Broadcast packets and DOS attack

[mufaddal]

Hello

I have a similar setup as described in the article below.
http://www.smallnetbuilder.com/lanw...ow-to-segmenting-a-small-lan?showall=&start=4

Using the same setup as described in this tutorial, and assuming all devices on all vlans are on the same IP subnet, will broadcast packets be able to propagate from Vlan3 to Vlan2 and vice versa?

 

[sinshiva]

if the vlans are on the same bridge, then yes unless you filter via ebtables (or the webui you are using provides options that do it for you). ideally, if you really wanted the devices separated, one would NAT each vlan individually and use iptables to filter/connect between vlans as needed. the vlans would each need their own IP subnet. no additional steps should be required in the routing table, the routes should be dynamically generated when you set the IP of each vlan