1 00:00:00,240 --> 00:00:05,120 So what are the best practices, what should you be doing in a live environment? Now 2 00:00:05,390 --> 00:00:07,800 best practices state that you should use both. 3 00:00:08,720 --> 00:00:15,410 You should use polling-based or query-based as well as event-based network management protocols as part 4 00:00:15,410 --> 00:00:17,060 of your network management solution. 5 00:00:18,260 --> 00:00:23,720 Now, it doesn't help just to receive a large amount of data, you need to make meaningful decisions 6 00:00:23,720 --> 00:00:24,620 on that data. 7 00:00:25,550 --> 00:00:31,790 So you'll also want to build and leverage alerts and reports so that you're both notified when an issue occurs, 8 00:00:32,270 --> 00:00:37,640 whether it was based on a polling-based detection mechanism or an event-based detection. 9 00:00:38,520 --> 00:00:44,160 And in addition, you're going to want some kind of reporting capability that provides you with detail 10 00:00:44,160 --> 00:00:50,490 of performance, not only in real-time at this point in time, but over a period of time. 11 00:00:50,880 --> 00:00:55,290 So you want historical data available so that you can make meaningful decisions. 12 00:00:56,220 --> 00:01:04,260 As an example, if an interface on a router has a utilization of 70% is that good or is that bad? 13 00:01:05,160 --> 00:01:10,770 That's difficult to know if you don't have historical data that allows you to build a baseline of what 14 00:01:10,770 --> 00:01:12,600 your network typically runs at. 15 00:01:13,540 --> 00:01:19,060 If that interface in the last three months has been running at 2% utilization and now suddenly 16 00:01:19,060 --> 00:01:24,940 it's running at 90% utilization, you'll know that something has happened on your network that 17 00:01:24,940 --> 00:01:28,030 has changed the interface utilization dramatically. 18 00:01:29,010 --> 00:01:34,740 So you're going to want reports to give you performance detail over time, as well as notify you of 19 00:01:34,740 --> 00:01:38,340 issues and the availability of devices in your network. 20 00:01:39,340 --> 00:01:44,890 You're going to want to, at a glance, be able to see if there's a problem with a network device such 21 00:01:44,890 --> 00:01:50,620 as a router or if there's a problem with an individual interface on one of your routers. 22 00:01:51,730 --> 00:01:58,480 Don't forget to set the polling frequency and how granular your event notifications are. 23 00:01:59,500 --> 00:02:05,290 This will vary from one environment to another and often depends on the type of topology that you have, 24 00:02:05,770 --> 00:02:12,580 the bandwidth available and the resources you have to detect and then act on the information that you're 25 00:02:12,580 --> 00:02:13,180 receiving. 26 00:02:14,050 --> 00:02:19,810 In addition, you might need to make decisions on how quickly you need to react to an issue on your 27 00:02:19,810 --> 00:02:20,350 network. 28 00:02:21,350 --> 00:02:28,160 If something happens on your network and it effects an entire building or the entire organization, 29 00:02:28,340 --> 00:02:30,260 you're going to want to act on that quickly. 30 00:02:30,920 --> 00:02:35,930 But if something happens and it only affects a single device, that's not important, it's probably 31 00:02:35,930 --> 00:02:41,810 not as important that you get woken up at three o'clock in the morning to tell you that the port on the 32 00:02:41,810 --> 00:02:42,800 switch has gone down.