ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    The VLAN Debate: Explaining Why They Aren't the Greatest Thing Since Sliced Bread

    IT Discussion
    vlan vlans networking discussion
    8
    20
    4.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • thanksajdotcomT
      thanksajdotcom
      last edited by

      @scottalanmiller , do you have any idea what my co-worker could have meant by "dirty traffic"? He was saying something about it spending lots of time testing the connection, or trying the connection, or basically creating a lot of traffic that he said didn't need to be seen by the whole network.

      scottalanmillerS 1 Reply Last reply Reply Quote 0
      • scottalanmillerS
        scottalanmiller @thanksajdotcom
        last edited by scottalanmiller

        @thanksaj said:

        @scottalanmiller , do you have any idea what my co-worker could have meant by "dirty traffic"? He was saying something about it spending lots of time testing the connection, or trying the connection, or basically creating a lot of traffic that he said didn't need to be seen by the whole network.

        Probably he's confused. I doubt that he looked closely at the traffic being generated. If the printer is blasting broadcasts out to the whole network he has a problem that needs to be addressed, there is no reason for a device to be doing that. Anything else doesn't fit his description unless his network uses a hub, not a switch. In a modern switched network, only broadcast traffic is seen "by the network", not normal traffic. Implementing VLANs and inter-LAN routing to deal with one messed up printer is pretty poor networking guidance.

        thanksajdotcomT 1 Reply Last reply Reply Quote 0
        • thanksajdotcomT
          thanksajdotcom @scottalanmiller
          last edited by thanksajdotcom

          @scottalanmiller said:

          @thanksaj said:

          @scottalanmiller , do you have any idea what my co-worker could have meant by "dirty traffic"? He was saying something about it spending lots of time testing the connection, or trying the connection, or basically creating a lot of traffic that he said didn't need to be seen by the whole network.

          Probably he's confused. I doubt that he looked closely at the traffic being generated. If the printer is blasting broadcasts out to the whole network he has a problem that needs to be addressed, there is no reason for a device to be doing that. Anything else doesn't fit his description unless is network uses a hub, not a switch. In a modern switched network, only broadcast traffic is seen "by the network", not normal traffic. Implementing VLANs and inter-LAN routing to deal with one messed up printer is pretty poor networking guidance.

          Well, in all fairness, this guy was mixing up correlation and aggregation on the SIEM. The guy likes to talk big but he's not as good as he thinks he is, and everyone but him in L1 knows it.

          1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller
            last edited by

            It's too bad that hubs disappeared fifteen years ago. If kids today had to grow up using those and then graduate up to switches they would understand so much more about basic networking. Jumping straight to L3 devices with no understanding of the underpinnings it just a mess.

            IRJI 1 Reply Last reply Reply Quote 1
            • IRJI
              IRJ @scottalanmiller
              last edited by

              @scottalanmiller said:

              It's too bad that hubs disappeared fifteen years ago. If kids today had to grow up using those and then graduate up to switches they would understand so much more about basic networking. Jumping straight to L3 devices with no understanding of the underpinnings it just a mess.

              We have a 10mb hub or two in our equipment room just sitting on a shelf

              1 Reply Last reply Reply Quote 0
              • scottalanmillerS
                scottalanmiller
                last edited by

                I used to have one at home. It was great back when I was just learning networking. So glad that I didn't have switches right away. And my first five or six firewalls were all things that I built myself. For the first six years, or so, that I had Internet at home (maybe ten years, now that I think about it) there were no firewalls on the market to use. You either went without one (and not NAT either) or you built your own. That I had NAT at home was unthinkable for the first many years that I had it.

                JaredBuschJ 1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender @Nic
                  last edited by

                  @Nic said:

                  Good point - you'll need a separate server for your financial apps, which most often a smaller shop won't have.

                  Not true, you use VMs.

                  thanksajdotcomT scottalanmillerS 2 Replies Last reply Reply Quote 1
                  • thanksajdotcomT
                    thanksajdotcom @Dashrender
                    last edited by

                    @Dashrender said:

                    @Nic said:

                    Good point - you'll need a separate server for your financial apps, which most often a smaller shop won't have.

                    Not true, you use VMs.

                    LOL In all fairness, he never said "separate physical server". He could have been implying it could be a separate VM. Just saying.

