To: P8021@nic.hep.net Subject: Re: REVISION TO SDE Date: Mon, 27 Nov 95 09:49:47 +0000 From: "Robin Tasker" In an area which is sufficiently complex that the requirement is not yet well understood it seems to be counter-productive to be looking at solutions now. This is particularly true when the solution suggested would result in two distinct areas (VLANs and security) being forever tied together each reliant on the other. This doesn't sound a good idea from any perspective. Like John Hart said far better to develop an independent way of providing tagging (if that is a requirement) and then if security is separately required by all means use 802.10 to do it. Keeping things simple (so far as VLANs can be simple) and, more particularly, distinct seems to be the best bet for solving the problem. This has the added benefit of ultimately providing a solution which "scales" across the range of technologies and is more likely to find general applicability. Robin