NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
GS724Tv4 VLAN Routing
NetGear Community, I have a NetGear GS724Tv4 24 Port Gigabit Smart Switch in which I have configured 4 VLANS. I am only using VLAN1 and VLAN4 with VLAN 2 | VLAN3 as the default VLAN's (VOIP,...
NetGear Community,
I have decided to install a second PCIe ethernet card on the server/workstation to be used as a rsyslog server for receiving syslog messages (UDP packets) from the GS724Tv4 Smart Switch logging service.
I basically configured the second ethernet card (eth1) on a separate subnet to communicate over the Management VLAN (VLAN1).
The primary ethernet card (eth0) is connected to VLAN4 which allows for inter-connecting workstations as a localized LAN.
The main goal is to provide network isolation between the user space and management space.
I hope this helps some helpless souls.
crodrig wrote:
The issue is that the syslog server has only one ethernet card and must receive network packets/data from VLAN 4 as well as from VLAN1 to meet DISA STIG Requirements of logging NetGear GS724Tv4 server log events..
Curious what syslog messaged from the GS724Tv4 you expect to receive on the management VLAN (VLAN 1 by default) -and- the access ports on VLAN 4 in your example?
Schumaku,
As per DISA STIG Requirements,
Group ID: V-3070
Group Title: Management connections must be logged.
Rule ID: SV-3070r4_rule
Rule Title: Network devices must log all attempts to establish a management connection for administrative access.
Fix Text: Configure the device to log all access attempts to the device to establish a management connection for administrative access.
I currently have the GS724Tv4 logging severity code (6) and higher.
Informational (6). Provides device information.
The access ports on VLAN4 are configured as the internal subnet for an isolated network. No network connections are allowed to the outside world (Internet, VPN, WAN, etc.)
Thanks.
There are still no management access vectors on this VLAN.
NetGear Community,
I have decided to install a second PCIe ethernet card on the server/workstation to be used as a rsyslog server for receiving syslog messages (UDP packets) from the GS724Tv4 Smart Switch logging service.
I basically configured the second ethernet card (eth1) on a separate subnet to communicate over the Management VLAN (VLAN1).
The primary ethernet card (eth0) is connected to VLAN4 which allows for inter-connecting workstations as a localized LAN.
The main goal is to provide network isolation between the user space and management space.
I hope this helps some helpless souls.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
