|
Posted by elesser on January 17, 2007, 4:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hi,
Thanks for your reply.
I am not entirely familair with all the things you mentioned, but the
question was actually very general. They simply asked if VLAN would in
any way be compatible with VPN technically and if yes, if it would be
'a good idea' to implement such a configuration.
Now, I am pretty sure that it is technically possible to implement VPN
in a VLAN, but I am not sure if this would be ethically correct with
the OSI concept of layers. So that's basically what I'm asking here.
Thanks.
On 17 jan, 22:44, rober...@hushmail.com (Walter Roberson) wrote:
>
> >I had a the following question today on my exam:
> >"Is it possible to use a VPN connection on a VLAN ?".
> >I answered that technically it is possible, but that it is not
> >recommended to do so, because VLAN is running on layer 2 and VPN on
> >layer 3/4. Furthermore, there is a new standard in development, L2VPN.
> >So logically, is VPN would be available for layer 2 protocols, why
> >would we need a new standard?
> >My question is now: does this make any sense at all??Your last line is
circular reasoning. It could be that there
> were some layer 2 facets that there was some choice about in
> implementing a layer 2 VPN, with a standard arising to
> unify the choices, but with it still (hypothetically) being
> perfectly possible to do layer 2 VPNs. Any given standard does
> not have to introduce new functionality: it could instead act to
> normalize existing functionality.
>
> Before answering the question, I would want to know what they
> meant by VPN and what they meant by VLAN. For example, is it
> possible to use MLPS to implement a private layer 2 extension
> to a LAN that was carrying 802.1Q packets? (As far as I understand, Yes).
> Can GRE be used to encapsulate layer 2 packets, with or without
> ISL tags? (Sure can.) Can PIX 6.3 be configured to sit on an 802.1Q
> tagged trunk and see foreign-destined IP packets with any given
> 802.1Q tag, and forward those on (stripped of tag) over an IPSec VPN?
> (Yes.) Will PIX 6.3 preserve random 802.1Q tags in regular traffic
> over an IPSec VPN (no, it will ignore the packets unless configured
> to have a "logical interface" in that VLAN.)
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map