Re: [gentoo-user] [OT - More Router Advice] Cheap Router with decent/reliable VLAN support

[Volker Armin Hemmann]

On Saturday 28 May 2011 13:10:09 Tanstaafl wrote:
> After seeing an older thread asking about a router, I figured I'd ask my
> own question...
>
> I'm looking for a cheap but reliable router that has decent and SIMPLE
> way to add VLANs (I'm not a CISCO guy and don't want to have to become
> one)...
>
> Specifically, I want to have one VLAN that my wireless access points are
> plugged into, to provide ONLY internet access, and then a separate VLAN
> for my internal network...
>
> This is to protect my internal net from any potentially infected
> machines that are on the wireless access points (I routinely work on
> infected computers for friends/family, so, I need internet access, but
> want them isolated from my internal network).
>
> Anyone? Will one of the FLOSS builds for the cheap Cable/DSL routers
> support VLANs on the different built-in router ports (ie, Tomato, DD-WRT
> or OpenWRT)?
>
> Looking forward to any suggestions/ideas...

so - why don't you get a router that ONLY does the routing and a nice good 
switch where you can tag the vlans?

Because if someone takes over your router it does not matter that you have 
different vlans, they can access everything.

But if the router is on a different vlan than the internal network, they have 
to take over the switch - which will be in a vlan inaccessible from any active 
device - to get into the other vlans.