List Info

Thread: Q&A: Storm Control 'Best Practices,' Network Security Apps, More




Q&A: Storm Control 'Best Practices,' Network Security Apps, More
country flaguser name
United States
2007-03-06 14:13:20
TCPmag.com
http://tcpmag.com/
http://tcpmag.com/rss
March 6, 2007
Editor: Gladys Rama (grama1105media.com)

------------------------------------------------------------
------------
THIS ISSUE SPONSORED BY:

- Live, Online Expert-led Training from Thomson NETg!
http://in
fo.101com.com/default.asp?id=36166

- FREE Cisco Poster released by World Data Products.
http://in
fo.101com.com/default.asp?id=35784

- Multiple Virus Engines Improve Email Security: Free Paper
http://in
fo.101com.com/default.asp?id=36155
------------------------------------------------------------
------------

IN THIS ISSUE OF TCPmag.com:

1. Q&A: Storm Control 'Best Practices'
2. What's New on TCPMag.com 
3. Interesting Employment in New York, Florida, Arizona

************************************************************
************
SPONSOR: Special Offer: online, expert-led CVOICE training
************************************************************
************
Take the first step on your Cisco Voice Professional
certification track
and bring a friend for half price! In this online class
taught by two 
expert CCVP voice instructors you’ll gain valuable hands-on
IP Telephony
skills and knowledge to advance your career and
certification goals.

Sign up with a friend today and save at: 
http://i
nfo.101com.com/default.aspx?id=36166
************************************************************
************

1. Q&A: Storm Control 'Best Practices'

Send your toughest Cisco technical questions to editortcpmag.com 
with the subject line "Attn: Scott."

Scott,

I read your answer in "Configuring Storm Control"

(http://tinyurl.com/yu3lej) and now I have question for you: What 
is your recommendation for configuring storm control -- what
level 
of broadcast, multicast and unicast do you recommend to
set?

-- Sergey 

------------------------------

Sergey,

That's kind of a tricky question! And, honestly, that goes
into 
design rules and perceived "best practices"
(notice I used that 
phrase in quotes).

The hard part about establishing guidelines like this is
that what 
works beautifully for one person and their network would be
a really 
bad decision under someone else's circumstances.

A long time ago, some perceived rules of broadcast levels
shouldn't 
top 20 percent of a network's traffic were set. This is
definitely a 
good rule to go with, but if you simply put storm control on
your 
switches as a way to "fix" things, you may end up
with more issues 
than you planned.

My reasoning here is that, as I'm sure we all know, certain
popular 
operating systems do a significant amount of broadcasting
(whether 
all 255s or a subnet-level broadcast doesn't matter). These
broadcasts 
are how a good amount of internetworking and discovery
operations 
actually take place.

There are settings within the operating system that we can
do to 
change the behavior and yet control the operations. If we
simply 
killed the broadcasts, we may end up with intermittent
reachability 
of machines and/or services within the OS guidelines. That
would 
irritate just a few people.

With multicast traffic, if you don't have any running, no
matter 
what level you pick, you may never see an issue one way or
the 
other. For unicast traffic -- well, um, you should probably
have a 
good reason to implement filters like this, and I'd suggest

different policing techniques depending on what you were
attempting 
to accomplish.

The bottom line is that we can come up with numbers all the
time 
that may appear to be "good" or "best
practices" but unless your 
network is a cookie cutter that lines up with everyone
else's 
standards, then it may not help you.

The best thing you can do is to understand what IS happening
on 
your network (on each VLAN, at Layer 2 and at Layer 3). Then

understand what you WANT to happen on your network. Then
design 
your network accordingly. Let the business needs drive your

networking, and you are guaranteed to make more people
happier 
more often.

You may be using multiple tools such as a sniffer (network
analyzer 
like Ethereal or Wireshark, Network General or others), a
separate 
network analysis device (like Fluke's EtherScope systems) or

something built in to many routers like NBAR protocol
discovery.

I wish you the best of luck in establishing a set of best
practices 
for your own situations and networking needs!

Hope that helps,

-- Scott

Scott Morris, quadruple CCIE, JNCIE and all-around
Uber-Geek, can often 
be seen traveling around the world consulting and delivering
CCIE 
training. He has recently stepped up as VP of Curriculum
Development 
for IPexpert and will oversee a new consulting practice. For
more 
information on him check out http://www.ipexpert.com.


Send your questions for this column to editortcpmag.com 
with the subject line "Attn: Scott."

Miss a Q&A? Go online to http://tcpmag.com/qanda/

To comment on this Q&A, go to:

http://tcpmag.com/qanda/article.asp?EditorialsID=371

************************************************************
************
SPONSOR: FREE Cisco Poster released by World Data Products.
************************************************************
************
Easily identify your networking needs with World Data
Products' poster 
of Cisco routers and switches. This quick reference poster
provides 
information on model capacities, interface cards and
available features;
a great resource for product selection and network
planning.

