[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Small Network Setup with Debian Router




On 30-jan-2007, at 12:08, Kristian Lampen wrote:

Peter Teunissen schrieb:


2. Is it correct to place the WiFi Access Point connected to the switch,
or better directly to the Debian Router?
Best would be to have another NIC on the router for the WAP (or use a PCI WLAN card), so you can have stricter rules in the FW for wireless clients. For instance, allow only certain (DHCP per mac address assigned) IP's to access the LAN from the WLAN and let others only access the WAN. WLAN in inherently less secure than wired networking, so it'd be nice to keep them separated.
<snippage>

2. If I would use a switch with VLAN capabilities, it should be secure to plug it to the switch directly. Is that correct?

Depends, there are some minor issues with vlan security. Seems that if you follow good practices and use quality hardware, it should be safe: http://wiki.m0n0.ch/wikka.php?wakka=VLAN

Peter



Reply to: