I need some thoughts from everyone.
I work in a lab environment and we are tasked with shutting down the entire lab (essentially) for several reasons but mostly, to a), gather information on all edge devices, and b), save on power for now and in the future and get all edge devices that are not in use unracked and decommed.
This is a very large lab, over 100,000 edge devices nationwide. We had our first meeting about it and we came up with two plausible solutions. Keep in mind i'm keeping this brief and this is scheduled to go in action late 1st quarter.
We have a site up to register your edge device, which states that you are the owner of it, this is the IP, please don't shutdown.
We came up with these two solutions.
1) Write a script and shut down all edge ports across the lab (again, keeping this brief, there's a TON of work that goes into this like getting all loopbacks, mac table mappings, etc)
2) Create an access list permitting the IP's that are registered in the site above, and then blocking the entire ULA private space (10.0.0.0/8) and deploy that ACL on all edge devices
My question to you all is, is there potentially another solution that we are overlooking? Again, we literally just had a mini brainstorming about it so this is in its infancy stage. A lot more meetings and brainstorming to come.
Thoughts?