[c-nsp] Broadcast storm Cisco Solution

[Giles Coochey]

On 26/07/2012 15:52, Rich Trinkle wrote:
> Greeting fellow Cisconians.  I'm hoping someone can point me in the right direction.  Is there a way for my Cisco 7206 to detect if one of my dhcp subs gets infected and starts a broadcast storm?  If so, can I also set this up to automatically isolate that mac/ip and notify me via email?  If not, what device would you recommend that I would pass my internet through to accomplish this.  Thanks.
>
>
Sounds like something you should be doing at Layer-2...

DAI, DHCP snooping, port-security... all come to mind... broadcast 
storms? across a router?

-- 
Regards,

Giles Coochey, CCNA, CCNAS
NetSecSpec Ltd
+44 (0) 7983 877438
http://www.coochey.net
http://www.netsecspec.co.uk
giles at coochey.net