@>0AA'A<N"J(*A`J`0#$N("!$;R""("YG%"`>L"*`8000
M:6=]']%L`R`=\1[`'4`=,&XF9`6P!"!)4!U09&37&"`$$`>0/R%T,B)$)#H^
M;@G@'U`C(2+E)#)S8?<'@"AP!)!V#>`'D0(@((1E)U!T'Q!R:QW@!<!D_0:0
M9@20"?`%0"C6);4A=!Q7:1[`"&`%0&MN;_\#\"!A)#(?]"@%%!`>&1SPVQ\4
M*(!Y'K0=8',`P"/1MDPO\!*!,RAP`_!T$]!4(&TC@&@%0&(=0'7]%!!F'S`#
M(`(0!<`@D2)!]D8(8"20<C``%!`CT`0@X1U@,C0@<!?!,.X>P[TQYW<>TB*B
M)U(A:RTX@GI/!1!G"X`'0`70)6%A5R+@.(,A=$8#83H<X';C`Y$SD'@@6P#`
M`Q`C((8Z!I`[0#$P,$`LL,IT.X(N!:!M72%T!F"3`C`ZP%1H"'!S9"_P<"P@
M3V,C(#)`!<`R$C$^<#$Y/V`@-3J@,C8@4$TA=%0[T!4RX&D8('<CP7-`;+$$
M`'1S+B.0`-`N*>$Q/35U8FH%D#W!5DQ004X@+3!B93'@+?U`MB`8(`M@#K`?
M4!XF(7K=(71)!4`$`$.&1D0?(/]=(:%!0*<RXR0R10[0<N\`<"+Q(\$M(',^
M<"_B/##_)&8^<`6@`C!+0#ZA3.(C(?]-(2=0/J`A=",A+)`B03WP_RK1'5!/
MH2H!'>`%,!YY'4">8P.1'L`+@"I!9CHA>FY/4&,_0%(52!TB3&%._$E#!"`?
MP20R0+9/0T;A2U!41M)C"D!M<SYA8N\LT2R01M(4$&,(<!U`"X&_3J0H4@GP
M+I$>PSSQ<!0@]2R0:1TQ<QV@"U`(D5:1GP!P+1`K$0,``2`@90#0]S'`/(!/
M@2<$(#Y``9`A:WU2Y3)2%4G@,)$`(!*!8;]:D`-@6_$^<`(@*&)Y09#_(E!3
MTP.1"X`.L"/0(X`J\_\QA$XE+4,C,2%T5%%4GR)0_D5;\C3#)`4Q=4;A!``&
M\/]$PCYP'6!#(U]6(64(4%G?[5KH(FC@!)`B81(B@%OO.2%K0F4@4AU@+1!N
M+1<#8"S0!)`O,75G=7G_8'(M(%%#'/!-(4"P;L!/HO\DD%?&9=@EM1SV-$`B
M@!]P[PL1'5%MY&ZQ<B+`!X`",/\><2=Q'K,^<!_!!;`$@2,2_U]Q*0`!`"%T
M5],LD#YA42'^<RRQ'T%;0C)Q81\QL2-0^RAP`W!E7_).)2@%(71-(?]FP1W3
M,'$Q@SYP'W!N0"1!SU%26X0D,@JP8VL4($&0_4DK;C``-,!X@B3!3])?4K\%
MD`<P1-$A:SWP`'!K2_!1(7I#+DLA97V#\!X`<``!````*````%9,04X@+2!A
M('-E;6DM9FER97=A;&P@<F5L871E9"!Q=65S=&EO;@`"`7$``0```!L````!
MOQT/%_@,[DESB)81T[IX`(!?;]ZC`'9\BI```P`N```````+``(``0````,`
M"5D!````'@!"$`$````I````/#$Y.3DQ,#(Q,C$R-C,P+CDR,S<U+G%M86EL
M0&AO=&UA:6PN8V]M/@`````#`-X_KV\``$``.0"PB_@;Z1Z_`0,`\3\)!```
M'@`Q0`$````0````1U)53E1!3#]'24)33TY"``,`&D``````'@`P0`$````0
M````1U)53E1!3#]'24)33TY"``,`&4```````P#]/^0$```#`"8```````,`
M-@```````P"`$/____\"`4<``0```#(```!C/553.V$](#MP/4=R=6YT86P[
M;#U.63%-4U@P,BTY.3$P,C4Q,S`Q-3-:+3$T,38T`````@'Y/P$```!B````
M`````-RG0,C`0A`:M+D(`"LOX8(!`````````"]//4=254Y404P@)B!#3RXL
M($PN3"Y#+B]/53U.15<@64]22R]#3CU214-)4$E%3E13+T-./4=254Y404P_
M1TE"4T].0@```!X`^#\!````#@```$=I8G-O;BP@0G)I86X````>`#A``0``
M`!````!'4E5.5$%,/T=)0E-/3D(``@'[/P$```!B`````````-RG0,C`0A`:
MM+D(`"LOX8(!`````````"]//4=254Y404P@)B!#3RXL($PN3"Y#+B]/53U.
M15<@64]22R]#3CU214-)4$E%3E13+T-./4=254Y404P_1TE"4T].0@```!X`
M^C\!````#@```$=I8G-O;BP@0G)I86X````>`#E``0```!````!'4E5.5$%,
M/T=)0E-/3D(`0``',#QJWAOI'K\!0``(,-!^RG+I'K\!'@`]``$````%````
M4D4Z(``````>`!T.`0```"@```!63$%.("T@82!S96UI+69I<F5W86QL(')E
M;&%T960@<75E<W1I;VX`'@`U$`$````^````/$,U,T9#.$)!.3,V1D0S,3%!
M-D,X,#`X,#5&.49!13,S,4$S-D5%0&YY,6US>#`R+F=R=6YT86PN8V]M/@``
M``L`*0``````"P`C```````#``80:<M*.0,`!Q"0!````P`0$``````#`!$0
M`0```!X`"!`!````90```$E(059%04-/55!,14]&455%4U1)3TY35$A!5%=/
M54Q$2$5,4$E.04Y35T5224Y'64]54E%515-424].,41/64]51T545$]!4U-)
M1TY!3$Q/1E1(159%3D1/4E-)4$%$1%)%4U,``````@%_``$````^````/$,U
M,T9#.$)!.3,V1D0S,3%!-D,X,#`X,#5&.49!13,S,4$S-D5%0&YY,6US>#`R
2+F=R=6YT86PN8V]M/@```/JB
`
end
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
