Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have 2 subnets within my office: 172.16.1.0/24 and 172.16.2.0/24. All devices on each subnet are wired independently from each other into the server closet. Previously each subnet had it's own switch in the closet to connect to that subnets servers. We are replacing the 2 switches with a single Dell 2816 managed switch.

Is there a benefit to setting up the switch with 2 VLANs over just letting everything pass through the switch in unmanaged mode?

My only security concern is this: 1 subnet has access to the internet while the other does not. Does setting up 2 VLANs provide additional security by helping prevent 1 subnet from accessing the other? In other words, if a computer with internet access gets hacked will it being on one side of a VLAN help prevent the hacker from accessing the other subnet?

share|improve this question

1 Answer 1

If you do not configure separate VLANs the computers from one network will be able to a) communicate with, attack or b) intercept communication of computers from the other network (including access through routers to other networks like Internet).

The basics of the attacks are easy:

a) Can be simply done by setting the IP address from the other network or just adding an IP alias.

b) Can be for example done by ARP poisoning or filling the forwarding table of the switch and setting the interface to the promiscuous mode.

To be secure from this point of view you have to configure separate VLANs and have a good access-list on the router or better firewall between them.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.