Testing Switches

[ViToRh]

Please, someone can help me?

I need to do a monthly test to near by 30 switches few models(4200, 4800, 5500, etc). I wanna do a revision and create a detailed report of state to each switch. This is my first time do it, some ideas to apply.

 

[IRudebwoy]

Query each device using your favorite SNMP tool. You can get a lot of useful information.

 

[ViToRh]

I want to do that, but my boss have prohibited enabling snmp in the switches. He says that is posible knock down the network if someone take an ip address that is already put into one switch. This is the reason for we not set ip addresses in the switches.

So i need connect phisically each by serial port and check the status and statistics.

Thanks in advice.

 

[VinceWhirlwind]

Your boss is wrong. If an IP address conflict eventuates affecting an IP address configured as a switch's management address, all it affects is your management of that switch.

In other words your boss has crippled your ability to manage your entire network in order to avoid the slight risk of an incident occurring which would prevent you accessing one switch.

A classic case of disproportionate risk control.

 

[MrNick0483]

Can you not create a managment VLAN for all of these switches?

 

[VinceWhirlwind]

If you put a PC in the rack with a switch, you can connect the PC serial port to the switch and the PC ethernet port to the network. You can then manage the switch remotely by RDPing to the PC.
Completely unnecessary, of course, when you can set an IP address on the switch and manage it directly....

 

[IRudebwoy]

...my boss have prohibited enabling snmp in the switches. He says that is posible knock down the network if someone take an ip address that is already put into one switch...

What!?

Set up your LAN in a core-edge design complete with VLANs. That will reduce the chances of the scenario your boss is spooked by. Router, gateway, and Switch IPs on one VLAN, no DHCP; Core Servers on another VLAN, no DHCP; and client devices (PCs, Printers, Workgroup serves, etc...) on another VLAN(s). I like to break them up by work centers.

You have my sympathy. Stay strong.

 

[ViToRh]

Thanks for every answers, this is my first time into a forum and i never did think that it was so nice, but my opinion is very diferente now, each of you have my sympathy too, i hope can help in the forward.

So thanks.