In a dedicated server hosting environment, each customer should have their own VLAN and subnet. True, it may waste a few IPs, but keep in mind when the customer expands to two or more servers, they can utilize additional IPs from their existing VLAN even when the servers are not physically close to each other. It makes customers happy, and it makes sysadmins sleep easier.
-- Randy ---------- Original Message ----------- From: Gert Doering <[email protected]> To: Mikael Abrahamsson <[email protected]> Cc: [email protected] Sent: Wed, 26 Aug 2009 15:50:34 +0200 Subject: Re: [c-nsp] Large networks > Hi, > > On Wed, Aug 26, 2009 at 03:32:13PM +0200, Mikael Abrahamsson wrote: > > If you do it like that with local-proxy-arp then you can have multiple > > vlans per IP subnet, so you get L2 isolation between customers but you do > > not waste any IP addresses. > > So how do you prevent customer A from sending out packets with an IP > address belonging to customer B? (For whatever reason). > > gert > -- > USENET is *not* the non-clickable part of WWW! > //www.muc.de/~gert/ > Gert Doering - Munich, Germany [email protected] > fax: +49-89-35655025 [email protected] ------- End of Original Message ------- _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
