[27611] in resnet

home help back first fref pref prev next nref lref last post

Re: SOHO WiFi routers and residential networking

daemon@ATHENA.MIT.EDU (Ryan Dorman)
Wed May 2 22:34:54 2012

Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_D9D0C3D6A031FD41B81047D41FDC129D0BCD6FDAB5DCEX07bbbbnet_"
MIME-Version: 1.0
Message-ID:  <D9D0C3D6A031FD41B81047D41FDC129D0BCD6FDAB5@DCEX07.bbbb.net>
Date:         Wed, 2 May 2012 22:33:01 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Ryan Dorman <Ryan.Dorman@blackboard.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To:  <D0A43E8CC19B144398DFEC438095CB180E39ACD51B@EXCMS.msu.montana.edu>

--_000_D9D0C3D6A031FD41B81047D41FDC129D0BCD6FDAB5DCEX07bbbbnet_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

My questions, slightly re-phrased:

1.       For those of you who have a similar network, do you utilize either=
 Storm Control or flood blocking?  Why do you use one rather than the other=
?

a.       We used storm control in the dorms back in my day (ha ha ha)... it=
 was one of our bandaid procedures for sasser/blaster (hence why I did not =
describe it as the good old days).  It has advantage of dealing with multip=
le types of traffic, not just Unicast.

b.      This is a good article explaining the differences http://ericleahy.=
com/?p=3D611



2.       Do you use some other measure to deal with unicast packet floods?

a.       No


3.       Considering the physical environment (single wired jacks), what do=
 you feel is best practice when it comes to stopping unicast packet floods?

a.       There are a couple things I would look at here more from a design =
perspective then a flood protection angle

                                                               i.      How =
big are your subnets?  If they are huge (bigger then /24) you're going to s=
tart running up against broadcast issues.

                                                             ii.      Have =
you considered Private VLAN's?  Might help limit outages to a smaller group=
 of people

                                                            iii.      Do yo=
u limit the number of MAC addresses on a single port?


It surprises me that you are seeing unicast flooding like this.. in campus =
environments, and even in datacenters I have found that that is relatively =
rare.  Granted, I don't work in in reshalls anymore and the nature of that =
traffic is different then here in sell-out world :) but I'd be interested t=
o see traces of who is flooding who and from what process etc etc...

Ryan Dorman
Director, Enterprise Technology Strategy
Blackboard Inc.

O: 202.463.4860 x2618
M: 202.370.7889

From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Crowe, Sh=
eila
Sent: Tuesday, May 01, 2012 2:15 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: SOHO WiFi routers and residential networking

Thank you to Rand, Bruce and my hero, Adam Brock.

A bit more detailed information to help all the Cisco network guru types he=
lp me.  To recap...

We have 2 housing areas:  residence halls and family and graduate apartment=
s.  Both areas have Cisco 2960 layer 2 switches and Cisco 3750 fiber switch=
es.  In the residence halls we have one wired port per pillow and almost ub=
iquitous wireless coverage via Aruba APs and a single controller.  ResNet i=
s charged as part of the room and board in the residence halls.

We don't provide wireless coverage in family and graduate housing.  Our fam=
ily housing area was wired about 13 years ago and provided only one wired j=
ack per apartment; because of that, virtually every customer in family hous=
ing uses a soho wireless router.  Prior to our upgrade in June, we were usi=
ng 3Com fiber switches and Cisco 2960 layer 2 switches, When we upgraded th=
is section of our network (from 3Com fiber switches to Cisco 3750s), we imm=
ediately had a BIG problem with our network dropping in family housing; no =
problems in the res halls.  Backwards soho routers were not the problem bec=
ause we use DHCP snooping. Prior to the upgrade, our network ran like a sca=
lded cat in FGH.  It was ultimately decided that the problem was caused by =
the larger concentration of SOHO wireless routers in that area producing un=
icast packet floods.  Our team has discovered that Cisco switches have a fe=
ature called flood blocking that will block unicast and multicast floods at=
 the switchport level.  We are deploying this slowly.  I am told that it is=
 NOT Cisco's Storm Control.

My questions, slightly re-phrased:

1.       For those of you who have a similar network, do you utilize either=
 Storm Control or flood blocking?  Why do you use one rather than the other=
?


2.       Do you use some other measure to deal with unicast packet floods?


3.       Considering the physical environment (single wired jacks), what do=
 you feel is best practice when it comes to stopping unicast packet floods?


If you need more detail from me, please ask.  Any information or feedback i=
s appreciated.  If you prefer, please feel free to contact me off-list.

Thank you!
Sheila Crowe
MSU ResNet
sheila@montana.edu<mailto:sheila@montana.edu>


From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU]<mailto:[mailto:RESNET-=
L@LISTSERV.ND.EDU]> On Behalf Of Osborne, Bruce W
Sent: Tuesday, May 01, 2012 5:48 AM
To: RESNET-L@LISTSERV.ND.EDU<mailto:RESNET-L@LISTSERV.ND.EDU>
Subject: Re: SOHO WiFi routers and residential networking

That is only the port part of the configuration. There are some global sett=
ings too.

Also, your switch uplink or the switch port with the DHCP server needs to b=
e trusted for this to function correctly. The three processes used here are=
 "ARP inspection", "DHCO snooping", and "IP source guard". The features can=
 vary, depending on your model of switch.

Here is one example of Cisco's documentation. This one is for 3550 switches=
. http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/releas=
e/12.2_25_see/configuration/guide/swdhcp82.html


Bruce Osborne
Network Engineer
IT Network Services

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Hall, Rand [mailto:hallr@MERRIMACK.EDU]<mailto:[mailto:hallr@MERRIMAC=
K.EDU]>
Sent: Monday, April 30, 2012 12:39 PM
Subject: Re: SOHO WiFi routers and residential networking

Sheila,

Good luck blocking rogues. :-) Your best bet is to hold to your commitment =
to providing service to the jack. To that you can add some basic best pract=
ice suggestions to people who want to try using a wireless router or bridge=
 (enable encryption, negotiate channel selection with neighbors, etc).

Your network folks will want to turn on DHCP Snooping. Sometimes a resident=
 will plug a router in "backwards" and offer up DHCP leases to their neighb=
ors--not a pretty sight. If they are new to Cisco they might appreciate a s=
ample interface config for some ideas. Feel free to share:

 switchport access vlan xx
 switchport mode access
 switchport protected
 switchport port-security maximum 6
 switchport port-security
 switchport port-security aging time 1
 switchport port-security violation restrict
 switchport port-security aging type inactivity
 ip arp inspection limit rate 15 burst interval 10
 storm-control broadcast level pps 50 10
 storm-control multicast level pps 50 10
 spanning-tree portfast
 spanning-tree bpduguard enable
 ip verify source
 ip dhcp snooping limit rate 10


Rand

Rand P. Hall
Director, Network Services                 askIT!
Merrimack College
978-837-3532<tel:978-837-3532>
rand.hall@merrimack.edu<mailto:rand.hall@merrimack.edu>

If I had an hour to save the world, I would spend 59 minutes defining the p=
roblem and one minute finding solutions. - Einstein

On Fri, Apr 27, 2012 at 1:48 PM, Crowe, Sheila <sheila@montana.edu<mailto:s=
heila@montana.edu>> wrote:
In early March, I participated in a thread started by Jeannie Abney about w=
hat other schools' polices are for residents bringing personal wireless rou=
ters onto your network.  I added some questions pertaining to single family=
 apartments (vs. residence halls) and got some great feedback.  I would lik=
e to take it a step further and ask some more questions based on the type o=
f network that we have.

We have a Cisco network, a core at the origin of the commodity internet pip=
e, and a subnet for each of our buildings (really areas).  In the residence=
 halls we have a large Aruba wireless network installed so that every build=
ing is blanketed for secure wireless internet access.   In the residence ha=
lls, ResNet is charged out to every resident regardless of whether they use=
 it or not.

We do not provide ubiquitous wireless coverage in family housing because Re=
sNet is an opt-in service. Additionally, our family housing area was wired =
about 13 years ago and only provided one wired jack per apartment. As I'm s=
ure you can imagine, virtually every customer in family housing has a soho =
wireless router.  When we upgraded this section of our network (from 3Com s=
witches to Cisco), we immediately had a BIG problem with our network droppi=
ng constantly.  It was ultimately decided that it was the SOHO wireless rou=
ters causing the problem; namely, unicast packet floods through our Cisco s=
witch ports. Only recently it was discovered that Cisco switches have a fea=
ture that will block unicast and multicast floods.  We are deploying this s=
lowly.

