Tag: cisco

NetFlow Sampling on Cisco 6500 & 7600 series device

Both Cisco 6500 & 7600 serve as Core devices on a network to distribute large amount of traffic. The high volume of packets and packet rates of traffic on some device links which leads to more utilization of CPU and memory for performing traffic analysis in this scenario

Cisco Nexus 1000V deployment on ESX servers

The joint venture between Cisco and VMware brought a new highly scalable product for networkers is Cisco Nexsus 1000V. Cisco Nexus 1000V is a distributed virtual switch which is fully integrated within VMware Infrastructure. The Cisco Nexus 1000V has 2 different modules, they are ; Virtual Ethernet Module (VEM):- Each hypervisor contains one VEM module and it is a software solution that effectively performs following tasks: Advance Networking Security Traffic switching between virtual machines Routing between rest of the network Virtual Supervisor Module (VSM) :- The VSM is a standalone, physical or virtual module that performs the following functions for the Cisco Nexus 1000V system: Configuration Management Monitoring Integration with VMware In the Cisco Nexus 1000V, traffic is switched between virtual machines locally at each VEM instance level

Managing Risk: Rapidly responding to security alerts from network device vendors

Assume the scenario below: The Cisco Product Security Incident Response Team (PSIRT) publishes an important security alert Releases an advisory suggesting firmware upgrage of routers The security issue on hand is quite serious, urgent and cannot be ignored Impact assessment of devices suggests firmware upgrade of more than 1500 routers to be done immediately Network administrators working on production networks involving a large number of network devices such as switches, routers, firewalls and other devices would have often faced a situation similar to the one above. Effectively managing risk is an important aspect of network security. But, manual process for reacting to security alerts is not only time-consuming, but also error-prone