Selfhosted

60426 readers

207 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Basic networking/subnetting question. (lemmy.dbzer0.com)

submitted 1 year ago by marauding_gibberish142@lemmy.dbzer0.com to c/selfhosted@lemmy.world

65 comments fedilink hide all child comments

Sorry for being such a noob. My networking is not very strong, thought I'd ask the fine folks here.

Let's say I have a Linux box working as a router and a dumb switch (I.e. L2 only). I have 2 PCs that I would like to keep separated and not let them talk to each other.

Can I plug these two PCs into the switch, configure their interfaces with IPs from different subnets, and configure the relevant sub-interfaces and ACLs (to prevent inter-subnet communication through the router) on the Linux router?

What I'm asking is; do I really need VLANs? I do need to segregate networks but I do not trust the operating systems running on these switches which can do L3 routing.

If you have a better solution than what I described which can scale with the number of computers, please let me know. Unfortunately, networking below L3 is still fuzzy in my head.

Thanks!

you are viewing a single comment's thread
view the rest of the comments

[–] Pogogunner@sopuli.xyz 2 points 1 year ago* (last edited 1 year ago) (1 children)

It's been a long time since I actually used subnets, but IIRC you will need a physical interface for each network on the router regardless.

So let's say you set up your /24 network into 2x /25's, you will need an interface for the .0 network, and another for the .128 network

If you just have an interface for the switch, and another for the WAN connection, I don't think subnetting will work for what you're trying to do

[–] marauding_gibberish142@lemmy.dbzer0.com 0 points 1 year ago

Hmm, so virtual interfaces on the router won't work? I admit I'm a bit stumped, would you be able to give me an ELI5 on why this is the case? I will try and read up more, of course