From owner-freebsd-hardware Sat Aug 1 09:46:17 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA26140 for freebsd-hardware-outgoing; Sat, 1 Aug 1998 09:46:17 -0700 (PDT) (envelope-from owner-freebsd-hardware@FreeBSD.ORG) Received: from is2.net.ohio-state.edu (is2.net.ohio-state.edu [128.146.48.9]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id JAA26135 for ; Sat, 1 Aug 1998 09:46:15 -0700 (PDT) (envelope-from maf@dev1.net.ohio-state.edu) Received: (qmail 3289 invoked from network); 1 Aug 1998 16:46:05 -0000 Received: from dev1.net.ohio-state.edu (128.146.222.3) by is2.net.ohio-state.edu with SMTP; 1 Aug 1998 16:46:05 -0000 Received: (qmail 16742 invoked by uid 4454); 1 Aug 1998 16:46:05 -0000 Message-ID: <19980801124604.A16606@net.ohio-state.edu> Date: Sat, 1 Aug 1998 12:46:05 -0400 From: Mark Fullmer To: spork , "Roberts, Patrick S" Cc: "'Richard Archer'" , freebsd-hardware@FreeBSD.ORG Subject: Re: Support for passive backplane chassis? References: <199807311935.NAA24184@stortek.stortek.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91i In-Reply-To: ; from spork on Sat, Aug 01, 1998 at 04:45:29AM -0400 Sender: owner-freebsd-hardware@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, Aug 01, 1998 at 04:45:29AM -0400, spork wrote: > The problem with most of the switches is that it seems you lose some > security. I mean they "route", but they don't quite route. The goal is > to let no traffic of any sort pass from customer A to customer B. Does the > RSM give you control over that? Is it just a VLAN issue? How about IP > theft within the building? Yes. With an RSM Each VLAN looks like a virtual router port. If each port were a seperate VLAN, it would be just like having a high density ethernet router. To have decent performance you'll want to look at adding a nffc or an 8510. interface Vlan10 description TEST VLAN ip address 128.146.35.1 255.255.255.0 no ip directed-broadcast no ip proxy-arp no ip route-cache optimum ip route-cache flow If you're interested in accounting get a FreeBSD box to capture and process the netflow exports. -- mark To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hardware" in the body of the message