LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 05-12-2015, 01:03 AM   #1
Ipolit
Member
 
Registered: Nov 2003
Location: Bulgaria
Distribution: Vector Linux, Morphix
Posts: 321

Rep: Reputation: 33
Securing dark fibre


Hello,
we have 2 offices which are connected with optic fibre. The connection is direct, not via Internet - dark fibre. We want all the computers from both offices to be in one LAN without routing and VPNs. But also if some one cuts the fibre and puts a media converter between, he will be able to access both ends of the fibre. For sure this will break the connection between offices, but still we think this is a security issue.
Is there relatively simple way to make sure that to both sides of the fibre are connected my machines, but not someone else?

Thank you in advance
 
Old 05-12-2015, 10:10 AM   #2
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Dark Fiber is the responsibility of the company you are leasing it from. There is no real way to ensure that someone doesn't cut the fiber. Should it drop for what ever reason you should contact the fiber provider and have them check the cable anyway.

As to is there a way to check this? You could get a light reading when you first light it up then you have a base line. Should anything be added the reading will change.
 
Old 05-12-2015, 11:36 AM   #3
MikeDeltaBrown
Member
 
Registered: Apr 2013
Location: Arlington, WA
Distribution: Slackware
Posts: 96

Rep: Reputation: 10
It sounds like you want a bridging VPN.

Take a look at this:
https://openvpn.net/index.php/open-s...-bridging.html
 
Old 05-12-2015, 08:57 PM   #4
jefro
Moderator
 
Registered: Mar 2008
Posts: 22,048

Rep: Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632
A vpn of some kind.

The endpoints may have a vpn in it already.
 
Old 05-15-2015, 01:06 AM   #5
Ipolit
Member
 
Registered: Nov 2003
Location: Bulgaria
Distribution: Vector Linux, Morphix
Posts: 321

Original Poster
Rep: Reputation: 33
We made it with L2TP IPSec connection and between L2TP interfaces we made EoIP tunnel. Works fine, but requires relatively powerful hardware for encrypting/decrypting the gigabite connection. We will use 9 core CPU Mikrotiks on both sides.
 
Old 05-15-2015, 02:35 PM   #6
jefro
Moderator
 
Registered: Mar 2008
Posts: 22,048

Rep: Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632Reputation: 3632
Thanks for the update and solution.
 
  


Reply

Tags
dark fibre security


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
difference between Fibre Channel Controller & Fibre Channel Adapter & HBA hahacc Linux - Hardware 1 02-06-2012 03:52 PM
man page text color is too dark ....(color is too dark) chxooi Linux - Software 8 08-10-2010 12:52 PM
Linux and Emulex fibre pradhanparas Linux - Software 3 06-08-2009 06:52 PM
Emulex Fibre ?? lensem Linux - Software 1 04-03-2009 03:51 PM
fibre channel question ronanio Linux - Enterprise 1 09-06-2005 10:40 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration