[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 387
  • Last Modified:

Want all misconfigurations..

Hi,

 I am a network administrator.  I would like to write some administrator script which connects to each switch/router in my network and finds mis-configurations from them. I am using HPProCurve Switches in my network.

 So, I would like to know all possible mis-configurations in the switches those normally happens to the administrtors. Please let me know if you any good documents about switch mis-configurations list or possible mis-configurations you found.
 

 Thanks in advance. Once I finish my scripting I would like to provide it for free to network administrators community.

 Thanks a lot..

with Regards,
Kevin Mobe.
0
developer007
Asked:
developer007
  • 3
  • 2
2 Solutions
 
grbladesCommented:
Hi developer007,
The most common are things like speed/duplex mismatches. It is not something you can just search for as it depends how the equipment the other end of the cable is configured.
0
 
developer007Author Commented:
Hi all,

 Please come up with some more mis-configurations ...I will be more thankful to you..

with Regards,
Kevin.
0
 
grbladesCommented:
You cannot really detect a misconfiguration by simply looking at the configuration of a single piece of equipment. You could have a database of how diffeent equipment connects together and compare the corresponding port configurations either end of a cable to make sure they are the same but this will be more complicated to write than just a simple script.

Have a look at RANCID as it may do what you want :- http://www.shrubbery.net/rancid/
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
developer007Author Commented:
Hi,

 Thanks for the information.

 Thats right. I can't just find in checking one device configuration file. I must need to check all corresponding device information which are interconnected. even I want to check like that.

 I am gonna to write a script in PERL with SNMP configuration and telnet. So, If I have all the mis-configurations in place then I can start writing the script file.

 Please let me know if you know any possible mis-configurations.

With Regards,
Kevin.
0
 
grbladesCommented:
native vlan mismatches
permitted vlans on trunk port mismatches
trunk type mismatch
spanning tree portfast (fast start) enabled on switch-switch links
spanning tree disabled on some switches but enabled on others (vlan independant)
0
 
syn_ack_finCommented:
If you are looking for errors on the switch like port mismatches etc. a syslog will do the trick and log all the errors. If you are looking for switch design and implementation issues, I don't see how you could write a script for it or I'd be out of a job. =) Some basic things to look for:

1) All the servers on one VLAN. I never understood why people configure a seperate VLAN for servers when everyone needs to connect to them and routing is slower than switching.
2) Not utilizing etherchannel ports (Cisco) or other means to bind multiple ports to a workgroup switch for increased bandwidth.
3) Not implementing spanning-tree and redundant paths to core switches for redundancy.
4) Stacking switches like hubs instead of creating a spoke like configuration.

Just some to look at. Good Luck.
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now