On Fri, 26 Jun 2020 13:13:51 +0200
"R.Wieser"  wrote:

> Tauno,
>
> > I already answered for that:
> >
> >   - get a virtual LAN capable switch
>
> I have one (with support for USB storage), and noticed that it doesn't
> make a difference on which port (read: vlan) I put my static-IP 'puter -
> it can reach the intarwebz every time.   I do not like that kind of fake
> seperation (I expect mis-matching IPs to be killed).

 Why ? The switch knows nothing about IP addresses all it knows is
ethernet frames and VLAN headers.

 In most smart switches there are separate controls for VLAN tagging
and port-port visibility, used properly they provide every bit as much
isolation as two NICs in the same host ... right up to the moment you lose
the switch config and suddenly everything is visible to everything else and
the VLANs have vanished.

 When you use two NICs and physical wires to different LAN switches
nothing ever forgets what is supposed to be connected to what. When it
really matters (like boundary routers) multiple NICs and physical
separation is the way to go - VLANs are great for models and test labs.

--
Steve O'Hara-Smith                          |   Directable Mirror Arrays
C:\>WIN                                     | A better way to focus the sun
The computer obeys and wins.                |    licences available see
You lose and Bill collects.                 |    http://www.sohara.org/

--- SoupGate-Win32 v1.05