It will help to some degree, but if someone is spewing out ICMP echo requests then it will tie up the access point, even if the access point is just dropping all that data. Bandwidth shaping at the client side would mean they could only tie up 512k of bandwidth (or whatever their subscription level is) and everyone else on the access point would still be functional.
Thanks, Roger ----- Original Message ----- From: "sB Tech Support" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 10, 2003 10:33 AM Subject: RE: [smartBridges] sB Network Issue > Nexus products will give you some kind of IP or protocol filtering > capability so you configure it to block certain ports or IP address. > Hope this will help you. > > Alex > sB Tech Support > [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Roger Howard > Sent: Monday, November 10, 2003 1:05 PM > To: [EMAIL PROTECTED] > Subject: [smartBridges] sB Network Issue > > One of the problems I seem to be facing frequently these days is that a > single customer can get a virus and generate tremendous amounts of > traffic, > which brings the whole network to a crawl. Normally bandwidth shaping at > the > NOC will limit the amount the customer can transmit, due to the > Transmission > Control Protocol part of TCP/IP. But if it is something like the > Nachi.worm > it is ping packets which do not have transmission control and can be > spewed > out at tremendous rates that no bandwidth shaper can control. So what's > the > solution to stop these slowdowns and outages caused by these viruses? > > A) Reduce the customer's functionality by insisting they use a router or > firewall. > B) Have bandwidth shaping at the CPE. > > Personally I prefer B.... but that seems to be expensive, usually. > Smartbridges, it might be something you can include in your Nexus > product? > > Thanks, > Roger > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe > smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe > smartBridges) > Archives: http://archives.part-15.org > > The PART-15.ORG smartBridges Discussion List > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> > To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) > Archives: http://archives.part-15.org The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
