• Breaking News

    [Android][timeline][#f39c12]

    Thursday, May 3, 2018

    Python for Network Engineers, free course starts next Tuesday (May 8) Networking

    Python for Network Engineers, free course starts next Tuesday (May 8) Networking


    Python for Network Engineers, free course starts next Tuesday (May 8)

    Posted: 02 May 2018 05:27 PM PDT

    Roughly once a quarter, I run a free course on Python for Network Engineers. The course covers Python fundamentals with examples, exercises, and content from a network engineer's perspective.

    The course lessons are all delivered via email and consist of videos, exercises, and additional content.

    The course syllabus is as follows:

    • Week1 - Why Python, the Python Interpreter Shell, and Strings
    • Week2 - Numbers, Files, Lists, and Linters
    • Week3 - Conditionals and Loops
    • Week4 - Dictionaries, Exceptions, and Regular Expressions
    • Week5 - Functions and the Python Debugger
    • Week6 - Netmiko Basics
    • Week7 - Jinja2 Basics, Introduction to YAML and JSON, Complex Data Structures
    • Week8 - Libraries, Package Installation, and Virtual Environments

    The course generally uses Python 3.6 (with most of the exercises written using Python3/Python2 compatible code).

    Note, this course is oriented towards network engineers that are relatively new to Python.

    If you are interested, you can sign up here:

    https://pynet.twb-tech.com/email-signup.html

    About me - I am a long-time Network Engineer (CCIE emeritus, in routing and switching). I am the creator of the Netmiko, Python library and work quite a bit on the NAPALM automation project.

    Regards,

    Kirk

    submitted by /u/ktbyers
    [link] [comments]

    How do you deal with an indispensable employee being ill or on holiday?

    Posted: 03 May 2018 11:33 AM PDT

    It's not unusual for a business to have a person who knows everything about things, such as how a specific network is configured or how to communicate with a specific client. Suppose that person goes away for a vacation or suddenly gets ill. What procedures do you follow to make sure things don't start to fall apart? Do you always make sure there is a backup person? If so, how do you make sure he is kept up to date with all details? What if both, out of some freak coincidence, turn ill at the same time?

    submitted by /u/cult_of_algernon
    [link] [comments]

    Network Lab Automation products/services?

    Posted: 03 May 2018 08:16 AM PDT

    Hello /r/networking

    So I test router/switch hardware/software for my day job. Part of that job is building out topologies to test devices for different use cases.

    The tedium comes with rebuilding cfgs, cabling and troubleshooting. I've been looking into some lab automation services/products and found a few online.

    Just wondering if there's any other products out there? What's your experiences been like with these platforms?

    https://www.quali.com/solutions/lab-as-a-service/

    https://www.ixiacom.com/products/cloudshell

    https://www.netscout.com/solutions/lab-service

    submitted by /u/juniper_dreamer
    [link] [comments]

    My users experiencing a large increase in time it takes to open files when using vpn

    Posted: 03 May 2018 01:06 PM PDT

    Hi Guys,

    This is the first time posting here in a while but I manage a large WAN and I'm trying to work to resolve a issue that I believe is related to a networking issue and I'm hoping you guys might have some ideas.

    Problem: Users accessing the network via VPN (we use AT&T global network client) are having high latency when accessing our internal file servers. Takes roughly 8 minutes to open a 250kb word file etc. This change has occurred over the past few weeks. We have not made any large networking changes on our network and our ISP AT&T is telling us the same.

    I was wondering if there was a good way I could analyze the traffic my users who are having issue to begin pinpointing this issue more accurately.

    submitted by /u/ezio0630
    [link] [comments]

    [RANT] - Working with ASA Firepower

    Posted: 03 May 2018 02:56 AM PDT

    Working on a Firepower Management Center/ASA sourcefire upgrade, and this came to mind: https://www.youtube.com/watch?v=NuLkWmG3gPk

    Between the Firepower management Center, Firepower Threat Defense, NGIPS, Sourcefire modules, the options for ASDM or FMC management, each with their own licensing, and appliance, virtual and cloud versions for all could Cisco have made this more confusing?

    submitted by /u/paulzapodeanu
    [link] [comments]

    Need help with best way to dynamically route [Diagram included]

    Posted: 03 May 2018 10:41 AM PDT

    Please see the following diagram
    https://imgur.com/gallery/p0QC6yD

    This is our current configuration for our connectivity to an application service provider. My org are the sites, their org owns the routers and datacenters. The datacenters must be inter-connected since the IPs that we route to are the same no matter which route we use. I do know they use BGP on their end to dynamically route. Also our internal IPs are NAT'd / NAT overloaded on their routers.

