Untrusted VLANs on Core Gear

[jkaftan <jkaftan () UTICA EDU>]

We are looking to create a fully redundant internet connection.  I was
thinking about using my core switch to provide layer 2 for this setup.
Specifically I was going to create an Untrust VLAN that my edge routers and
Firewalls would connect to.

Fundamentally I do not see an issue as VLANs are supposed to be the same
thing as having separate switches (broadcast domains).  However another way
to look at it is that I have potential bad guys actually "touching" my core
gear.

Does this make anyone want to run screaming into the night?