Link to home
Start Free TrialLog in
Avatar of First Last
First LastFlag for United States of America

asked on

Cisco VLAN: DMZ VLAN and SAN VLAN shared on a pair of 3750G switches

Cisco VLAN Masters:

I'm trying to cut corners and save a few bucks. I'd like your comments. Currently we don't have a DMZ or SAN. In the near future we will. I wanted a pair of small 12 port Cisco Catalyst Gigabit switches for the DMZ and another for the SAN, but didn't see any that exist. So i'm considering a pair of 24 port 3750 Gigabit switches then separarting the DMZ and SAN via VLANs.

What are the pros and cons and your opinions of using one pair of 3750 switches for the DMZ and SAN then separting the two via VLANs?  If you have other options I'd like your input.

Thanks.
Avatar of First Last
First Last
Flag of United States of America image

ASKER

I did come across this acticle: http://seclists.org/firewall-wizards/1998/Aug/203

Seems to be seveal good reasons why to use a different pair of switches for the SAN and DMZ.

What does everyone do in their environment?
ASKER CERTIFIED SOLUTION
Avatar of btassure
btassure
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you for giving me reasons to run a DMZ and SAN on the same pair of switches. I'm going to bring it up today. The best case is I'm given money for two pairs of switches; one for the san and one for the dmz. Else, i'll use one set for both.