Security and Dedicated NIC for Web Services Jail

Status
Not open for further replies.

herby

Dabbler
Joined
Oct 12, 2011
Messages
10
With improved support for Jails coming in FreeNAS 9 I am interested in running some services that would be exposed to the internet.

My router running TomatoUSB allows for the physical ethernet ports to be assigned to different VLANS. My VLANS are set up like this:

-VLAN1 - unassigned

-VLAN2 - subnet 192.168.A.XXX/28
Physical router ports 2-4 + WIFI​

-VLAN3 - subnet 192.168.B.XXX/30
Physical router port 1​

All the devices in my network are currently in VLAN2 using static IPs or DHCP from the router. VLAN3 will only be a dedicated NIC in my freenas box for a jail with ports forwarded to internet.

Is this a sound plan, overkill, or insecure?
 
Status
Not open for further replies.
Top