    Right now, If Datacenter 1 or Router 1 goes down HSRP fails over to Router 2 and all traffic automatically goes to Datacenter 2. If Datacenter 2 goes down or Router 3 goes down, I have to manually change static routes at Site 3 to tell it to route through Site 1. The same if Site 1 were to go down, I would have to manually change Site 2 static route to point to Site 3.

    Is there a way I can use BGP to neighbor with the service provider owned routers without advertising my own internal routes? If they inject the BGP routes into OSPF and I distribute those, is there a way to avoid Site 2 doing ECMP? I admit I'm a jack of all trades and I don't understand BGP well but what do you think the best way to dynamically route this would be?

    edit: added the words "an application"

    submitted by /u/HolyCowEveryNameIsTa
    [link] [comments]

    Internal Firewall Question

    Posted: 03 May 2018 11:50 AM PDT

    I'm trying to set up a small company's network that will ride off of a larger company's network. For legal reasons, small co will be firewalled (checkpoint) behind larger co's network, fiber uplink between buildings. They will use some applications of larger company and internet service of larger company is being used as well. So basically it almost is like the larger company network is one big DMZ for smaller co. They just added the requirement of having a domain trust between co's. Domain trusts require un-natted connections with a ton of ports open between domain controllers, so I'd like to open up traffic from small co's few servers 172.16.10.x to a couple server vlans in larger co 10.10.10.x, 10.10.11.x.
    I've considered just bringing those vlans straight over on the switch but company doesn't really want to extend there server network across buildings, setting up a vpn (seems odd way to do this for internal traffic), but wanted to know if I can do this just with routing, ACL's, nat rules but I'm not sure. Right now larger co's plugged in the wan interface, and small co in the lan but i'm confused how to get by the outbound nat rules for the servers. Maybe I should just reconfigure with both on a trusted interface and just use acl's to restrict traffic with no nat. Any thoughts?

    submitted by /u/aviona
    [link] [comments]

    Comware and ProCurve OS in the same environment

    Posted: 03 May 2018 03:26 PM PDT

    Does anyone know of any con's or issues that make come about if Comware and ProCurve OS exists in the same environment?

    submitted by /u/BetchaCantdoItLikeMe
    [link] [comments]

    Website access timesout due to IP

    Posted: 03 May 2018 03:15 PM PDT

    Hi all. Bit of a strange one thats got me scratching my head.

    A client of ours is having issues browsing to a particular website that they need. It is only an issue on the internal network, the site works fine outside. Tracert is fine and get the same results both in and out of the network. After troubleshooting I discovered that the Ex IP of the site uses the same first 2 Bytes as the website (e.g. 164.39.x.x).

    It is likely that requesting another IP address from the ISP will result in the same pool of Class B addresses. And the company that the website is for is Worldwide so they aint changing anything. Other than using a proxy is there a way out of this?

    On a side note this is where things get wierd, we support several hundred clients and as part of testing I wanted to connect a machine that is having the issues to a VPN to get a different EX IP. Out of all the VPNs I could choose to test, it happened to be one that also uses the 164.39.x.x block, and after connecting to their site experienced the same issues so it is likely thousands of networks have this issue.

    submitted by /u/nrm94
    [link] [comments]

    First time EVPL config questions

    Posted: 03 May 2018 02:36 PM PDT

    I've just been handed a EVPL connection between two offices to config, and have never done one of these before.

    So there is a EdgeRouter X at both locations and they sent me this config and that is it.

