On 30-jan-2007, at 12:08, Kristian Lampen wrote:
Peter Teunissen schrieb:
2. Is it correct to place the WiFi Access Point connected to the
switch,
or better directly to the Debian Router?
Best would be to have another NIC on the router for the WAP (or
use a PCI WLAN card), so you can have stricter rules in the FW for
wireless clients. For instance, allow only certain (DHCP per mac
address assigned) IP's to access the LAN from the WLAN and let
others only access the WAN. WLAN in inherently less secure than
wired networking, so it'd be nice to keep them separated.
<snippage>
2. If I would use a switch with VLAN capabilities, it should be
secure to plug it to the switch directly. Is that correct?
Depends, there are some minor issues with vlan security. Seems that
if you follow good practices and use quality hardware, it should be
safe: http://wiki.m0n0.ch/wikka.php?wakka=VLAN
Peter
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
