I've been going through our SVIs in our network that I inherited and am trying to make things more consistent, but it's hard to tell what stuff is done on purpose or not. These are the commands that appear throughout:
- description
- mac-address
- ip address
- secondary ip addresses as needed
- no ip proxy-arp
- no ip redirects
- no ip unreachables
- ip access-group <in/out>
- ip helper-address
- ip pim sparse-dense-mode
- ip route-cache same-interface
- ip irdp
- ip mask-reply
The problem is that not all of the SVIs have each of these commands. ip irdp will be on for half, but missing from the other half. ip mask-reply will be on for all but a handful. It's hard to tell if this was simply user error when creating them or if they weren't added for a specific purpose (which of course isn't documented). I hate to simply apply all the commands across all SVIs.
What do you all tend to do with your SVI configs? I can't seem to find a good "Here's the recommended config" for this sort of thing, so I figured I'd ask the rest of you for your best practices and why you do it that way.
No comments:
Post a Comment