I'd separate the DMZ and external stuff onto separate switches. VLANs leak (on all switches) which means that its possible to bypass your firewall.
That being said, it all depends on the size and traffic volume you've got. We've got 250 or so local users split into 3 subnets, but a large part of that is that 50% of our users have multiple machines. The servers are on their own subnet, and we have a routing network in the middle of it all - which keeps WAN traffic off our client LANs. We used to be a flat network with more users, and I'd say this is an improvement, but it is more work to maintain. -------------------------------------------------------------- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Luke Levis [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 02, 2003 5:16 PM > To: NT 2000 Discussions > Subject: VLan on an HP procurve 4000m > > > currently have 3 hp procurve 4000m switches and I do have a > few VLAn's set up for our DMZ and our outside world.. I was > wondering if anyone had any recommendations on whether I > should put all my servers on a vlan and all the workstations > on a vlan or would that create headaches for me.. > > and what benefits that would give me > > the only reason I ask this is because I am cleaning up all of > my rats nest wiring and was going to kill 2 birds with one > stone.. if it is a benefit > > > question: what if saddam hussein had his legs blown off.. how > would his body double feel? > ************************************************************** > ************* > The information contained in this message is intended only > for the confidential use of the recipient(s) named above. > This message is privileged and confidential. If the reader of > this message is not the intended recipient or any agent > responsible for delivering it to the intended recipient, you > are hereby notified that you have received this document in > error and that any review, dissemination, distribution, or > copying of this message is strictly prohibited. If you have > received this communication in error, please notify us > immediately. SMG reserves the right to monitor and review all > content sent to and from this email address. Messages sent to > and from this address may be stored on the SMG email system. > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
