Contents
What is an asymmetric VLAN?
The asymmetric VLAN mapping feature for the Cisco CGS 2520 provides a method for restricting traffic on VLAN trunk ports. The feature lets you specify lists of VLANs that are allowed to forward traffic on the trunk port in the ingress direction, egress direction, or in both directions.
What is the danger of a VLAN mismatch?
Table 3-9 Common Problems with Trunks
| Problem | Result |
|---|---|
| Native VLAN mismatch | Poses a security risk and creates unintended results |
| Trunk mode mismatch | Causes loss of network connectivity |
| Allowed VLANs on trunks | Causes unexpected traffic or no traffic to be sent over the trunk |
What is asymmetric switching?
An asymmetric LAN switch provides switched connections between ports of unlike bandwidth, such as a combination of 10-Mbps and 100-Mbps ports. Asymmetric switching enables more bandwidth to be dedicated to the server switch port in order to prevent a bottleneck.
What are the issues with asymmetric routing and firewalls?
Issues to Consider with Asymmetric Routing. Asymmetric routing is not a problem by itself, but will cause problems when Network Address Translation (NAT) or firewalls are used in the routed path. For example, in firewalls, state information is built when the packets flow from a higher security domain to a lower security domain.
Is there a problem with my VLAN address?
Several problems can occur with your VLANs. Since VLANs are interfaces with IP addresses, they behave as interfaces and can have similar problems that you can diagnose with tools such as ping, traceroute, packet sniffing, and diag debug. You might discover unexpectedly that hosts on some networks are unable to reach certain other networks.
How is the Les link firewall an asymmetric route?
In order to forward the traffic to the LES link firewall I had to route the traffic to it which automatically routes the traffic coming from the company’s network via our public firewall hence creating a asymmetric route on the way back.
Is it a good idea to enable asymmetric routing?
But allowing asymmetric routing is not the best solution, because it reduces the security of your network. For a long-term solution, it is better to change your routing configuration or change how your FortiGate unit connects to your network. If you enable asymmetric routing, antivirus and intrusion prevention systems will not be effective.
https://www.youtube.com/watch?v=kDAhqrhMG_U