    Policer : 1000 Mbps VLAN ID : 739 Speed / Duplex: Auto/Auto handoff port : Eth 0

    I've connected it do my Dell switch (N3024 at one office, and a 5524 at the other). The other office is just the switch at the moment. I am hoping to pass my DHCP for my 172.16.x network, and also for my Avaya Phones (10.10.x ). Or is this not possible?

    Any recommendation on how to go about it? Do I just assign the VLAN tag to a port. And should I make a routing entry to tag all traffic with the vlan tag.

    Any guidance is appreciated immensely.

    submitted by /u/noobinator2000
    [link] [comments]

    Cisco ASA Cluster and Client Static IPs

    Posted: 03 May 2018 01:33 PM PDT

    Hey guys,

    I have a question that I am looking some clarification on. I just want to give you a quick rundown of what our VPN solution currently looks like. In our LA office we currently have an Active/Standby setup with two ASAs and we are quickly reaching out 5,000 seat license.

    Unfortunately we cannot upgrade our licensing because these are older units. I have another set of the same 5550 firewalls in our Las Vegas office with the same licensing. But I wanted to set them up as a cluster so that we can expand out licensing to 10,000 seats. I know it can be done but here is the kicker.

    We currently use a static IP solution so when a client connects a static ip is automatically assigned to them. One of the other engineers is telling me that this cannot be done within a cluster solution. And I am just trying to see if this is correct and why this can't be done. Any info you guys could provide would be greatly appreciated.

    Thank you!

    submitted by /u/SiRMarlon
    [link] [comments]

    Looking for input on VoIP systems

    Posted: 03 May 2018 11:43 AM PDT

    Hi,

    I work at an indoor agricultural farm as the IT technician. I've been tasked with setting up a VoIP system for mostly internal use with outbound calls required as well. All the cabling has been run, and at most, we're going to have 11 phones. Our management will have a dedicated line, and everyone else will probably split a line or two.

    We are looking into a business account with the local ISP for the phone lines, but they offer their own service called SmartVoice that seems far too expensive for what it is. They don't support VoIP and their support will end at the modem.

    I'll likely have a dedicated box for this. Looking into FreePBX and Asterisk, but I'm concerned about the learning curve of Asterisk. I'm not much of a coder, honestly. I can manage shell scripting and bash, some Javascript, and can do the basics in C, but that's about it. We'd need a system that can connect and use the local number(s) we'll have leased, as well as handle internal calling, robust enough to have call-forwarding/recording/differentiated tiers for management vs everyone else, and it needs to be reliable.

    Also, looked at Asterisk phones and Cisco phones but would love to see what suggestions people have for phone models. PoE is crucial, as well as the ability to handle lines and have good voice quality. Balance the pros against the price, as ever, but we're looking for something reliable that won't fail on us in two years or reach end-of-life within the next while.

    Any suggestions or advice? Thanks so much for the help _^

    submitted by /u/softkarpet
    [link] [comments]

    Consumer vs enterprise for many device WLAN.

    Posted: 03 May 2018 04:38 AM PDT

    Preface: I am a newbie when it comes to enterprise networks and my background is more on the the layer 1 side of networking.

    My work has tasked me with building a WLAN capable of gigabit+ data transfer to 50-75 mobile devices. I don't need security as all of the devices will be heavily restricted and the LAN will never connect to the open internet. The problem I am running into is figuring out if I would be better off with a few consumer-grade AC wifi routers or with an enterprise-grade router with WAPs to push data to devices. I just can't quite grasp the why enterprise systems tend to be pretty low in terms of bandwidth compared to consumer grade.

    I am sorry if this breaks the rules but I couldn't quite find a better spot to ask. I have done research but there doesn't seem to be a ton on WLAN construction. Thanks for the help.

    submitted by /u/I_Kinda_know_stuff
    [link] [comments]

    ISE-VSL switch config

    Posted: 03 May 2018 09:59 AM PDT

    Hello

    Part of my phase 1 (monitor mode) config is to enable ip device tracking. Along with this config ive been adding " ip device tracking max 0 " on trunk ports to avoid the following bug: CSCvc76593

    My questions has to do with how to handle trunk ports that are part of a VSL link... would you still add ip device tracking max 0 on those?

    submitted by /u/Absolutersq
    [link] [comments]

    Program to view IP addresses a specific program uses?

