Storm Control Configuration on Cisco 3850 Stack Switches

[SANTHOSHKUMAR SARAVANAN]

Access Layer 3850-48P which is are stacked switches is connected to Core Switch WS-C6509, all these devices are in factory environment connecting to multiple IP devices. We are receiving huge storm packet which of broadcast & unknown, which brings down entire infrastructure. 

Need to configure Storm control on all these access switches, want to streamline the device configuration, to avoid from these outage.

[balaji.bandi]

how is these Access switch Stacks connected to 6509, L2 or L3 ? Do you have high level network diagram ?

what is the exiting configuration on both (can you please post the configuration)

[SANTHOSHKUMAR SARAVANAN]

Access switches are connected to core switch as layer2. All SVI are configured in 6509. 

[balaji.bandi]

As suggest other post you can refer that documents they are very useful information.

If the Strom happening and it bring whole network.  for Long plan, if you have many stacks, move them to L3 connectivity between Core and Access Layer, so broadcast domain stay locally, which not effect other building or other areas. This way it is easy to identify the issues and fix also can be applied after learning lessons.

[Mark Malone]

if your having storms , you need to control it as youve seen and you also need to identify why there are storms
where its coming from what devices or applications are causing it , could be anything from dodgy nic . application software or scanning the network too can cause it

to implement it this is a quick 3850 guide for SC

https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011100.html

Good explanation
https://www.netcraftsmen.com/understanding-cisco-traffic-storm-control/


always do it on a test switch first see how it reacts before rolling it out on the all the switches