Broadcast Storm Control - Mac-address flooding

Hi Friends,
We would like to configure broadcast storm control in our LAN to detect/avoid mac-address flooding. What is the best way and Can I know how to decide the raising threshold & falling threshold values ?.. Please suggest.
Regards,
S.Tamilvanan

Hello,
the best way is to monitor your network fir 5-6 days in order to find out the normal pattern of broadcast traffic. Then based on results form this monitoring process you can set the thresholds of broadcast traffic.

Similar Messages

  • Broadcast Storm Control

    Hi everybody,
    I’m suspected about broadcast storm control feature on switch. Could anyone please advice me?
    1. When the broadcast storm control is triggered, can normal data packets (not broadcast packets) pass the switch?
    2. If the network looping is occurred at unmanaged switch that doesn’t support spanning tree protocol and it connects to the managed switch that broadcast storm control is turned on, does it help this issue?
    Managed switch
    |
    |
    Unmanaged switch
    ||
    \/<--- network looping
    Thanks for advance,
    Nitass

    1. Unicast packets and multicast packets are not affected when u enable broadcast storm control. Multicast packets will be affected only if you enable multicast storm control on the switchport.
    2. I have no experience in a setup such as this but the behavior of the storm-control broadcast level command suggests that the switch port will drop all broadcasts headed through the port (in both directions) for a specified period of time.
    This however, still does not stop the source of the broadcast (i.e. the multiple links running to the un managed switch) so I would presume that the broadcasts might die down for a small period of time but they will resurface as the unmanaged switch would continue generating broadcast packets.
    Thus the port on the managed switch would come back to normal state, only to go back into broadcast storm control state and stop all broadcasts all over again.
    HTH
    Please rate posts that help.
    Regards
    Arvind

  • Access Control MAC address by Radius doesn't work

    Hi,
    How I can try if my Airport TimeCapsule can ping to my windows 2008 server with Radius?
    I snnifed the lan on Radius server and I only saw the broadcast messages of the airport.
    I have wpa personal with mac addres filter by radius, but doesn't works and I can access with any pc without check de mac.
    Anyone can help me please?
    Regards!!

    I am not so familiar with setup of wireless with Radius.. The Apple routers are not enterprise class but very much domestic.. so the enterprise level login seems to be problematic.
    Give us a couple of screenshots of the setup and that might help determine the issue.
    There is some info with help on setting it up here.
    Multiple airport Extremes and RADIUS
    Using windows server will of course make life that much harder.

  • SSID broadcast & MAC address filtering

    Have just replaced my elderly Belkin 54G router with a Homehub 3. My network still has some kit where WSP security won't work, so I've always disabled SSID broadcast and used MAC address filtering as well as the obvious password access control. Can't see how to do either of these with Homehub 3. Anyone found the solution? RPH

    downfall with BT homehub 3, there is no way so disable SSID Broadcasting this should be a feature to be added within the next firmware update
    Kind Regards, Bert

  • How do I find the Mac address for my 8900?

    I have a wireless network and can't connect to it at all. I have looked and typed in Blackberries search engine and came up with nothing, only answers are about a MAC computer, not what I am looking for.
    I have to add the Mac address to the wireless network in order to get past the firewall and this is not working for me, any ideas.
    Thank you,
    Animal
    Raising teenagers is like trying to nail
    jell-O to a tree!

    Found it,
    Overview
    To find the Media Access Control (MAC) address of a Wi-Fi® enabled BlackBerry smartphone, complete the following steps:
    Click Options.
    Click Status.
    The WLAN MAC field displays the MAC address for the BlackBerry smartphone.
    Raising teenagers is like trying to nail
    jell-O to a tree!

  • Does the ethernet adapter have a MAC address?

    Hi, I wonder if anyone can answer this one for me. I use programs under bootcamp that need a 'dongle' to prevent them being used on more than one machine at once. ProE for example uses a Pluscom ethernet adaptor that carries its own unique MAC address that the license is assigned to. My question is, is the Mac ethernet adapter the same? does it have a unique address - should be six pairs of numbers / letters.
    Just wondering if I could use one of the Mac adapters for this purpose.
    Thanks for any help

    Yes, the Apple Ethernet adapter will have a Media Access Control (MAC) address. In general, every network adapter (NIC) will have a unique MAC address. So if your program only works with a specifc MAC address, basically you can't install the program on a different computer without contacting the software vendor for a new installation code or whatever. (More specifically, you can't change the NIC. If you change computers, you need to keep the NIC.)
    In Windows, to get the MAC address, open a command prompt and type "IPCONFIG /ALL" (without the quotes.) The line that says "Physical Address" is the MAC address. Note that you may have more than one NIC. (Wired, Wi-Fi, etc.) So you need to be sure you get the appropriate MAC address for the desired NIC.

  • Dot1x disable mac-address aging

    Hi, all!
    I have configured dot1x on 3560 switches on my network. Switches have been configured to send MAC notification traps. I have set mac address-table aging time to 1800 sec. but only 802.1x not enabled switch send trap periodically.  It seem dot1x technilogy disable mac-address aging process.
    Can anybody explain it.

    You can control mac-address learning for a VLAN by using this switchport command on a trunk.
    Router(config-if)# switchport port-security maximum 3 vlan 102
    Or simply use this to allow only a certain number of mac's per access port.
    Router(config-if)# switchport port-security maximum 1
    Here is the command reference.
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios122sr/cr/srir_r/ir_s4sr.htm#wp1015189
    PS: you cannot totally stop mac learning as the valid values are from 1-4097 so you cant set it to zero and i believe you dont want to as well , since you have a layer2/3 environment.
    HTH-Cheers,
    Swaroop

  • MAC Address Limitations

    What is the issue with MAC Address Limitations on the SUPII?

