network segmentation without using vlans

James Knott james.knott-bJEeYj9oJeDQT0dZR+AlfA at public.gmane.org
Tue Feb 19 19:34:31 UTC 2008


Teddy Mills wrote:
> Standard 24 port switch.
> Some 20 servers on it.
> 
> I want all 20 servers not to 'see' each others traffic at all.
> All 20 servers are on the same subnet. (ack)

If they're all on the same subnet, presumably it's for a reason.  That 
means what you want is impossible.  When you separate a switch into 
VLANs, it's as though you physically slit the box.  Also, bear in mind a 
switch will pass very little of one computer's traffic to others, beyond 
the intended destination.  Basicly, all you'll see at another computer 
is the broadcasts.



-- 
Use OpenOffice.org <http://www.openoffice.org>
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list