Click here: http://i
nfo.101com.com/default.aspx?id=35784
************************************************************
************

2. What's New on TCPmag.com

NEWS: "The Security Appliances Are Coming!"
The appliances are coming! The appliances are coming! Maybe
-- or not 
quite: That's the milquetoastean conclusion of new research
from market 
watcher Infonetics, which found that sales of network
security 
appliances and software increased 15 percent between 2005
and 2006, 
cresting to $4.5 billion. 

http://tcpmag.com/news/article.asp?editorialsid=1175

NEWS: "That's a Big Pipe: 40 Gbps, 100 Gbps Techs on
the Horizon"
Many of you are probably already comfortable with your 10
Gbps pipes, 
but 40 Gbps is just on the horizon -- and 100 Gbps is just
beyond that. 

http://tcpmag.com/news/article.asp?editorialsid=1176

RSS FEEDS ON TCPMAG.COM
If you're running an RSS client, then consider signing up
for feeds
from TCPmag.com. You'll automatically be notified when new
content
is posted. Learn more here: http://tcpmag.com/rss/

------------------------------------------------------------
------------

3. Interesting Employment in New York, Florida, Arizona

Job postings courtesy of Monster.com.

VERIZON, CONVERGENCE ENGINEER 
Position Type: Full time
Location: New York, N.Y.
Salary: Not specified
Experience: At least 5 years
Desired Education: Bachelor's degree, CCIE, MCSE

The convergence engineer will work with the Verizon Business
Corporate
and Gov Ed accounts to develop, price and assist in the sale
of voice
network and CPE solutions. Must have a thorough knowledge of
voice
networking technologies, WAN, IPTelephony and Unix/Linux.
Extensive 
travel required.

To learn more, visit:

http://jobview.monster.com/getjob.asp?JobID=54582329

-----------------------------

BOND MEDICAL, IT MANAGER 
Position Type: Full time
Location: Tampa, Fla.
Salary: Not specified
Experience: 2 to 5 years
Desired Education: Bachelor's degree, MCSE, CCNA

Responsibilities include managing the technical customer
service staff,
performing department reviews and maintaining firewall
services, VoIP 
phone systems and a variety of Microsoft products (Windows
2003 
network, Exchange 2003, Active Directory, etc.). Some travel
may 
be required.

To learn more, visit:

http://jobview.monster.com/getjob.asp?JobID=54569340

-----------------------------

DESERT SCHOOLS FEDERAL CREDIT UNION, ENGINEER II
Position Type: Full time
Location: Phoenix, Ariz.
Salary: Not specified
Experience: 2 to 5 years
Desired Education: Bachelor's degree, MCP, MCSE, CCNA

Responsibilities will include implementing and
troubleshooting computer
network systems, as well as voice and data communications.
Candidate 
will also act as a liason to vendors, project managers and
department
heads. Must have knowledge of Active Directory, Exchange,
LAN/WAN 
technologies, TCP/IP and Cisco routers and switches.

To learn more, visit:

http://jobview.monster.com/getjob.asp?JobID=53152833

************************************************************
************
SPONSOR: Keep Your Company Out of Trouble with Multiple
Virus Engines
************************************************************
************
Learn why having multiple anti-virus scanners at the mail
server level 
substantially reduces the chance of virus infection and
explore ways 
this can be achieved. 

Read this FREE paper today.
http://in
fo.101com.com/default.asp?id=36155
************************************************************
************

************************************************************
************
CALENDAR
************************************************************
************
VSLive! | March 25-29, 2007 | San Francisco, CA

http://www.ftponline.com/conferences/vslive/2007/sf/

TechMentor Conference | March 26-30, 2007 | Orlando, FL
http://TechMentorEvents.c
om
************************************************************
************

FREE MAGAZINE OFFERS
Subscribe now to our free monthly magazines:

NEW! Redmond Developer News magazine
https://subscribe.1105pubs.com/sub/RW?WP=NEW
FREE&TC=1&PC=MK5

Redmond Channel Partner magazine
https://subscribe.1105pubs.com/sub/RN?WP=NE
WFREE&TC=1&P=OCP01

Redmond magazine
https://subscribe.1105pubs.com/sub/MI?WP=NEWF
REE&TC=1&P=TCP

Sign up for all our related FREE newsletters today.  
https://newsletters.1105pubs.com/nl/RMG.do?NL=49
00&PC=TCPNLF

Encourage your peers to excel! 
Please forward this newsletter to any IT professional. 

************************************************************
************

To learn how you can sponsor a future edition of this
newsletter,
contact Matt Morollo at (508) 532-1418 or 
e-mail mmorollo1105media.com

Contact the editorial staff at editortcpmag.com

Newsletter problems: RED1105service.com  

TCPmag.com
Redmond Media Group
16261 Laguna Canyon Road, Suite 130
Irvine, CA 92618-3608
Phone 949-265-1520

************************************************************
************
UNSUBSCRIBE OR CHANGE E-MAIL ADDRESS:

https://newsletters.1105pubs.com/nl/RMGf.do?e=nesstosharedlog.com&NL=4900
************************************************************
************

To review our Privacy Policy, visit our Web site at 
http://www.1105
media.com/privacy.aspx

Copyright 2007 1105 Media Inc. TCPmag.com News may 
only be redistributed in its unedited form. Written
permission 
from the editor must be obtained to reprint the information

contained within this newsletter. Contact: editortcpmag.com               

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )