Rant Wednesday! Networking |
- Rant Wednesday!
- SD-WAN Subscription Costs
- I feel like I run into a new use for loopbacks every couple of months, but I'm not sure I fully understand them. Any advice?
- Heat Shrinking without Disconnecting Cable
- Any way to recover from express setup?
- Connecting Cisco Small business switches with Catalyst switches
- Asr1002 license question
- Reasons for static ARP/MAC address entries
- Netbox vs. Infoblox
- Firepower - Finding internal or external hosts that might be saturating an interface or resources on a specific host.
- Math for Bandwidth Calculation
- ASA Failover Pair?
- Aruba 2540-sfp+ to esxi host - 10G DAC - seeing RX errors on switch
- Tunnelling/VPN question
- SSL Certification Help
- Truly outdoor WAP suggestions
- Dialer interface: Shut & no Shut
- Looking for a good networking company
- GSOC Supplimentary Resources
- Sending alerts to Office 365 using Cisco FTD
- Peplink question
- Forward subdomain to TCP service
- Branch office virtualization
- Packet loss Issue
Posted: 14 May 2019 05:04 PM PDT It's Wednesday! Time to get that crap that's been bugging you off your chest! In the interests of spicing things up a bit around here, we're going to try out a Rant Wednesday thread for you all to vent your frustrations. Feel free to vent about vendors, co-workers, price of scotch or anything else network related. There is no guiding question to help stir up some rage-feels, feel free to fire at will, ranting about anything and everything that's been pissing you off or getting on your nerves! [link] [comments] |
Posted: 15 May 2019 09:20 AM PDT What is everyone doing for justification of the extra cost for SD-WAN? There's some savings to be had depending on carrier changes etc. but what else have you been using to justify the cost or prove the savings? So far the only real thing I can quantify easily is circuit savings. I'm looking for ideas I may have missed. [link] [comments] |
Posted: 15 May 2019 03:53 PM PDT I understand how I would, say, use a loopback plug to test and interface. And how you would use a virtual loopback interface to associate an IP to a physical T1. I don't want to be too specific because I half way would rather not get doxxed with this username, but today I came across a Loopback with a public IP, and then a private IP addressed interface referenced it. I don't know why the physical interface just wasn't assigned the public IP. And I don't fully understand how a loopback works here. Again, I don't want to be too specific...but essentially traffic is sent to the public IP loopback, and then the public IP loopback relays the traffic to the privately addressed physical interface. Does anyone have any idea what the benefit of that is? Is this a "transitional" configuration? It doesn't make sense to me when the public IP could have just as (more) easily been configure on the physical interface. And that's got me wondering more about what I don't know about loopbacks instead of the specific questions I have about my last paragraph. Any suggestions, tips, advice would be awesome. I want to understand loopbacks better. [link] [comments] |
Heat Shrinking without Disconnecting Cable Posted: 15 May 2019 12:42 PM PDT Hello! I'm looking for a solution where I can label a cable in a way where I don't have to disconnect it. Unfortunately, I haven't been able to find a solution just through Googling. Has anyone been successful in cutting a heat shrink label and reheating to seal the cut again or something similar? For example, if I have to label a cable every so many feet but unable to unplug the cable to split heat shrink labeling onto it, are there other solutions? Unfortunately I'm unable to use cable flags (no zip ties, etc.). Thank you! [link] [comments] |
Any way to recover from express setup? Posted: 15 May 2019 02:43 PM PDT Is there any way to recover configs from when express setup has been done on a Cisco 3850? [link] [comments] |
Connecting Cisco Small business switches with Catalyst switches Posted: 15 May 2019 09:22 AM PDT I recently started at a company that uses Cisco SG300 series switches. They aren't keeping up as we grow, so I'm looking at replacing a couple with Catalyst 9200 switches. Will I experience any issues connecting the different models on the network? I've used the 2960 switches extensively in the past, but have never combined different models in the same network. Edited to add: Mostly I'm curious if I'll run into issues with VLANs or at the Layer 3 level. I wouldn't think so, but I'd rather be safe than sorry. [link] [comments] |
Posted: 15 May 2019 12:02 PM PDT Ok, so I have an asr1002-x with the 10g upgrade license in place. I need to upgrade again to 20G which would be the FLSA1-2X-10-20G. Now my question, I can get the 5-20G license at a great price, as it was never applied and is sitting currently. Can I use that one? I don't see why I can't remove the 10g license which drops it back to 5g then add the 5-20g on it. Thoughts? [link] [comments] |
