Traversing VLANs

xeonburn · Apprentice Joined: 21 Oct 2003 Posts: 172

My campus network is organized into multiple vlans for each building... right now I can only see the other computers within my own vlan. Is there some way I can see the other vlans?

jjasghar · Posted: Wed Sep 01, 2004 8:12 pm Post subject:

you'll have to figure out how the vlans are created. if they are cisco switches you'll have to convince your switch admin to allow you MAC addy to move around, or you port to move around. (there's a few ways) to be honest there isn't a client side way to really do it, mainly because it would defeat the whole purpose of a vlan.

i hope that answer your question

_________________
#include <LinuxUser #324070>
main()
{
printf("and i'm sorry my spellign sucs.");
}

nightblade · Posted: Wed Sep 01, 2004 8:27 pm Post subject:

Actually, there are some techniques that can be used, in several scenarios, to "cross" VLANs with malformed packets, such as "double encapsulation" (you use a double 802.1Q tag on your packet to induce switches to strip the outer one and forward your packet to the VLAN of the inner tag), and "802.1Q tagging", in which you send DTP traffic to the switch, making it believe that you are a switch too.

More details here:
http://www.giac.org/practical/GSEC/Chris_Hoffmann_GSEC.pdf

here:
http://www.windowsitlibrary.com/Content/1110/06/2.html

and also here:
http://www.cisco.com/application/pdf/en/us/guest/products/ps708/c1697/ccmigration_09186a008012ed31.pdf
_________________
In God we trust. All the others must provide a valid X.509 certificate