Switch Carry both Inside and DMZ

[adelholayel]

I am wondering if I have a firewall with inside and DMZ zones, is there any security concern when setting up both zones on the same switch making them just layer 2.

[Dennis Mink]

Strictly speaking there is, because if you can hop VLAN on the switch, you can hop between DMZ and internal. having said that, I have seen this set up deployed dozens of times. If you just stick one IP address on that switch for management you should be fine.