Switches crashing almost daily!

[mikkydoos]

After that, you might want to run Wireshark. You might see source and destination IP's being generated - in large numbers.

[truebluesteve]

Depending on the switch, they might have the resources to handle a storm for quite a period of time. But as more and more storms happen they can then buckle.

 

This is true - but we've had storms via loops on exactly the same Netgear switches as the OP and they fall over pretty quickly! They are quite an old model now and are pretty much entry level in terms of specification.

 

I'd be unplugging a few ports at a time from the switch and seeing if the problem reappears - if not plug them back in and do a few more. It does mean a few PC's may be out of action but if it happens regularly then it shouldn't be for too long. The only problem with this approach is if you have more than one loop/dodgy network card, but I think its worth a punt.

[TomHD]

Just to confirm, the switches have been reset around 8am each morning and seem to drop out sometime over the evening. I can tell when it falls over as the connection to my work PC disappears from TeamViewer on my PC at home!

[truebluesteve]

Just to confirm, the switches have been reset around 8am each morning and seem to drop out sometime over the evening. I can tell when it falls over as the connection to my work PC disappears from TeamViewer on my PC at home!

 

Does anything happen network wise happen after school - automatic shutdown of PC's, remote backups? If so, might be worth disabling them for one evening to see if it changes anything

[TomHD]

Does anything happen network wise happen after school - automatic shutdown of PC's, remote backups? If so, might be worth disabling them for one evening to see if it changes anything

Yeah, have 100 PCs shutdown at 1800. I won't try that this eve as I've got a different scenario to test, should it not get me any further I'll try tomorrow

[CyberDrac]

We had a peculiar issue where a particular set of machines with Intel network interfaces started broadcasting huge amounts of information under certain circumstances while asleep. We had to update the drivers to prevent it, an easy fix, but wasn't immediately obvious as the machines causing the issue appeared to be off whenever it happened.

[TomHD]

Thanks, the Intel issue has been mentioned but I've looked and haven't found any Intel NICs on any clients.

[TomHD]

So I have made some progress.

 

I have updated switch firmware across the site and whilst doing so I noticed "Storm Control" options on the Netgears. Now I have 3 options for enabling, [unknown unicast, multicast and broadcast], [Multicast and broadcast] or [broadcast only]. Am I best to set only broadcast for now and see how it goes? Or should I go with the first option and cover all?

 

Thanks, TomHD.

[mikkydoos]

Did u go round and check your sockets in the end?

[TomHD]

Did u go round and check your sockets in the end?

Couldn't find anything The site is quite large and completely undocumented so I could have missed some. Was thinking by enabling storm control the offending port would get disabled and it may help me locate the issue

¯\_(ツ)_/¯

 

"Storm Control" options on the Netgears. Now I have 3 options for enabling, [unknown unicast, multicast and broadcast], [Multicast and broadcast] or [broadcast only]. Am I best to set only broadcast for now and see how it goes? Or should I go with the first option and cover all?

Edited November 18, 2015 by TomHD