Now for the questions. For those of you who have a similar network, do you =
employ this Cisco feature or do you simply block all "rogue" wireless conne=
ctions?  Or do you have another measure in place to deal with the unicast p=
acket floods?  Also, do your network engineers consider this a stopgap meas=
ure ("band-aid") to deal with residences where you do not offer WiFi?

Please do share all of the details about this issue (or non-issue) on your =
network as you know them.  And thanks a million!

Sheila Crowe
Montana State University ResNet
406.994.4230<tel:406.994.4230>
406.209.7243<tel:406.209.7243>

P.S. I'm hoping to see all of you at the 2012 Student Technology Conference=
 at Claremont Colleges!

___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___

___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________ You are subscribed to t=
he ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___

This email and any attachments may contain confidential and proprietary inf=
ormation of Blackboard that is for the sole use of the intended recipient. =
If you are not the intended recipient, disclosure, copying, re-distribution=
 or other use of any of this information is strictly prohibited. Please imm=
ediately notify the sender and delete this transmission if you received thi=
s email in error.

___________________________________________________
You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--_000_D9D0C3D6A031FD41B81047D41FDC129D0BCD6FDAB5DCEX07bbbbnet_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Cambria;
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Verdana;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Times-Roman;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p
	{mso-style-priority:99;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
span.EmailStyle21
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.EmailStyle22
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.EmailStyle23
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:565144337;
	mso-list-type:hybrid;
	mso-list-template-ids:1015193330 67698703 67698713 67698715 67698703 67698=
713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1
	{mso-list-id:1771655901;
	mso-list-type:hybrid;
	mso-list-template-ids:1015193330 67698703 67698713 67698715 67698703 67698=
713 67698715 67698703 67698713 67698715;}
@list l1:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l1:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><a name=3D"_MailEndCompose"><span style=3D"font-size=
:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497=
D">My questions, slightly re-phrased:
<o:p></o:p></span></a></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">1.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">For those of y=
ou who have a similar network, do you utilize either Storm Control or flood=
 blocking?&nbsp; Why do you use one rather than the other?
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.0in;text-indent:-.25in=
;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:red">We used storm cont=
rol in the dorms back in my day (ha ha ha)&#8230; it was one of our bandaid=
 procedures for sasser/blaster (hence why I did not describe it as the good=
 old days).&nbsp; It has advantage of dealing
 with multiple types of traffic, not just Unicast.<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.0in;text-indent:-.25in=
;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re">b.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:red">This is a good art=
icle explaining the differences
</span><a href=3D"http://ericleahy.com/?p=3D611"><span style=3D"color:red">=
http://ericleahy.com/?p=3D611</span></a><span style=3D"color:red"><o:p></o:=
p></span></p>
<p class=3D"MsoNormal" style=3D"margin-left:.75in"><span style=3D"color:#1F=
497D"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">2.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Do you use som=
e other measure to deal with unicast packet floods?&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.0in;text-indent:-.25in=
;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:red">No<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">3.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Considering th=
e physical environment (single wired jacks), what do you feel is best pract=
ice when it comes to stopping unicast packet floods?&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.0in;text-indent:-.25in=
;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re">a.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:red">There are a couple=
 things I would look at here more from a design perspective then a flood pr=
otection angle<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.5in;text-indent:-1.5in=
;mso-text-indent-alt:-9.0pt;mso-list:l1 level3 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re"><span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>i.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp; </span></span></span><![endif]><span style=3D"color:red=
">How big are your subnets?&nbsp; If they are huge (bigger then /24) you&#8=
217;re going to start running up against broadcast issues.<o:p></o:p></span=
></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.5in;text-indent:-1.5in=
;mso-text-indent-alt:-9.0pt;mso-list:l1 level3 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re"><span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>ii.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp; </span></span></span><![endif]><span style=3D"color:re=
d">Have you considered Private VLAN&#8217;s?&nbsp; Might help limit outages=
 to a smaller group of people<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.5in;text-indent:-1.5in=
;mso-text-indent-alt:-9.0pt;mso-list:l1 level3 lfo2">
<![if !supportLists]><span style=3D"color:red"><span style=3D"mso-list:Igno=
re"><span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span>iii.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp; </span></span></span><![endif]><span style=3D"color:r=
ed">Do you limit the number of MAC addresses on a single port?<o:p></o:p></=
span></p>
<p class=3D"MsoListParagraph" style=3D"margin-left:1.5in"><span style=3D"co=
lor:red"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">It surprises me that you =
are seeing unicast flooding like this.. in campus environments, and even in=
 datacenters I have found that that is relatively rare.&nbsp;
 Granted, I don&#8217;t work in in reshalls anymore and the nature of that =
traffic is different then here in sell-out world
</span><span style=3D"font-size:11.0pt;font-family:Wingdings;color:#1F497D"=
>J</span><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D"> but I&#8217;d be interested to see tra=
ces of who is flooding who and from what process etc etc&#8230;<o:p></o:p><=
/span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Ryan Dorman<o:p></o:p></s=
pan></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Director, Enterprise Tech=
nology Strategy<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Blackboard Inc.<o:p></o:p=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">O: 202.463.4860 x2618<o:p=
></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">M: 202.370.7889<o:p></o:p=
></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Resnet F=
orum [mailto:RESNET-L@LISTSERV.ND.EDU]
<b>On Behalf Of </b>Crowe, Sheila<br>
<b>Sent:</b> Tuesday, May 01, 2012 2:15 PM<br>
<b>To:</b> RESNET-L@LISTSERV.ND.EDU<br>
<b>Subject:</b> Re: SOHO WiFi routers and residential networking<o:p></o:p>=
</span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Thank you to Rand, Bruce =
and my hero, Adam Brock.&nbsp; &nbsp;&nbsp;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">A bit more detailed infor=
mation to help all the Cisco network guru types help me.&nbsp; To recap&#82=
30;<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">We have 2 housing areas:&=
nbsp; residence halls and family and graduate apartments.&nbsp; Both areas =
have Cisco 2960 layer 2 switches and Cisco 3750 fiber switches.&nbsp; In
 the residence halls we have one wired port per pillow and almost ubiquitou=
s wireless coverage via Aruba APs and a single controller.&nbsp; ResNet is =
charged as part of the room and board in the residence halls.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">We don&#8217;t provide wi=
reless coverage in family and graduate housing.&nbsp; Our family housing ar=
ea was wired about 13 years ago and provided only one wired jack per
 apartment; because of that, virtually every customer in family housing use=
s a soho wireless router.&nbsp; Prior to our upgrade in June, we were using=
 3Com fiber switches and Cisco 2960 layer 2 switches, When we upgraded this=
 section of our network (from 3Com fiber
 switches to Cisco 3750s), we immediately had a BIG problem with our networ=
k dropping in family housing; no problems in the res halls. &nbsp;Backwards=
 soho routers were not the problem because we use DHCP snooping. Prior to t=
he upgrade, our network ran like a scalded
 cat in FGH.&nbsp; It was ultimately decided that the problem was caused by=
 the larger concentration of SOHO wireless routers in that area producing u=
nicast packet floods.&nbsp; Our team has discovered that Cisco switches hav=
e a feature called flood blocking that will
 block unicast and multicast floods at the switchport level. &nbsp;We are d=
eploying this slowly. &nbsp;I am told that it is NOT Cisco&#8217;s Storm Co=
ntrol.</span><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot=
;,&quot;sans-serif&quot;">
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">My questions, slightly re=
-phrased:
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo3"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">1.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">For those of y=
ou who have a similar network, do you utilize either Storm Control or flood=
 blocking?&nbsp; Why do you use one rather than the other?
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo3"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">2.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Do you use som=
e other measure to deal with unicast packet floods?&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p>&nbsp;</o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo3"><![if !supportLists]><span style=3D"color:#1F497D"><span style=3D"m=
so-list:Ignore">3.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"color:#1F497D">Considering th=
e physical environment (single wired jacks), what do you feel is best pract=
ice when it comes to stopping unicast packet floods?&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">If you need more detail f=
rom me, please ask.&nbsp; Any information or feedback is appreciated.&nbsp;=
 If you prefer, please feel free to contact me off-list.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Thank you!
