Prevent IPs unallocated IPs being used

Portal Home > Knowledgebase > Articles Database > Prevent IPs unallocated IPs being used

Posted by JasonF, 09-13-2007, 08:13 PM
Hi everyone. We have been using our L2 switches functionality to only allow IPs that are assigned to a certain server to be accessed for sometime. However, the latest version of this certain switch no longer includes this feature. Moreoever, it is quite a labor intensive task which is not good for "budget" servers. I am considering moving the rules to the main router, but am afraid of the scalability of this. Will it hold up with a few 1000 servers? How are other hosties going about this? I have heard that some just don't bother at all, which leaves their clients open to having their IPs duplicated by others on the same subnet. This can't be good.... Any advice / ideas would be greatly appreciated. Jason
Posted by vantage255, 09-13-2007, 09:30 PM
We are doing this on a pair of cisco 6500s with sup720-3BXLs and we are doing it for over 4,000 servers at the moment. I have had to adjust the vlan hold queue length and the SPD settings to get this to work without issue. I would say we are approaching the limit of this hardware in this functionality. Some of the newer linecards may help though (We are using 6408-GBIC cards).