                    DashrenderD 1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender @thanksajdotcom
                      last edited by

                      @thanksaj said:

                      @Dashrender said:

                      @Nic said:

                      Good point - you'll need a separate server for your financial apps, which most often a smaller shop won't have.

                      Not true, you use VMs.

                      LOL In all fairness, he never said "separate physical server". He could have been implying it could be a separate VM. Just saying.

                      I'll give you and Nick that 🙂

                      1 Reply Last reply Reply Quote 1
                      • scottalanmillerS
                        scottalanmiller @Dashrender
                        last edited by scottalanmiller

                        @Dashrender said:

                        @Nic said:

                        Good point - you'll need a separate server for your financial apps, which most often a smaller shop won't have.

                        Not true, you use VMs.

                        You might, but often SMBs don't. Depends on the apps. Remember it needs to be basically the whole infrastructure, not only the apps for those users.

                        1 Reply Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch @scottalanmiller
                          last edited by

                          @scottalanmiller said:

                          I used to have one at home. It was great back when I was just learning networking. So glad that I didn't have switches right away. And my first five or six firewalls were all things that I built myself. For the first six years, or so, that I had Internet at home (maybe ten years, now that I think about it) there were no firewalls on the market to use. You either went without one (and not NAT either) or you built your own. That I had NAT at home was unthinkable for the first many years that I had it.

                          Memories. I moved into a duplex with a friend in 1997 and brought in 2 phone lines, hooked to a pair of USR 56k modems on serial ports of a Windows NT server I had acquired. I setup routing on the server and we proceeded to kick ass on Battle.net. Mostly in Starcraft. We were sitting side by side and always joined as a team.

                          In 1998 I was one of the first people to get Charter's brand new Cable modem service. We were beta testers. The Cable guy came in to install it, looked at my setup and said "umm I do not know what to do with that." I told him to prove it to his laptop and go home.

                          1 Reply Last reply Reply Quote 2
                          • PSX_DefectorP
                            PSX_Defector @thanksajdotcom
                            last edited by

                            @thanksaj said:

                            He was talking about how this one printer was throwing "lots of dirty traffic", although I'm not entirely sure even he knew what he meant by that.

                            When you have a device sending lots of chatty packets out for no reason, e.g. pinging broadcast when not necessary or pulling DHCP info at inappropriate times. For example, the original iPhone had lots of problems with 802.11b traffic, causing access points to go nuts due to their incessant chatter. I read of a few colleges just out right banning Apple MACs from accessing the point due to their excessive nature.

                            But the solution for a dirty device on a LAN isn't to VLAN it out but to get rid of the device.

                            Sounds like you work with some real "winners".

                            1 Reply Last reply Reply Quote 2
                            • dengelhardtD
                              dengelhardt
                              last edited by

                              I, too, have some hubs in storage. They make a quick and dirty port mirror when you want to examine traffic on a network. That said, if a printer is emitting "dirty traffic", then it needs to be configured to eliminate all of the protocols not in use on that network, shut down NetBIOS traffic, and he would be surprised how clean the printer could be. As for VLANs, I have been prompted to put VLANs in for my voice traffic, but I prefer to separate my voice and data physically when possible because it eliminates sharing the network up to the router, and optimizes my PoE switches. This also eliminates the need for more expensive L3 switches. In our case some of the phones act as a switch for the user's computer, and traffic would be doubled on the wire if it had to go to the router before returning to the other devices.

                              scottalanmillerS 1 Reply Last reply Reply Quote 1
                              • scottalanmillerS
                                scottalanmiller @dengelhardt
                                last edited by

                                @dengelhardt that's a good point that people often miss - there are cases where using VLANs unnecessarily can cause traffic to have to "loop" through a router to return to the same device. In the case of VoIP phones acting as small switches at the desk it's the switch inside the phone doing it.

                                I had to deal with a network just a few weeks ago that had five routers and three switches, one of which was still on FastEthernet (10/100.)
                                They managed to make nearly all traffic have to pass through the slow switch for nearly everything. And some things looped through routers that were attached on both ends to the same VLAN!! It was insane.

                                1 Reply Last reply Reply Quote 0
                                • 1 / 1
                                • First post
                                  Last post