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Sheila Crowe<o:p></o:p></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">MSU ResNet<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><a href=3D"mailto:sheila@=
montana.edu">sheila@montana.edu</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Resnet F=
orum
<a href=3D"mailto:[mailto:RESNET-L@LISTSERV.ND.EDU]">[mailto:RESNET-L@LISTS=
ERV.ND.EDU]</a>
<b>On Behalf Of </b>Osborne, Bruce W<br>
<b>Sent:</b> Tuesday, May 01, 2012 5:48 AM<br>
<b>To:</b> <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU">RESNET-L@LISTSERV.ND=
.EDU</a><br>
<b>Subject:</b> Re: SOHO WiFi routers and residential networking<o:p></o:p>=
</span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">That is only the port par=
t of the configuration. There are some global settings too.<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Also, your switch uplink =
or the switch port with the DHCP server needs to be trusted for this to fun=
ction correctly. The three processes used here are &#8220;ARP
 inspection&#8221;, &#8220;DHCO snooping&#8221;, and &#8220;IP source guard=
&#8221;. The features can vary, depending on your model of switch.<o:p></o:=
p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Here is one example of Ci=
sco&#8217;s documentation. This one is for 3550 switches.
<a href=3D"http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/softwa=
re/release/12.2_25_see/configuration/guide/swdhcp82.html">
http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/=
12.2_25_see/configuration/guide/swdhcp82.html</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-s=
erif&quot;;color:#001B3E">Bruce Osborne</span></b><span style=3D"font-size:=
10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-serif&quot;;color:#001B3E=
"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><i><=
span style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-s=
erif&quot;;color:#001B3E">Network Engineer</span></i><span style=3D"font-si=
ze:10.0pt;font-family:&quot;Cambria&quot;,&quot;serif&quot;;color:#1F497D">=
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-s=
erif&quot;;color:#001B3E">IT Network Services</span></b><span style=3D"font=
-size:10.0pt;font-family:&quot;Cambria&quot;,&quot;serif&quot;;color:#1F497=
D"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><spa=
n style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-seri=
f&quot;;color:#001B3E">&nbsp;</span><span style=3D"font-size:10.0pt;font-fa=
mily:&quot;Cambria&quot;,&quot;serif&quot;;color:#1F497D"><o:p></o:p></span=
></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-s=
erif&quot;;color:#001B3E">(434) 592-4229</span></b><span style=3D"font-size=
:10.0pt;font-family:&quot;Cambria&quot;,&quot;serif&quot;;color:#1F497D"><o=
:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><spa=
n style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-seri=
f&quot;;color:#001B3E">&nbsp;</span><span style=3D"font-size:10.0pt;font-fa=
mily:&quot;Cambria&quot;,&quot;serif&quot;;color:#1F497D"><o:p></o:p></span=
></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><b><=
span style=3D"font-size:10.0pt;font-family:&quot;Verdana&quot;,&quot;sans-s=
erif&quot;;color:#AA0000">LIBERTY UNIVERSITY<o:p></o:p></span></b></p>
<p class=3D"MsoNormal" style=3D"margin-right:.5in;text-autospace:none"><i><=
span style=3D"font-size:11.0pt;font-family:Times-Roman;color:#AA0000">Train=
ing Champions for Christ since 1971<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> Hall, Ra=
nd
<a href=3D"mailto:[mailto:hallr@MERRIMACK.EDU]">[mailto:hallr@MERRIMACK.EDU=
]</a> <br>
<b>Sent:</b> Monday, April 30, 2012 12:39 PM<br>
<b>Subject:</b> Re: SOHO WiFi routers and residential networking<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Sheila,<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Good luck blocking rogues. :-) Your best bet is to h=
old to your commitment to providing service to the jack. To that you can ad=
d some basic best practice suggestions to people who want to try using a wi=
reless router or bridge (enable encryption,
 negotiate channel selection with neighbors, etc).<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Your network folks will want to turn on DHCP Snoopin=
g. Sometimes a resident will plug a router in &quot;backwards&quot; and off=
er up DHCP leases to their neighbors--not a pretty sight. If they are new t=
o Cisco they might appreciate a sample interface
 config for some ideas. Feel free to share:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport access vlan xx<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport mode access<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport protected<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport port-security maximum 6<o:p></o:p><=
/p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport port-security<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport port-security aging time 1<o:p></o:=
p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport port-security violation restrict<o:=
p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;switchport port-security aging type inactivity=
<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;ip arp inspection limit rate 15 burst interval=
 10<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;storm-control broadcast level pps 50 10<o:p></=
o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;storm-control multicast level pps 50 10<o:p></=
