topic Re: dmz in Network Security

dmz

bluesea2010 — Tue, 26 Apr 2022 11:16:24 GMT

Hi ,

I don't have a physical switch for dmz .Now If I want to share the same inside network switch ,what is the solution

Thanks

Re: dmz

Rob Ingram — Tue, 26 Apr 2022 11:20:13 GMT

@bluesea2010 it's not generally advisable, but if you needed to do it configure the interfaces of the DMZ VLANs and servers in a separate VRF. Which will isolate the routing, traffic would be routed via the Firewall, which would permit/deny traffic accordingly.

Re: dmz

Karsten Iwen — Tue, 26 Apr 2022 11:20:26 GMT

If the infrastructure is not separate, the minimum separation is by VLANs. Depending on your implementation, also VRFs can be used to separate the data.

Re: dmz

Flavio Miranda — Tue, 26 Apr 2022 11:25:18 GMT

The solution depends on the switch model and version you have. Can you tell please?

Re: dmz

MHM Cisco World — Tue, 26 Apr 2022 11:51:57 GMT

DMZ have subinterface in FW
Inside have different Subinterface in FW

SW have two different VLAN for each DMZ and Inside.

keep notice that FW will be the GW for both these VLAN

Re: dmz

bluesea2010 — Tue, 26 Apr 2022 19:55:14 GMT

Hi @Karsten Iwen @Flavio Miranda @Rob Ingram @MHM Cisco World

switch model is nexus 9k

Planning to do dmz on dc firewall .?

,How the physical connection should be . ?

What If I have spine and leaf with border leaf ?.I want to run dmz in the same boarder leaf

Thanks