Scribd
Upload
88 views

23-Storm Control

Storm control can limit broadcast, unicast, and multicast traffic on network ports. It uses rising and falling thresholds to block and restore traffic when packet rates are exceeded. Storm control can be configured based on bandwidth percentage, packets per second, or bits per second to prevent denial-of-service attacks by dropping traffic above the thresholds. It can also send syslog messages, SNMP traps, or shut down ports when limits are exceeded.

Uploaded by

Nakpane Sonhaye
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
88 views

23-Storm Control

Storm control can limit broadcast, unicast, and multicast traffic on network ports. It uses rising and falling thresholds to block and restore traffic when packet rates are exceeded. Storm control can be configured based on bandwidth percentage, packets per second, or bits per second to prevent denial-of-service attacks by dropping traffic above the thresholds. It can also send syslog messages, SNMP traps, or shut down ports when limits are exceeded.

Uploaded by

Nakpane Sonhaye
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Storm Control:

o Prevent large number of broadcast, Unicast & multicast packets are receive on port.
o Strom Control can limit broadcast, unicast and multicast traffic on per interface basic.
o By default, in every Cisco Switch storm control feature is disable and not working.
o In Strom Control, rising and falling thresholds use to block and then restore traffic.
o Storm Control can be turn off or send trap message to server if limit exceed on port.
o Storm Control prevent from Denial-of-Service (DOS) and Distributed (DOS) attack.
o Storm control can be configured based on bandwidth percentage & packets per second
o Storm Control can be also configured in Cisco Switches based on bits per second (bps).
o Storm Control can send Syslog Messages, SNMP traps, and shutdown the Switch port.

Basic Devices Configuration


R1(config)# interface fastEthernet 0/0
R1(config-if)#ip address 192.168.1.1 255.255.255.0
R1(config-if)#no shutdown
R2(config)# interface fastEthernet 0/0
R2(config-if)#ip address 192.168.1.2 255.255.255.0
R2(config-if)#no shutdown
SW(config)#interface FastEthernet 2/0
SW(config-if)#switchport mode access
SW(config-if)#switchport access vlan 1
SW(config)#interface FastEthernet 2/1
SW(config-if)#switchport mode access
SW(config-if)#switchport access vlan 1
SW(config)#interface vlan 1
SW(config-if)#ip address 192.168.1.10 255.255.255.0
SW(config-if)#no shutdown

Storm Control Configuration


SW(config)#interface FastEthernet2/0
SW(config-if)#storm-control broadcast level 40
SW(config-if)#storm-control multicast level bps 10m
SW(config-if)#storm-control broadcast level 80 60
SW(config-if)#storm-control unicast level pps 30m 20m
SW(config-if)#storm-control action trap
SW# show storm-control broadcast/ multicast
1 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@gmail.com , Mobile: 056 430 3717
Descriptions Commands
Move in interface mode SW(config)#interface FastEthernet0/1
Whenever broadcast traffic exceeds 40% of SW(config-if)#storm-control broadcast level 40
the interface bandwidth traffic will drop
Once multicast exceeds 10Mbps, traffic will SW(config-if)#storm-control multicast level bps
be dropped 10m
The rising threshold level 80 and the falling SW(config-if)#storm-control broadcast level 80
threshold is 60 percent to permit traffic 60
The rising threshold is 30Mbps & The falling SW(config-if)#storm-control unicast level pps
threshold is 20Mbps to permit traffic 30m 20m
Set the storm control action SW(config-if)#storm-control action trap
Verify storm control SW# show storm-control
Verify storm control broadcast SW# show storm-control broadcast/ multicast

R1 Basic Configuration
R1(config)#interface ethernet 0/0
R1(config-if)#ip address 1.1.1.1 255.0.0.0
R1(config-if)#no shutdown
R2 Basic Configuration
R2(config)#interface ethernet 0/0
R2(config-if)#ip address 1.1.1.2 255.0.0.0
R2(config-if)#no shutdown
Cisco NX Switch Configuration
CiscoNX(config)# interface ethernet 1/1
CiscoNX(config-if)# storm-control unicast level 0.01
CiscoNX(config-if)# storm-control multicast level 0.01
CiscoNX(config-if)# storm-control broadcast level 0.01
CiscoNX(config)# interface ethernet 1/2
CiscoNX(config-if)# storm-control unicast level 0.01
CiscoNX(config-if)# storm-control multicast level 0.01
CiscoNX(config-if)# storm-control broadcast level 0.01
CiscoNX# show interface ethernet 1/1 counters storm-control

2 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@gmail.com , Mobile: 056 430 3717

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy