Network-Switch Official

Home
Hong Kong
Hong Kong
Network-Switch Official

Website

Global IT Networking Hardware Distributor
Cisco | Huawei | Ruijie | H3C | NSComm etc.

Switches • Routers • Firewalls & NPB • Wireless APs & Bridges • Optical Transceivers • Fiber Cables
CCIE/HCIE Certified Engineer Support
💬 Chat Now for Instant Quotes Selling Authentic Cisco/Huawei/Ruijie Network Equipments with deal pricing.

03/11/2026

No ticket, no problem

03/11/2026

Before anyone buys servers, switches or storage, the first question should be simple: what is the AI or infrastructure project actually trying to do?

A private AI assistant, RAG search tool, compact data room and GPU training project are not the same thing.

This is the biggest reason good projects start with use cases, not hardware lists.

Our new page goes live soon and will focus on this planning approach.

02/11/2026

Oh hey, I haven't seen your ticket yet, where is it?

02/11/2026

A new infrastructure page is coming soon.

We are preparing content around private AI, compact server rooms, data center switching, storage, security and project-ready BOM review.

If your team is exploring internal AI agents, local inference or a server-room upgrade, now is the right time to start organizing the project inputs.

Launching soon: a dedicated page for private AI and data center infrastructure planning.

Follow this week’s updates and get ready for launch.

31/10/2026

Stop yelling and check your previous request of remote support!

31/10/2026

A "black-hole VLAN" isn't automatically isolated.

Two unknown devices in the same active VLAN may still communicate, even without DHCP or a gateway.

For unused ports, consider shutdown.

For onboarding ports, use verified access controls.

VLAN names don't enforce security. Forwarding policies do.

https://network-switch.com/blogs/labs/unused-switch-port-vlan1-quarantine-security

31/10/2026

Unused switch ports: Shutdown, Parking VLAN or Quarantine?

Leaving unused ports enabled with default settings can create unnecessary security exposure.

But simply moving them to a "black-hole VLAN" doesn't guarantee isolation.

Two devices in the same active VLAN may still communicate directly, even without DHCP or a gateway.

Before choosing a policy:

Disable ports with no approved purpose.

Verify Layer 2 isolation in parking VLANs.

Use 802.1X/NAC for controlled onboarding where appropriate.

Check actual port behavior after configuration resets.

The real issue isn't VLAN 1. It's unintended access.

Read the full guide:

https://network-switch.com/blogs/labs/unused-switch-port-vlan1-quarantine-security

30/10/2026

Migrating to a new firewall? Should you clean up all the old policies at the same time?

Not necessarily.

Changing the firewall vendor, NAT rules, VLAN segmentation and security policies together can make troubleshooting much harder.

A safer approach:

Capture the existing traffic and policy baseline.

Preserve required business connectivity.

Remove confirmed unused objects where justified.

Document intentional security changes.

Test both allowed and blocked traffic.

Remember: A zero-hit firewall rule is not automatically an obsolete rule.

The goal is functional equivalence, not copying every old configuration line.

Read the full article:

https://network-switch.com/blogs/labs/firewall-migration-policy-cleanup-baseline

30/10/2026

Replacing a firewall and redesigning every policy at the same time?

Be careful.

If an application breaks afterward, was it NAT, routing, VLAN segmentation or the new security policy?

Preserve the baseline. Document intentional changes. Test before and after.

Also, zero policy hits do not automatically mean the rule is safe to delete.

https://network-switch.com/blogs/labs/firewall-migration-policy-cleanup-baseline

30/10/2026

I told you not to do that!

Address

Nos 1-17 SAI LAU KOK Road
Hong Kong
999077

Website

https://network-switch.com/

Alerts

Be the first to know and let us send you an email when Network-Switch Official posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.