Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [best-practices]

For questions regarding industry methods or techniques that have shown superior results and are accepted as a de facto standard, or have been formally established.

1
vote
1answer
79 views

Is an ACL needed when using PAT (dynamic nat)?

We have a single router (4331) that connects to our ISP. We do PAT (dynamic nat) to give users internet access. Now typically we'd have an OUTSIDE-IN ACL that blocks traffic from the internet. My ...
1
vote
0answers
21 views

Should static IPs be set on the DNS/DHCP server, the host, or both? [closed]

Assuming a pretty regular business setup, when assigning static IPs for servers to use, should they be assigned on the DNS/DHCP server? Should they be configured individually on the hosts? Or should ...
2
votes
1answer
2k views

Which VPN Types/Protocols inherently support Multicast Traffic?

At my work, we build mobile networks from scratch for customers regularly. (Mobile Networks: think battery powered LTE router with wifi.) Since we build from scratch we can be vendor agnostic and ...
6
votes
1answer
3k views

Do i need to configure VLANS on my router/firewall or just the switch?

I finally took time to map my entire shitty network to understand exactly what the guy before me did, and i must admit i'm a little bit surprised even if i'm not a network expert... Just take a look ...
0
votes
1answer
175 views

Best practices for IP Flow monitoring [closed]

Current flow probes (using eg. IPFIX, netFlow v5/9, sFlow) are able to monitor flows defined at least by the tuple < source IP, source Port, IP protocol, destination IP, destination Port, source ...
6
votes
4answers
360 views

Building too large for ethernet runs

I'm pretty new to network design. I know enough to wire small buildings and such, but I'm puzzled as to how work this one out. A building I'm working on is an odd shape, and very large. ...
0
votes
1answer
53 views

Managing many L2TP VPNs?

We currently use many IPSec VPNs to connect to separate companies, but the VPNs are managed by a third party. We are interested in running these VPNs ourselves, using any method as long as it is IPSec....
2
votes
1answer
623 views

Default Gateway Best Practice

Recently I was troubleshooting a firewall issue on one of my servers and noticed that there was a LOT of ICMP redirect traffic being rejected (as it should be). But this got me thinking why I was ...
0
votes
1answer
91 views

Best internal(private) ip addressing practices for serial connections (IPv4)

i have the network topology in the diagram below. i was given the Internal address block of 100.1.0.0 for assigning IP addresses. Router 1 has a public ip address to the ISP router 2 i assigned it ...
0
votes
1answer
2k views

Switch Temperature - How hot it too hot!

I've got a few network switches running rather hot. The switches have an average internal temperature of 63°C. I'm aware that this is too hot for a network switches and we are pushing upper management ...
3
votes
2answers
255 views

Ethernet wiring job done wrong

I am a systems administrator by trade. Though I have done a few wiring jobs, this is not a task that I claim to be a professional at, either by training or experience. However, ethernet wiring isn't ...
5
votes
4answers
9k views

Best practice - Set static IP in device or router?

Pretty simple question. What is the industry best practice? In a small business which has computers which require static IP addresses is it better to set static IP addresses for devices on the ...
0
votes
1answer
2k views

General best practice for VLANs and domains

I recently took a job at a school. This is only my second position as an IT professional. My only experience with corporate networks is in a large school district at another school. They used VLANs to ...
2
votes
2answers
173 views

Building New Network and Need fast connection to central database between 20 wired and 20 wireless devices

I'm planning the network for my company's new office space. I'm not an expert so I'd like to present my plan and ask y'all nice folk to tell me if and where I'm making mistakes. Assumptions: Office ...
4
votes
5answers
701 views

Reason behind having a separate network for firewall interfaces?

Just wondering the theory or reason behind having the inside interface of a firewall on a different network than your primary network. I put together a quick drawing of what i'm talking about. What ...
4
votes
2answers
4k views

Ethernet keystone jack color conventions?

In a similar vein as this question... Are there any conventions or standards that recommend a color scheme for the colors of Ethernet keystone jacks?
9
votes
2answers
1k views

Which QoS classification should be applied to NTP?

Cisco's Enterprise QoS Solution Reference Network Design suggests classifying NTP as network management traffic and marking it as CS2: When addressing the QoS needs of Network Management traffic, ...
1
vote
1answer
2k views

Network engineers - What are some specific layer 2 network problems you have seen? [closed]

The networking industry has come to a general consensus that large layer 2 networks are more troublesome to build and maintain because of the inherent problems in the layer 2 switching. To name a few ...
4
votes
1answer
169 views

Internet exchange point

My edge router is connected to one transit ISP full route table and to IXP. I would like to know what is the best way to protect the connection to IXP from becoming unwilling transit ISP. For example ...
4
votes
1answer
1k views

VLANs: To Prune or not to Prune

I was pondering my network design today and came upon an idea that makes lots of sense to me, but I fear that it may be a terrible idea. I just don't have enough knowledge or experience to convince ...
1
vote
1answer
150 views

