Use a router as a kinda switch with a firewall to block traffic?

[BillyCarpenter]

Re: Use a router as a kinda switch with a firewall to block traffic?

Layer 3 swtiches are the preferred solution since they can do the routing between VLAN's without passing the packets to another device.

I'm not an experienced network guy so I could be totally off base. Yes, but now we're talking about installing a layer 3 switch on a customer's network to keep the unwanted traffic from the copier, but what is this unwanted network traffic doing to the overall network? Isn't this simply putting a band aid on the problem?

[rthonpm]

Re: Use a router as a kinda switch with a firewall to block traffic?

Installing the switch is for the customer to do since it would have to be configured by them to work with their network. I brought it up as a solution for the overall issue of traffic control as I've seen implemented and have assisted customers in moving towards.

In this particular case, the issue lies in the customer's network so unless you also manage their network the issue is for them to fix. All you can do is confirm that the copier is working properly.

Sent from my BlackBerry using Tapatalk

[slimslob]

Re: Use a router as a kinda switch with a firewall to block traffic?

I'm not an experienced network guy so I could be totally off base. Yes, but now we're talking about installing a layer 3 switch on a customer's network to keep the unwanted traffic from the copier, but what is this unwanted network traffic doing to the overall network? Isn't this simply putting a band aid on the problem?

The first thing to determine whether the unwanted traffic is coming from somewhere on the local network or the internet. If it is the internet then the ISP need to be involved in stopping it. Otherwise their internet modem will continue to be hammered making using the internet very slow.

If it is the local network then someone is either doing something or visiting websites that they should not be or has some type of malware.

[BillyCarpenter]

Re: Use a router as a kinda switch with a firewall to block traffic?

The first thing to determine whether the unwanted traffic is coming from somewhere on the local network or the internet. If it is the internet then the ISP need to be involved in stopping it. Otherwise their internet modem will continue to be hammered making using the internet very slow.

If it is the local network then someone is either doing something or visiting websites that they should not be or has some type of malware.

I'm with you on that, slim.

In case it's my network that we're talking about, before we install an extra router or a layer 3 switch to block out the unwanted traffic, I want to know the source.


To use an analogy: If we're inside our house and we come under fire from the enemy, we can put sandbags around our house and hope that protects us from the bullets or we can eliminate the enemy.

[slimslob]

Re: Use a router as a kinda switch with a firewall to block traffic?

I'm with you on that, slim.

In case it's my network that we're talking about, before we install an extra router or a layer 3 switch to block out the unwanted traffic, I want to know the source.


To use an analogy: If we're inside our house and we come under fire from the enemy, we can put sandbags around our house and hope that protects us from the bullets or we can eliminate the enemy.

Do you have a number of mobile devices using your WiFi? With a lot of apps it's a constant ET call home. Checking for updates and new ads, backing up data, etc. Many you can configure to only go online when they are in the foreground.

[fishleg]

Re: Use a router as a kinda switch with a firewall to block traffic?

Yeah I think my idea was to be able to go yup your copier is getting spammed please fix your network.

I've got a managed switch now with port mirroring capability now just need to have a play with it.

The idea would be ok Mr customer let's see what's going on oh look it's getting spammed by these ips etc. I liked the idea of the router because you could go yup it's your CCTV system on port 489 ok let's just filter that out... Yup that's your problem goodbye.

I did have a play with a mini router but I've got no idea how you'd configure it to basically act like a switch and forward everything from the wan side to lan so we could still make use of the firewall if needed. Yeah I think you guys are right introducing another router into someone's network probably not a great idea.