nanog mailing list archives

Re: Dual stack IPv6 for IPv4 depletion


From: Mark Tinka <mark.tinka () seacom mu>
Date: Fri, 10 Jul 2015 10:11:08 +0200



On 9/Jul/15 21:45, Matthew Huff wrote:
I've seen VLAN/subnet security used frequently in the financial world, even to the point of having full firewalls 
between vlans/subnets. Mostly for regulator purposes (Chinese firewall and all that). It's also common to allow 
outbound requests or redirect to different proxies based on source addresses within a corporate network.

In residential networks, it's mostly used for guest networks that can route out to the internet, but not to other 
local devices.

In the AN, you don't want residential neighbors viewing each others'
Layer 2 domains. But using different VLAN's for that doesn't scale -
so-called Split Horizons (Private VLAN's) are the answer.

Mark.


Current thread: