10-03-2010 06:54 AM - edited 03-04-2019 09:58 AM
Hello Dears,
How i can tune my Network i have 2 Cisco 6500 Catalyst Switches on Core Layer and Catalyst 3550 Access switches in my Network. I have completed with spanning tree,port fast,root guard,bpdu-guard, I want to do more tuning with additonal features that will help to Run my Network smooth.
10-03-2010 11:27 PM
HI Estela ,
You can configure VSS on the core if u have 720-10g sup and MEC to ur 3550 switches. This increases the efficiency and availability to great extent.
Sumit
10-04-2010 01:02 AM
HI Estela ,
You can also use port security feaure on your access switches for tight security. This will restrict no. of mac-address learned from user and
enhance your network for security.
also configure errdisabble recovery options so that port can be unblocked after some time .
Regards
Mahesh
10-04-2010 05:13 AM
Hello Dear's,
Thanks Sumit,
The SUP is not VSS enabled ,
Dear Mahesh ,
I have already done with port-seucrity.
Any more hints from Experts. Ur help will be appreciated.
10-04-2010 05:18 AM
Estela
This is a very openended question. It really depends on what you mean by network running smoothly. Is it not running smoothly at the moment ?
Also without more details of the topology and configuraton it's difficult to know exactly what to suggest. Are you running L2 uplinks from your access switches ? Are you running RSTP or PVST+. Have you "load-balanced" the uplinks so that odd vlans have STP root and HSRP active on one core switch and even vlans have STP root and HSRP active on the other switch ?
Jon
10-07-2010 01:01 AM
Dear Jon,
Question:This is a very openended question. It really depends on what you mean by network running smoothly. Is it not running smoothly at the moment ?
Answer: IT is running smoothly, But the customer want to do health check of the Netowrk How can i do it,though the setup is very professional done,as per ur statements below.
HOW TO DO A HEALTH CHECK OF NETWORK PLS ADVICE,
Are you running L2 uplinks from your access switches ?
Yes
Are you running RSTP or PVST+
RSTP
Have you "load-balanced" the uplinks so that odd vlans have STP root and HSRP active on one core switch and even vlans have STP root and HSRP active on the other switch ?
I have a FWSM,so i dont thing i need a HSRP here.Core_1 is STP root and Core-2 is in secondary I cannot load-balance because only 1 FWSM is active and the other is in standby.
Please suggest whatelse can be done.
10-07-2010 02:11 PM
Hello Dear's,
Please advice, for the above mail,
What ONE CAN DO TO DO NETWORK HEALTH CHECK.
Thanks,
10-07-2010 02:37 PM
Estela
Perhaps it would help if you asked the customer what they meant by a health check. If the network is running smoothly then what do they want audited ?
It could be they are looking at the security of the network in which case there are penetration testing firms you can hire that will run security assessments on your network.
It could be that they are looking to see how redundant the network is ie. what happens if an FWSM fails or a supervisor fails etc. You can walk them through the design to show them all the redundant links etc.. but the only way you can really test it is to fail certain device(s), modules etc. and see what happens but obviously this has to be done in a scheduled outage and be prepared for it not to work as smoothly as the design suggests it should. Perhaps also they want to look at any single points of failure (if any) in the network and the impact this could have on the business.
There is no one answer to your question which i suspect is why people are not responding that much. It is too vague to answer without some idea of what you are auditing for.
Jon
10-07-2010 03:19 PM
Thanks Jon,
U r exactly correct this is what i told to customer for Health Check but he is not accepting, Anyway can u suggest me whatelse i can do for tuning (additional features) in my network apart from the above mail.
From switching and Security point of view.
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide