Penetration Testing mailing list archives
Re: HP BL30's and VLAN's
From: Brendan Dolan-Gavitt <mooyix () gmail com>
Date: Thu, 3 Mar 2005 16:40:18 -0500
VLANs were not intended to separate network segments for security; see http://infiltrated.net/cisco/vlan-insecurities.html -Brendan On Thu, 3 Mar 2005 11:22:51 -0500, Merrick, Carl <CMerrick () enfield org> wrote:
I am not a pen tester and this is more of a theoretical question for the experts. We are in the process of installing HP BL30p blade servers which use the GBE2 integrated switch for network connectivity. One of the servers installed will be a web server which will run in the DMZ. Connectivity to the DMZ will be provided from the GBE2 to a port on the firewall via a VLAN. Other internal VLAN's will be running on the same GBE2 switch. The question is, how secure will this setup be? Is it possible to hack across VLANs on the same switch? My preferred configuration is to physically isolate web servers. Thanks. Carl
Current thread:
- HP BL30's and VLAN's Merrick, Carl (Mar 03)
- Re: HP BL30's and VLAN's jkowall (Mar 03)
- Message not available
- Re: HP BL30's and VLAN's jkowall (Mar 04)
- Message not available
- Re: HP BL30's and VLAN's jkowall (Mar 03)
- Re: HP BL30's and VLAN's Ricardo Oliveira (Mar 03)
- RE: HP BL30's and VLAN's Jerry Shenk (Mar 03)
- Re: HP BL30's and VLAN's Brendan Dolan-Gavitt (Mar 03)
- Re: HP BL30's and VLAN's Ulric Eriksson (Mar 04)
- <Possible follow-ups>
- RE: HP BL30's and VLAN's MILES John M (Mar 03)