No Detail Found!

Improving security in a virtual local area network

Author(s)
OSAHON OKORO Computer Science Department, University of Calabar, Nigeria
EMMANUEL AZOM EDIM Computer Science Department, University of Calabar, Nigeria
OFEM AJAH OFEM Computer Science Department, University of Calabar, Nigeria
EYO ESSIEN Computer Science Department, University of Calabar, Nigeria
IWARA OFEM OBONO Computer Science Department, University of Calabar, Nigeria
BUKIE PAUL TAWO Computer Science Department, University of Calabar, Nigeria
Abstract
Network services running in a native-VLAN infrastructure are vulnerable to security threats as a result of IP information exposure when connected with unmanageable switches. The aim of this study is to create VLANs with bounded network packets in order to reduce the security threats. The cisco hierarchical network design model was used to create separate VLANs, segment the network using IEEE 802.1q (dot1q) encapsulated sub-interfaces and assign ethernet ports (FastEthernet) to respective VLANs. Network packets and other data were captured and analyzed. The study found that on a flat-scale network infrastructure, broadcast packets destined for other vlans created in the switched network were visible to any terminal/node on the network infrastructure thereby exposing the classful IP information. In this study, system attack surface was reduced thereby protecting the VLAN-network. The study found that the 802.1q protocol added overhead to the vlan packets, reduced network efficiency and increased the network loss
Publication Details
Page(s) 3385-3396
DOI DOI not available
Published Journal: Journal of Theoretical and Applied Information Technology, Volume: 100, Issue: 10, Year: 2022

Request the full text from PASTIC

Keywords
network security, Network Performance, IEEE 802.1q protocol, VLAN Segmentation, Internet of Things(IoT)
0

Citations

2

Downloads

56

Views