    From: http://www.cisco.com/en/US/partner/products/hw/modules/ps2797/products_data_sheet09186a00800887fd.html
    Media Access Control (MAC) addresses-128K

  • MAC Address =ipv6?

    Hello. My system administrator needs the Media Access Control address for my PowerBook G4 so I can join their wireless network.
    When I checked the Apple documentation for how to find my Media Access Control (MAC) address (System Preferences>Network>Airport>TCP/IP), it seems to the long alpha-numeric series that that appears next to IPv6 Address. Is IPv6 the term Apple uses for MAC? Thanks.

    Hi--
    The MAC address is not the same as the IPv6 Address. The MAC address for Airport is actually what they call the "Airport ID". When you're looking at the Airport settings, you'll see 5 tabs: "AirPort", "TCP/IP", "PPoE", "AppleTalk", "Proxies". It's under the "AirPort" tab, the one to the left of "TCP/IP".
    charlie

  • Mac Address and Filter and Broadcast

    i have an Airport Extreme and want to:
    1 - Do not broadcast the wireless router name;
    2 - Filter by Mac Address the access to my wireless network;
    Thank You,
    Paulo.

    Welcome to the discussion area, PauloGuedes!
    1 - Do not broadcast the wireless router name;
    Open AirPort Utility - Click Manual Setup
    Click the Wireless tab below the row of icons
    Click Wireless Network Options
    Enter a check mark next to "Create a closed network"
    Click Done, then click Update
    2 - Filter by Mac Address the access to my wireless network;
    Open AirPort Utility - Click Manual Setup
    Click the Access Control tab
    MAC Access Control = Timed Access
    Click the + (plus) button at the bottom of the Access Control list to add the MAC address of each device that you want to allow to connect
    Click Update
    For more information, click on the Help menu at the top of the screen and enter the following in the search box: +Controlling access to your wireless network+. You can also reference pages 47-48 in the Apple AirPort Networks Guide.

  • Time Capsule Set Up - SSID Broadcast and MAC Address filtering

    How does one set up TC for MAC address filtering, and also to disable SSID broadcast? Apple store salesman assured me I could do both, but had no idea how. I can't find anything in the set up. I am used to looking at Linksys routers, so maybe it is buried somewhere.

    Selecting only "Timed Access" doesn't really fully activate MAC Address filtering. Even you have that enabled any wireless client can join the network (provided they know the password, if you have any and the SSID, if disabled). You also need to do this:
    In the AirPort Utility > Manual Setup > Access screen, the MAC address of the TC (defined as "default") is always listed. Select that and press "Edit" and on the next page, under ".... set the default network time limits" select No Access from the drop down list and then that will prevent computers that aren’t on the access control list from accessing the AirPort network. Is this what you wanted?
    This is applicable to the new TC (I didn't have a old one, so can't comment) and it's undocumented. It took me hours to figure out. Hope this helps!!!

  • MAC Address on Storm 2

    Hello,
    Please can you help,  all I need to do is find the MAC address on my Storm 2.   Any Ideas.
    Thanks for reading.
    Omletto.

    Take the back cover off, take the battery out and have a little look under there!
    Thats where I found mine on a 8900!!
    R.

  • MAC address access control default?

    I'm still using old graphite ABS, and all of them
    are using MAC address access control.
    Just by accident I connected a PB G4 with an
    internal extreme Airport card.
    The MAC address of this AirPort card wasn't in the
    access list of the ABS.
    It looks like ABS does only limit access through
    MAC addresses for 802.11b cards. I'll spend some time
    to double check this behaviour.
    Did anyone already see this default of access
    control?

    I'm pretty well aware of the limitations of any kind of
    MAC address control: in an hostile environment its a
    "straw house" or an "empty extinguisher".
    But in a collaborative and friendly environment I thought
    it may be a useful "frontier marker" between "friendly" and
    clearly "hostile" behaviors.
    This belief was foolish.

  • How to find mac address of a client computer in specified time and port in WIFI WCS Control system

    how to find mac address of a client computer in specified time and port in WIFI WCS Control system

    WCS record-keeping is very crude.  
    You'll get the time/date when the client authenticated.  You'll get the local inside address but you'll need the router to translate the outside IP address and the port.  
    You will need a proxy server to determine what sites did a wireless client goes.

  • MAC address and router access control

    My iPhone 3GS can only access the network (through my Netgear KWGR614 wireless router) when the router's MAC address access control is off. When I turn it on the phone is blocked. The MAC address I use is taken from the iPhone settings. It begins with 64. All other MAC addresses I have ever seen begins with 00. Is this MAC address correct? If it is right, could it be that the router can't handle this address?

    The first 3 bytes of the mac address identifies the manufacturer. For example, mine starts with 04:1e:64 which is Apple
    04-1E-64 (hex) Apple, Inc
    041E64 (base 16) Apple, Inc
    1 Infinite Loop
    Cupertino CA 95014
    UNITED STATES
    . if it starts with 64 then it belongs to
    64-4F-74 (hex) LENUS Co., Ltd.
    644F74 (base 16) LENUS Co., Ltd.
    18-5 Gwacheon-Dong
    Gwacheon Gyeonggi-Do 427-060
    KOREA, REPUBLIC OF
    check this list : http://standards.ieee.org/regauth/oui/index.shtml
    enter your first 3 numbers (first 3 pairs) from your wifi (settings/general/about) (don't use colons in the search)
    Not sure about the router as I never tried mac filtering. Each router will behave differently.
    Hope this helps.

Maybe you are looking for