Secure relays: An alternative approach to LANSEC

Abstract

Within the Basic Reference Model for Open Systems Interconnection (OSI), intermediate open systems provide relaying services for interconnecting subnetwork-connections, data-link connections and data-circuits. These systems are commonly known as protocol gateways, routers, brouters, bridges, repeaters and hubs. The primitive security services supplied by these devices are surfacing in security architectures as apparently cost effective elements. More robust and manageable relay security services will be introduced over the next few years. This paper reviews the various types of relays and why they are used in LANs, describes the relay security services and mechanisms that appear most appropriate and technically feasible. Alternative network security architectures are used to illustrate the role that secure repeaters and bridges can play in the LAN environment.