o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;spanning-tree portfast<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;spanning-tree bpduguard enable<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;ip verify source<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;ip dhcp snooping limit rate 10<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<o:p></o:p>=
</p>
</div>
<div>
<p class=3D"MsoNormal">Rand<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Rand P. Hall<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Director, Network Services&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; askI=
T!<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Merrimack College<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><a href=3D"tel:978-837-3532" target=3D"_blank">978-8=
37-3532</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><a href=3D"mailto:rand.hall@merrimack.edu" target=3D=
"_blank">rand.hall@merrimack.edu</a><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Ver=
dana&quot;,&quot;sans-serif&quot;;color:#555555">If I had an hour to save t=
he world, I would spend 59 minutes defining the problem and one minute find=
ing solutions. &#8211; Einstein</span>
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Fri, Apr 27, 2012 at 1:48 PM, Crowe, Sheila &lt;<=
a href=3D"mailto:sheila@montana.edu" target=3D"_blank">sheila@montana.edu</=
a>&gt; wrote:<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">In early March, I participated in a thread started by Jeannie Abne=
y about what other schools&#8217; polices are for residents bringing person=
al wireless routers onto your network.&nbsp; I
 added some questions pertaining to single family apartments (vs. residence=
 halls) and got some great feedback.&nbsp; I would like to take it a step f=
urther and ask some more questions based on the type of network that we hav=
e.<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">We have a Cisco network, a core at the origin of the commodity int=
ernet pipe, and a subnet for each of our buildings (really areas).&nbsp; In=
 the residence halls we have a large Aruba
 wireless network installed so that every building is blanketed for secure =
wireless internet access.&nbsp; &nbsp;In the residence halls, ResNet is cha=
rged out to every resident regardless of whether they use it or not.&nbsp;
<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">We do not provide ubiquitous wireless coverage in family housing b=
ecause ResNet is an opt-in service. Additionally, our family housing area w=
as wired about 13 years ago and only
 provided one wired jack per apartment. As I&#8217;m sure you can imagine, =
virtually every customer in family housing has a soho wireless router.&nbsp=
; When we upgraded this section of our network (from 3Com switches to Cisco=
), we immediately had a BIG problem with our
 network dropping constantly. &nbsp;It was ultimately decided that it was t=
he SOHO wireless routers causing the problem; namely, unicast packet floods=
 through our Cisco switch ports. Only recently it was discovered that Cisco=
 switches have a feature that will block
 unicast and multicast floods. &nbsp;We are deploying this slowly. &nbsp;<o=
:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">Now for the questions. For those of you who have a similar network=
, do you employ this Cisco feature or do you simply block all &#8220;rogue&=
#8221; wireless connections?&nbsp; Or do you have another
 measure in place to deal with the unicast packet floods?&nbsp; Also, do yo=
ur network engineers consider this a stopgap measure (&#8220;band-aid&#8221=
;) to deal with residences where you do not offer WiFi?&nbsp;
<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">Please do share all of the details about this issue (or non-issue)=
 on your network as you know them.&nbsp; And thanks a million!
<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">Sheila Crowe<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">Montana State University ResNet<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><a href=3D"tel:406.994.4230" target=3D"_blank">406.994.4230</a><o:=
p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><a href=3D"tel:406.209.7243" target=3D"_blank">406.209.7243</a><o:=
p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">P.S. I&#8217;m hoping to see all of you at the 2012 Student Techno=
logy Conference at Claremont Colleges!
<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
</div>
</div>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
<p class=3D"MsoNormal">___________________________________________________ =
You are subscribed to the ResNet-L mailing list.
<o:p></o:p></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<o:p></o:p></p>
</div>
<br>
<font face=3D"Arial" color=3D"Blue" size=3D"2">This email and any attachmen=
ts may contain confidential and proprietary information of Blackboard that =
is for the sole use of the intended recipient. If you are not the intended =
recipient, disclosure, copying, re-distribution
 or other use of any of this information is strictly prohibited. Please imm=
ediately notify the sender and delete this transmission if you received thi=
s email in error.<br>
</font>
</body>
</html>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

--_000_D9D0C3D6A031FD41B81047D41FDC129D0BCD6FDAB5DCEX07bbbbnet_--

home help back first fref pref prev next nref lref last post