Wake-on-Lan - UDP Broadcast allowed?

[teksaint]

Hi,

We want to use the remote desktop administration tool Altiris that utilizes wake-on-lan. Our network is split into several vlan'd subnets by a 6509 with a router module running IOS 12.0. UDP broadcasting is not allowed by default on the vlan interfaces. What is the best way to allow this one machine to send out UDP unicasts to the broadcast address and have them forwarded on to wake different machines on different subnets? We are concerned that allowing UDP broadcasts to be forwards will open us up for dos/smurf type attacks. Any suggestions?

Thanks!
Scott

 

[jgercken]

Hmm. a nice question.
What platform is the Altris server running? What about this: Trunk all the req'd vlans to the switch using dot1q tagging. Most OS's can support that now.

http://msdn.microsoft.com/library/d...ry/en-us/network/hh/network/204_802p_3ihz.asp

If you have some control over the UDP packet ports you may try using a number of static NAT translations to hop the vlan boundaries.

That's all I can think of off the bat. Great question.
-Jeff
----------------------------------------
Wasabi Pop Tarts! Write Kellogs today!