nanog mailing list archives

Re: Common operational misconceptions


From: Mike Lyon <mike.lyon () gmail com>
Date: Wed, 15 Feb 2012 14:53:34 -0800

With security in mind:

Use other VLANs other than vlan1. Disable vlan1. Disable ports (physical
and logical) that aren't in use. Encrypt your passwords in your config, etc
etc etc...

On Wed, Feb 15, 2012 at 2:49 PM, Carsten Bormann <cabo () tzi org> wrote:

On Feb 15, 2012, at 23:36, Chuck Anderson wrote:

security

That must be the top of the list:

Switches provide security (by traffic isolation)
DHCP provides security (by only letting in hosts we know)
MAC address filtering provides security (fill in the blanks…)
NAC provides security
NATs provide security
Firewalls provide security
Buying Vendor-_ provides security

Grüße, Carsten





-- 
Mike Lyon
408-621-4826
mike.lyon () gmail com

http://www.linkedin.com/in/mlyon


Current thread: