3550 on DMZ

[frejac]

Is there a whitepaper, FAQ or checklist or something available, to help secure a 3550 switch used on a DMZ?

Or do you pro's here have any suggestions?

[frejac]

And is there any security considerations why one wouldnt want to mix more than one CMZ in teh same switch, using different VLAN's?

[msjouw]

The real issue here is that you want to make sure that the ports that you use are in a vlan without an ip address. This way you an use multiple vlan's on one switch and put on the 3550 some acl's on it so it cannot be attached to from the networks from the dmz or outside only allow internal specific addresses to connect.

Regards, Maarten Sjouw