Security of multiple VLANs and WiFi

Anthony Chavez · 2005-03-03T22:53:52+00:00

In the following configuration, [x]-----O-------Oswitch WAP stationthe switch supports multiple VLANs per segment and the Wireless AccessPoint is an Apple Airport Extreme. At first glance, my impression isthat the WAP is not capable of routing, but I have not confirmed this.It seems to me that I could obtain better security if I were to placethe WAP in one VLAN and the station in another (which grabs its IPaddress from a DHCP server behind the switch). My reasoning is that Icould place the WAP inside a firewalled VLAN and allow management accessonly to that VLAN.I'm not terribly familiar with the way WAPs work (they're essentiallybridges, correct?), so I'm curious to know if such a configuration wouldactually work, if indeed the WAP is *not* a router.Moreover, I have to wonder if this design would actually result in thesecurity I'm after. Couldn't an attacker simply sniff the segmentbetween the WAP and the station(s), including traffic on the oppositeVLAN to which they are connected?- -- Anthony Chavez jabber:

Mar 03, 2005 0 Replies

Rate this thread:

Anthony Chavez 21 years ago

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required

Security of multiple VLANs and WiFi

Related discussions

VLANs: do all switches in a route have to support it?

Question regarding 802.1x

VLANs with 2950 switches

Join the Discussion

Didn't find your answer?