Re: VALN hopping

[David Barroso <dbarroso () s21sec com>]

> WWe are having a heated discussion about using VLAN's as a type of
> DMZ, so
> > I am asking the experts.  I prsonally like to see physical isolation;
> > however, our network person doesn't feel there is a threat of VLAN
> > hopping.  Please let me know your opinions.

If they are new devices with up-to-date OS versions it is not very likely
that attacks similar to double encapsulated 802.1q packets will succeed. On
the other hand, if they are not properly configured and/or hardened, other
attacks can be accomplished, like for instance, with Cisco devices, setting
up a trunking if DTP settings are poorly configured (see
http://yersinia.sourceforge.net for performing that attack).

--
David Barroso Berrueta 
Not one day goes by that I don't ride, 'til the infinite, the horse of my imagination