Draytek Vigor 2760 VLAN configuration & security












0















In configuring other devices, the general practice/approach is that a VLAN is assigned to a specific network. For example;



VLAN 1 - 192.168.1.0 255.255.255.0
VLAN 2 - 192.168.2.0 255.255.255.0
VLAN 3 - 192.168.3.0 255.255.255.0


The VLAN configuration of Draytek Vigor 2760 isn't clear or precise.



The screenshot below illustrates that the device has been configured to support 2 subnets.



enter image description here



In the subsequent section, the diagram below describes the VLAN configuration.



enter image description here



The configuration indicates that the physical ports 1 - 4 are assigned to VLAN0 and so is SSID1. VLAN0 is part of LAN 1. Devices either connected to the physical interface/ports on the device or via SSID are assigned IP addresses 192.168.1.x



VLAN1 is forms part of LAN 2. SSID2 is assigned to VLAN1. Devices on this network are issued the IP address 192.168.2.x



Questions;




  • Since the number of subnets is limited to 2, it is unclear as to the
    value of assigning subsequent VLANs e.g. VLAN2 to either LAN address
    spaces e.g. LAN 1 or 2. What benefit does this deliver?

  • If SSID3 is assigned to VLAN2 which is allocated to LAN2, what are the security and/or performance implications. In testing the configuration, it appears that the devices connected to SSID3 are in the same address space of LAN 2 i.e 192.168.2.x. What are the security implications/considerations?










share|improve this question



























    0















    In configuring other devices, the general practice/approach is that a VLAN is assigned to a specific network. For example;



    VLAN 1 - 192.168.1.0 255.255.255.0
    VLAN 2 - 192.168.2.0 255.255.255.0
    VLAN 3 - 192.168.3.0 255.255.255.0


    The VLAN configuration of Draytek Vigor 2760 isn't clear or precise.



    The screenshot below illustrates that the device has been configured to support 2 subnets.



    enter image description here



    In the subsequent section, the diagram below describes the VLAN configuration.



    enter image description here



    The configuration indicates that the physical ports 1 - 4 are assigned to VLAN0 and so is SSID1. VLAN0 is part of LAN 1. Devices either connected to the physical interface/ports on the device or via SSID are assigned IP addresses 192.168.1.x



    VLAN1 is forms part of LAN 2. SSID2 is assigned to VLAN1. Devices on this network are issued the IP address 192.168.2.x



    Questions;




    • Since the number of subnets is limited to 2, it is unclear as to the
      value of assigning subsequent VLANs e.g. VLAN2 to either LAN address
      spaces e.g. LAN 1 or 2. What benefit does this deliver?

    • If SSID3 is assigned to VLAN2 which is allocated to LAN2, what are the security and/or performance implications. In testing the configuration, it appears that the devices connected to SSID3 are in the same address space of LAN 2 i.e 192.168.2.x. What are the security implications/considerations?










    share|improve this question

























      0












      0








      0








      In configuring other devices, the general practice/approach is that a VLAN is assigned to a specific network. For example;



      VLAN 1 - 192.168.1.0 255.255.255.0
      VLAN 2 - 192.168.2.0 255.255.255.0
      VLAN 3 - 192.168.3.0 255.255.255.0


      The VLAN configuration of Draytek Vigor 2760 isn't clear or precise.



      The screenshot below illustrates that the device has been configured to support 2 subnets.



      enter image description here



      In the subsequent section, the diagram below describes the VLAN configuration.



      enter image description here



      The configuration indicates that the physical ports 1 - 4 are assigned to VLAN0 and so is SSID1. VLAN0 is part of LAN 1. Devices either connected to the physical interface/ports on the device or via SSID are assigned IP addresses 192.168.1.x



      VLAN1 is forms part of LAN 2. SSID2 is assigned to VLAN1. Devices on this network are issued the IP address 192.168.2.x



      Questions;




      • Since the number of subnets is limited to 2, it is unclear as to the
        value of assigning subsequent VLANs e.g. VLAN2 to either LAN address
        spaces e.g. LAN 1 or 2. What benefit does this deliver?

      • If SSID3 is assigned to VLAN2 which is allocated to LAN2, what are the security and/or performance implications. In testing the configuration, it appears that the devices connected to SSID3 are in the same address space of LAN 2 i.e 192.168.2.x. What are the security implications/considerations?










      share|improve this question














      In configuring other devices, the general practice/approach is that a VLAN is assigned to a specific network. For example;



      VLAN 1 - 192.168.1.0 255.255.255.0
      VLAN 2 - 192.168.2.0 255.255.255.0
      VLAN 3 - 192.168.3.0 255.255.255.0


      The VLAN configuration of Draytek Vigor 2760 isn't clear or precise.



      The screenshot below illustrates that the device has been configured to support 2 subnets.



      enter image description here



      In the subsequent section, the diagram below describes the VLAN configuration.



      enter image description here



      The configuration indicates that the physical ports 1 - 4 are assigned to VLAN0 and so is SSID1. VLAN0 is part of LAN 1. Devices either connected to the physical interface/ports on the device or via SSID are assigned IP addresses 192.168.1.x



      VLAN1 is forms part of LAN 2. SSID2 is assigned to VLAN1. Devices on this network are issued the IP address 192.168.2.x



      Questions;




      • Since the number of subnets is limited to 2, it is unclear as to the
        value of assigning subsequent VLANs e.g. VLAN2 to either LAN address
        spaces e.g. LAN 1 or 2. What benefit does this deliver?

      • If SSID3 is assigned to VLAN2 which is allocated to LAN2, what are the security and/or performance implications. In testing the configuration, it appears that the devices connected to SSID3 are in the same address space of LAN 2 i.e 192.168.2.x. What are the security implications/considerations?







      networking wireless-networking security vlan draytek






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Feb 5 at 23:29









      MotivatedMotivated

      14419




      14419






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "3"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1402458%2fdraytek-vigor-2760-vlan-configuration-security%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Super User!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1402458%2fdraytek-vigor-2760-vlan-configuration-security%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Probability when a professor distributes a quiz and homework assignment to a class of n students.

          Aardman Animations

          Are they similar matrix