Best Authentication Practice

We are setting up a new network at work, when the building was comprised mostly of desktops, life was simple -static IPs for everyone. As the company moved to wireless laptops, they began keeping a ...
5
votes
2answers
20k views

Single Access Point vs. Multiple Access Points

Vague Question: If one access point can do the job adequately is there still an advantage to using more than one? Scenario: 1 access point at the center of your network required coverage area should ...
2
votes
1answer
7k views

hp procurve trunk port group operation vs active lacp port group

We recently purchased some HP Procurve 2920 switches and in setting them up I noticed multiple options for port groups. I wanted to see if anyone can clarify functional differences between setting up ...
2
votes
1answer
396 views

Cisco router dot1Q monitoring

How can I monitor on a Cisco router if dot1Q packets arrive on the trunk interface or if others arrive on that interface (like ISL, the old protocol of Cisco)? How can I do this and what is the best ...
19
votes
4answers
77k views

Cable Colors and Purpose

I've been doing some work with some big businesses and so far I've learned yellow is internet and blue is phone. Is this a standard or is this just a personal chose? Do colors mean different tasks?
11
votes
3answers
1k views

Do today's routers prevent fake IP headers?

I know people can modify the IP headers and change source IP address, but it should be simple for network devices to detect those messages. If they don't, why is it so hard? Does it add too much ...
16
votes
6answers
10k views

Best practice for the combination of HSRP and ECMP

The combination of ECMP (or other causes of asymmetric paths) and HSRP is broken by default in Cisco IOS; the default behaviour with this design floods unicast traffic excessively. What is the best-...
11
votes
4answers
4k views

/31 Point-to-point bitmasks

When is it appropriate to use a /31 network in production, and is using them considered good practice? On a point-to-point link, broadcasts shouldn't be required, so is there any compelling case for ...
14
votes
2answers
7k views

IPv4 Address Space Planning Best Practices

A recent question from Craig Constantine pertained to IPv6, but many people are not on the leading edge with IPv6 yet and are still responsible for new or improved IPv4 deployments. I would like to ...
8
votes
1answer
6k views

What factors drive L2 vs L3 in the access layer?

When designing an access layer, best practices today seem to indicate going toward a L3 design. I know the answers may be different depending on whether or not we talking about a DC design or ...
4
votes
4answers
912 views

OSPF LSA Performance Tuning

Does it make more sense to modify the 1800 second refresh rate, pacing timers, or all of the above in terms of network stability/best practices/etc to achieve quicker LSA maintenance? I am dealing ...
19
votes
3answers
6k views

What factors drive a Cisco IOS upgrade?

In order of preference/priority, what factors do you consider in driving an upgrade (or downgrade) with Cisco IOS? If no compelling factors exist, how long would you allow a particular version of IOS ...
11
votes
2answers
15k views

Preventing STP loops in etherchannels configurations

What is the best practice when configuring etherchannel on Cisco switches to prevent a STP loop/broadcast storm when etherchannel is mis-configured? I had an instance where 2 ports on a switch were ...
19
votes
7answers
7k views

Building new network and need 200+ wireless devices

I'm planning the network for my company's new office space. I'm not an expert so I'd like to present my plan and ask y'all nice folk to tell me if and where I'm making mistakes. Assumptions: Office ...
5
votes
1answer
6k views

How to disable 802.11b wireless clients on my WLAN?

Most wireless vendors recommend that unless there is a need to support them, 802.11b should be disabled on the network. How should I go about disabling 802.11b on my network?
6
votes
3answers
2k views

Monitoring best practice for thresholding errors on an interface?

When monitoring interface errors, what percentage of traffic should you set your 'critical' threshold to according to best practices and does it depend on the interface type (T1, Ethernet etc)? It ...
7
votes
6answers
6k views

What is the benefit of a Cisco “top of rack” design?

Aside from the obvious cabling mess you avoid (which I know for us as network engineers is great, but hard to use as an excuse when reasoning with someone who sees no point in it), what do you gain ...
14
votes
4answers
1k views

Is a wireless only network (for end users) a viable option?

We are constructing a new building, and our CIO is pushing for a solution where he doesn't have to spend the money on copper runs to all the user stations and wants to use wireless only for this ...
8
votes
1answer
1k views

Migrating from STP short mode to long mode?

It was decided recently to migrate a large campus network from the short mode STP costs (16-bit) to the long mode STP costs (32-bit). I have clearly found it documented that this needs to be a "...
10
votes
3answers
3k views

Selecting IPv6 Unique Local Addresses (ie, choosing least-sig 40 bits)

We started with fec0::/10 for site-local addresses -- but that is now deprecated. Instead, we now have fc00::/7 reserved, with fd00::/8 dedicated to /48 nets for Unique Local Addresses. What's the ...
89
votes
12answers
26k views

IPv6 address space layout best practices

I'm comfortable with IPv4 address space allocations. By which I mean: Given services to plan for, or an organization to network, I have a good grasp of how to plan IP address space usage. (or at least,...