Configuring Teaming - D-Link DGE-560SX User Manual

Also unlike BASP, the NDIS 6.0 driver only provides VLAN tagging of the outbound packet,
but does not provide filtering of incoming packets based on VLAN ID membership. This is
the default behavior of all miniport drivers. While the lack of filtering packets based on
VLAN membership may present a security issue, the following provides a risk assessment
based on this driver limitation for an IPv4 network:
A properly configured network that has multiple VLANs should maintain separate IP
segments for each VLAN. This is necessary since outbound traffic relies on the routing
table to identify which adapter (virtual or physical) to pass traffic through and does not
determine which adapter based on VLAN membership.
Since support for VLAN tagging on Broadcom's NDIS 6.0 driver is limited to transmit
(Tx) traffic only, there is a risk of inbound traffic (Rx) from a different VLAN being
passed up to the operating system. However, based on the premise of a properly
configured network above, the IP segmentation and/or the switch VLAN configuration
may provide additional filtration to limit the risk.
In a back-to-back connection scenario, two computers on the same IP segment may be
able to communicate regardless of their VLAN configuration since no filtration of VLAN
membership is occurring. However, this scenario assumes that the security may
already be breached since this connection type is not typical in a VLAN environment.
If the risk above is not desirable and filtering of VLAN ID membership is required, then
support through an intermediate driver would be necessary.

5.4 Configuring Teaming

The teaming function allows you to group any available network adapters together to function
as a team. Teaming is a method of creating a virtual NIC (a group of multiple adapters that
functions as a single adapter). The benefit of this approach is that it enables load balancing
and failover. Teaming is done through the Broadcom Advanced Server Program (BASP)
software.
Teaming can be accomplished by either of the following methods:
Using the Broadcom Teaming Wizard

Using Expert Mode

D-Link DGE-560SX User Guide
104