isolate servers?

I'm currently running a 192.168.1.x/255.255.255.0 network. I have 7-10
servers, should I isolate them to a different IP/subnet class? My switches
also support QoS and VLAN configurations. Is it best to just VLAN the
servers?

Any insight will be much appreciated. Thx.

Hello,

What makes you think you should isolate them ? What are their roles and
criticity ?
Is security really a concern ?

Ipsec would be a solution, but it's not "click & play"

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"cchcc" <(E-Mail Removed)> wrote in message
news:A28A1A41-774B-43CB-83FA-(E-Mail Removed)...
> I'm currently running a 192.168.1.x/255.255.255.0 network. I have 7-10
> servers, should I isolate them to a different IP/subnet class? My
> switches
> also support QoS and VLAN configurations. Is it best to just VLAN the
> servers?
>
> Any insight will be much appreciated. Thx.

Just FYI - MS has a Demo of Domain Isolation using IPSEC:
http://www.microsoft.com/downloads/d...DisplayLang=en

(Using Virtual PC or Virtual Server)
---
Jeffrey Randow
(E-Mail Removed)
Windows Networking MVP 2001-2006
http://www.networkblog.net



On Thu, 6 Dec 2007 08:14:48 +0100, "Mathieu CHATEAU"
<(E-Mail Removed)> wrote:

>Hello,
>
>What makes you think you should isolate them ? What are their roles and
>criticity ?
>Is security really a concern ?
>
>Ipsec would be a solution, but it's not "click & play"

No real security reasons, just assumed it was common practice. Thanks for
the info!

"Jeffrey Randow" wrote:

> Just FYI - MS has a Demo of Domain Isolation using IPSEC:
> http://www.microsoft.com/downloads/d...DisplayLang=en
>
> (Using Virtual PC or Virtual Server)
> ---
> Jeffrey Randow
> (E-Mail Removed)
> Windows Networking MVP 2001-2006
> http://www.networkblog.net
>
>
>
> On Thu, 6 Dec 2007 08:14:48 +0100, "Mathieu CHATEAU"
> <(E-Mail Removed)> wrote:
>
> >Hello,
> >
> >What makes you think you should isolate them ? What are their roles and
> >criticity ?
> >Is security really a concern ?
> >
> >Ipsec would be a solution, but it's not "click & play"
>