Re: SV: Increase number of available ip-addresses

Daniel Jokinen <[email protected]> Fri, 13 Sep 2013 18:34:31 +0200
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
To be perfectly honest we never use anything else than Cisco wireless enterprise solutions that consists of ap's with really high throughput, directly connected to a gigabit switch, and we always avoid 10/100's. Broadcast storm control is a must, I even think it's default in the wireless controller.

Whenever we've had a 10/100 switch somewhere in there it's just as Lee says, very easy to get floods.

Netgear recently released a series of copper 10GbE switches in a very affordable pricerange. I have still to try one, but if it delivers like promised it might very well be the next standard. Imagine 10 gigabit through the entire backbone network. That'd kick it up a notch am I right? :)


Daniel Jokinen



13 sep 2013 kl. 17:51 skrev "Graham Allan" <[email protected]>:

> On Fri, Sep 13, 2013 at 10:42:55AM -0500, Lee Sharp wrote:
>> On 09/13/2013 06:10 AM, Daniel Jokinen wrote:
>>>> Also, when you get a few hundred wireless users on one flat network, live will suck for most of them.
>>>
>>> I'd say having a few hundred users on the same network / subnet doesn't necessarily mean trouble. I have a few of these installations where I have up to about 500 users simultaneously on the same subnet and as long as you've got gigabit switches with high enough throughput it seems to work fine. At least it has for me. We even run airprint (that uses multicast) in these networks and it all works fast and fine.
>>>
>>> I would, however, draw the line somewhere just over 500. Broadcast traffic would probably seriously flood the network by then.
>>
>> I have seen broadcast storms cripple a network with as little as 100
>> users.  If there is one 10/100 switch somewhere, it will be totally
>> flooded, and the users behind it slammed.  (And what are APs?)
>
> I feel like it would be fairly safe if the backbone network is using
> decent gigabit switches which can enforce a broadcast limit.
>
> Graham
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>