    Posted: 03 May 2018 09:27 AM PDT

    I'm trying to find software that's relatively easy to use on a Windows desktop that can show exactly what IP addresses a given program is using to 'call home' for updates, validation, etc that doesn't require a cli.

    submitted by /u/irishtayto
    [link] [comments]

    Question about Cisco L3 Switch to a router that handles the BGP

    Posted: 03 May 2018 09:19 AM PDT

    So looking at the following layout provided from Cisco:

    https://www.cisco.com/c/en/us/support/docs/lan-switching/inter-vlan-routing/41860-howto-L3-intervlanrouting.pdf

    I understand the switching aspect totally, I'm lacking what I need to do on the router interface. I run BGP internally with a MPLS network to my other sites and provider and in my router on a stick set ups I use a network statement for each subnet and then a sub interface on the lan port. For this type of layout it seems like all of those sub interfaces are just on the layer 3 switch and I have a separate subnet to the the switch and router. How do I advertise the subnets on the L3 switch in my router that connects back to the rest of the network so my other sites know how to get there? Do I make subinterfaces on the router on the same port as the switch uplink and just set them to .2? Or can I just redistribute static routes into bgp from the router to the switch? Guess I'm just looking for the industry standard method as I believe my bgp routing table is too large to only be on a switch.

    submitted by /u/p3p3_silvia
    [link] [comments]

    Zayo ... Denver ... Circuit down 11 hours ...

    Posted: 02 May 2018 07:45 PM PDT

    Current update: Cause of damage appears to be a large vehicle of some type collapsed the manhole. The lid of the manhole fell inside and crushed the fibers. In order to repair, OSP will need to pull slack and splice for repair. This is a 216 count fiber and not all customers have been impacted the Zayo NCC will engage Zayo MR team for an emergency maintenance to be performed in order to repair.

    ... how does a heavy truck collapse a manhole? ...

    submitted by /u/JaySuds
    [link] [comments]

    Funky Anycast DNS Behaviour

    Posted: 02 May 2018 10:48 PM PDT

    I work for an ISP and we run DNS servers with anycast IPs.

    When a customer sends a query to the anycast IP, 10% of the time, the request will land on the server and go unanswered, eventually timing out for the client. If they send a query to the server's real IP, everything works 100% of the time.

    I'm confident - bordering on certain - it's not a network fault because it's fairly simple configuration, routes are never being dropped and, as stated above, the queries land on the servers which I verified with tcpdump.

    The servers run BIND on Ubuntu 16.04 and they peer with our routers using BIRD/BGP and advertise the anycast IP. Here's a shitty simplified topology:

     +----------------+ +------------------+ | | | | | DNS1 | | DNS2 | | 1.1.1.1 | | 2.2.2.2 | | anycast 8.8.8.8| | anycast 8.8.8.8 | +------+---------+ +-----+------------+ | | | | | | | | | | | | | | +--------+--------------+ +-------+-------------+ | | | | | | | | | site 1 +---------------+ | | | | site 2 | | | | | +---------+-------------+ | | | +----------+----------+ | | | | | | | | +---+-------+ | | | | | | +----+------+ | customer 1| | | | | |customer 2 | +-----------+ | | +-----------+ 

    Has anyone observed similar behaviour in the past? What could we be missing?

    submitted by /u/helpadumbo
    [link] [comments]

    Restricting nxapi on nexus 7ks?

    Posted: 02 May 2018 06:21 PM PDT

    Is there any decent way of restricting access to NXAPI via ACLs on the 7k platform. Specifically 7009/7710 with 7.3 or 8.2? I'd rather restrict access to just a single management subnet before rolling this out into production.

    submitted by /u/Kdewd
    [link] [comments]

    Simulate YouTube traffic on local network

    Posted: 02 May 2018 10:44 PM PDT

    I'm interested in generating YouTube traffic between two client devices on a local network. I've used IxChariot 9.2 but the simulated traffic doesn't seem to capture the buffering characteristic of YouTube traffic. I'm most interested in testing using traffic that reflects this buffering; is there a tool which would accurately reflect YouTube traffic?

    submitted by /u/igor55
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel