<HTML><HEAD>
<META content="text/html; charset=iso-8859-15" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16671"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"> Ya, your right, I meant the CAM table. flooding the CAM table with MAC addresses caused all the traffic to broadcast to all ports. My bad, but it is/was a fundamental flaw in the way switches work, I know Cisco had a fix out for it but it did not work with dot1x and DVlans.</SPAN></DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"></SPAN> </DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"> The moral of the story is that vlans are not the end security stop-gap, they are just one layer to keep the casual hacker at bay, just as the hidden SSID does.</SPAN></DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"></SPAN> </DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000">Thanks for the correction Brian.</SPAN></DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"> </SPAN></DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"></SPAN><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000"></SPAN> </DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #000000">> It sounds like you have pretty broken switches then. VLANs are always<BR>> separate, floods or no floods.<BR>> <BR>> Also, true switches don't care about ARP at all (as opposed to "layer 3<BR>> switches").<BR>> <BR>> Regards,<BR>> <BR>> Brian.<BR>> -<BR>> List info/subscribe/unsubscribe? See <BR>> </SPAN><SPAN style="FONT: 10pt Segoe UI; COLOR: #ff0000; TEXT-DECORATION: underline"><A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></SPAN></DIV>
<DIV> </DIV>
<DIV><SPAN style="FONT: 10pt Segoe UI; COLOR: #ff0000; TEXT-DECORATION: underline"> </DIV></SPAN>
<DIV>Brett Littrell</DIV>
<DIV>Network Manager</DIV>
<DIV>MUSD</DIV>
<DIV>CISSP, CCSP, CCVP, MCNE</DIV></BODY></HTML>