Network Configuration Standards
1. Document Overview
Document Title: Network Configuration Standards
Version: 1.0
Author: [Name]
Last Updated: [Date]
Purpose: Define and enforce consistent network configuration practices across the
organization.
Scope: All network infrastructure including switches, routers, firewalls, and wireless
controllers.
2. Naming Conventions
Devices: Format - [Location]-[DeviceType]-[Number] (e.g., NYC-SW-01)
Interfaces: Format - Gi0/1, Ten1/1, or eth0
VLANs: Format - VLAN<ID>_<Purpose> (e.g., VLAN10_USER, VLAN20_VOIP)
3. IP Addressing Scheme
Subnet Purpose VLAN ID Gateway DHCP Range Static
Assignments
192.168.10. User devices 10 .1 .100–.199 .2–.99
0/24
4. Switch Configuration Standards
- Enable PortFast on access ports.
- Disable unused ports and assign them to a “black hole” VLAN.
- Use the following default QoS settings: [...]
- Enable storm control: storm-control broadcast level 1.00 0.50
5. Router Configuration Standards
- Always set hostname and domain name.
- Use loopback interfaces for router IDs.
- Enable OSPF with area designations based on site codes.
- Use ACL naming convention: ACL_[Function]_[Direction] (e.g., ACL_VPN_IN)
6. Firewall Standards
- All changes must be documented in a change request.
- Default deny all; permit only explicitly defined rules.
- Use object groups for IPs and ports when possible.
- Log critical rule hits to centralized syslog.
7. Wireless Standards
- SSID Naming: CorpSSID, GuestSSID
- WPA2-Enterprise for internal; WPA2-PSK (isolated VLAN) for guest.
- 5GHz preferred band with band steering.
8. Monitoring and Logging
- All devices must log to: syslog.domain.local
- SNMPv3 required; SNMPv2 only for legacy devices with justification.
- Interfaces must be monitored for errors and discards.
9. Backup and Restore
- Daily config backups using [Tool: e.g., RANCID, Oxidized, SolarWinds NCM].
- Backups must be stored encrypted for 30 days minimum.
10. Change Management
- No changes allowed without ticket in [Ticketing System].
- Emergency changes must be documented retroactively within 24 hours.
- All changes should include:
- Purpose
- Before/after config diff
- Rollback plan
11. Appendix
- Device Inventory Template
- Standard Port Map
- Approved VLANs
- List of Reserved IPs
- Contact Info for Network Ops