Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #230867

Re: One network card many rj45 sockets

Show all headers | View raw

On 2021-01-19 14:35, Dan Ritter wrote:
> David Christensen wrote:
>> On 2021-01-19 06:22, Dan Ritter wrote:
>>>
>>> My firewall (yes, it runs Debian) has an Intel 4x 1gig ethernet
>>> card in it, as well as the 1 gig port on the motherboard. Each
>>> is completely independent, so I have:
>>>
>>> - one connection to the public Internet
>>> - one connection to my switched network of wifi access points
>>> - one connection to my general wired network switch
>>> - one connection to my remote power switch
>>> - and a free connection for the future.
>>>
>>> Each of these has one or more different IP addresses, including
>>> IPv6 on three ports, and packets are routed between them and
>>> blocked by the firewall.
>>
>> On 2021-01-19 08:40, Dan Ritter wrote:
>>> [The remote power switch] can turn on and off a set of wall outlets,
>>> to which other computers are attached. In other words, if the firewall
>>> is running, I can power-cycle several other machines.
>>
>>
>> I assume your Wi-Fi, LAN, and remote power switch interfaces are on
>> different network segments (?).
>>
>>
>> Do you have use-cases that require or benefit from this, or could you
>> replace the 4-port NIC with a 1-port NIC connected to a switch connected to
>> all of the inside devices (AP's, clients, servers, power gateway, etc.)?
> 
> The remote power switch doesn't have to be directly attached;
> it could be attached to the switch that the general wired
> network uses. However, it needs to be fully functional with just
> the firewall being alive -- the idea is that if I can get into
> my firewall, I can deal with a hung server.
> 
> The APs are deliberately separated from the wired network:
> nothing on an AP is trusted more than the general Internet,
> except that they get to see DHCP, DNS, NTP and a printer.
> 
> All the wired devices trust each other a bit more; there are
> some NFS mounts that allow an entire subnet to read from them,
> for example.
> 
> So I could drop down to a 2-port NIC, using 3 total and not
> having any spares, but I already have this setup, and it's been
> running nicely since 2014. I spent about $250 on it, including
> some parts I had lying around, and with luck it will last until
> something better than gigabit fiber comes to my neighborhood
> with nothing worse than a power-supply replacement for $40 or
> so. The best part is that it runs straight Debian, AMD64, so
> unlike all the SOHO routers, it stays up to date.


I have a SOHO network.  Our Wi-Fi devices need access to LAN hosts and 
vice-versa.  I set up WPA2 and MAC filtering on the Wi-Fi, and put the 
Wi-Fi devices on the LAN.


Server-grade multi-port NIC's are expensive parts.  When I ran PC 
firewalls, I used desktop NIC's to supplement the motherboard port. 
Inexpensive Fast Ethernet (100 Mbps) cards and switches were, and still 
are, sufficient for the downstream side of my Internet connection.


David

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

One network card many rj45 sockets mick crane <mick.crane@gmail.com> - 2021-01-19 13:50 +0100
  Re: One network card many rj45 sockets Reco <recoverym4n@enotuniq.net> - 2021-01-19 14:10 +0100
  Re: One network card many rj45 sockets Georgi Naplatanov <gosho@oles.biz> - 2021-01-19 14:10 +0100
  Re: One network card many rj45 sockets <tomas@tuxteam.de> - 2021-01-19 15:00 +0100
  Re: One network card many rj45 sockets Dan Ritter <dsr@randomstring.org> - 2021-01-19 15:30 +0100
    Re: One network card many rj45 sockets Stefan Monnier <monnier@iro.umontreal.ca> - 2021-01-19 16:40 +0100
    Re: One network card many rj45 sockets Dan Ritter <dsr@randomstring.org> - 2021-01-19 17:50 +0100
    Re: One network card many rj45 sockets David Christensen <dpchrist@holgerdanske.com> - 2021-01-19 23:30 +0100
      Re: One network card many rj45 sockets Dan Ritter <dsr@randomstring.org> - 2021-01-19 23:40 +0100
        Re: One network card many rj45 sockets David Christensen <dpchrist@holgerdanske.com> - 2021-01-20 01:20 +0100
          Re: One network card many rj45 sockets Dan Ritter <dsr@randomstring.org> - 2021-01-20 04:30 +0100
  Re: One network card many rj45 sockets Henning Follmann <hfollmann@itcfollmann.com> - 2021-01-19 16:00 +0100
  Re: One network card many rj45 sockets Andy Smith <andy@strugglers.net> - 2021-01-19 16:10 +0100
  Re: One network card many rj45 sockets David Christensen <dpchrist@holgerdanske.com> - 2021-01-19 23:00 +0100
    Re: One network card many rj45 sockets Sven Hartge <sven@svenhartge.de> - 2021-01-19 23:10 +0100

csiph-web