Reasons for static ARP/MAC address entries Posted: 15 May 2019 04:57 AM PDT Hello! Just a thought of mine whilst reading into ARP for CCNP Route... In what scenarios would you use static ARP and static MAC address entries on a Cisco router? [link] [comments] |
Posted: 15 May 2019 01:26 PM PDT I'm looking to implement Netbox as our IPAM + DCIM tool. Hoping to solve the problem of people not updating Visio diagrams by just generating site specific diagrams from Netbox, containing the devices/connections/circuits at a certain site. And when you document the "truth" there, you'll add the IPs/VLANs etc. too so it would work well as an IPAM from what I can see. Our current IPAM solution doesn't really seem to work that well when you have multiple customers with many VRFs and overlapping IP addresses. However these commercial products have fancy integrations with DNS and DHCP, automatically updating the pools and zones. Netbox doesn't have those at least out of the box, but then again Infoblox etc. don't really help with the issue of documenting the connections between devices. So it's not really 1:1 comparision but they have that much overlapping parts that I wouldn't want to implement for example both Netbox and Infoblox. Our DNS records are quite static (besides the subdomain that has all the AD connected PCs), so I probably could just add custom field in Netbox for IP addresses called hostname, and then run some scripts to update the DNS zones based on that. Not sure about the DHCP though. Commercial products also have nicely clustered solutions at least according to Powerpoints, how about ISC DHCP (or Kea?) Any thoughts? Thanks! [link] [comments] |
Posted: 15 May 2019 08:19 AM PDT trying to rule out why a certain host is being bombarded with requests and talks of "network is slow". been reading up on network analysis policy and the use cases with enabling certain ids signatures to generate and generate and drop for port scanning and either rate limiting or dynamic state rules..any feedback on best way to find offending network traffic or to prove its not the firewall would be appreciated. [link] [comments] |
Math for Bandwidth Calculation Posted: 15 May 2019 11:24 AM PDT I'm trying to figure out the formula behind a "Size" X "Speed" = "Time" calculation Similar to this: https://www.omnicalculator.com/other/bandwidth It seems so simple yet I can't figure it out own my own accord. [link] [comments] |
Posted: 15 May 2019 10:34 AM PDT Hi. ASA idiot again here. I have two 5512's, which are supposed to be "clones" of each other for total failover. I went lurking through this document here and have some questions. 1) Does anyone have a "this is the core of the HA/Failover link" configuration 2) The failover itself--is it a closed system (doesn't matter what the IP addresses are) or no? 3) The failover link itself, is it passing traffic, or simply alerting the other ASA to pick up the slack? 4) The links on Primary ASA (such as inside/outside), are they supposed to be the same? [link] [comments] |
Aruba 2540-sfp+ to esxi host - 10G DAC - seeing RX errors on switch Posted: 15 May 2019 01:00 PM PDT Im seeing errors on a newly set link between a host and an aruba 2540-24G-sfp+-poe+ switch. Totals (Since boot or last clear) : Bytes Rx : 2,914,334,292 Bytes Tx : 2,437,851,313 Unicast Rx : 175,849,866 Unicast Tx : 1,174,044,778 Bcast/Mcast Rx : 304,887 Bcast/Mcast Tx : 474,980 Errors (Since boot or last clear) : FCS Rx : 277,220 Drops Tx : 0 Alignment Rx : 0 Collisions Tx : 0 Runts Rx : 0 Late Colln Tx : 0 Giants Rx : 2919 Excessive Colln : 0 Total Rx Errors : 280,139 Deferred Tx : 0 In the back of my head theres something telling me that the switchport defaults to HD insted of FD when the other end is set to fixed, and its set to auto-neg.. But I cant seem to find the any way to set it to 10g-full on the switch? What am I missing..? [link] [comments] |
Posted: 15 May 2019 12:50 PM PDT So, I am helping troubleshoot a piece of a network, and I have run into something that seems odd. There are 2 tunnels in the setup. Devices at the end of the tunnel cannot communicate across the Layer 3 Cisco switch to stuff on the other side. They appear to be getting a good connection to the switch, though The tunnels go out FA0/1, using the IP address assigned to the port as the source. The IP address of the port is in the same subnet as the WAN link. interface Tunnel0 ip address 10.44.2.2 255.255.255.252 ip nat inside ip virtual reassembly in tunnel source 50.208.230.57/29 tunnel destination 66.174.16.250 So, Fa0/1 50.208.230.57/29 There is a route in the routing table of 50.208.230.56/29 going out the G0/1 port. I have 2 questions: [link] [comments] |
Posted: 15 May 2019 12:46 PM PDT I am working on getting my company PCI Compliant. The first thing we are working on is passing our external vulnerability scan. We are using Trustwave and are scanning 10 locations and 1 website. We have given the IP address of the perimeter firewall of each location to Trustwave to scan. Before any changes were made, we were failing with SSL certificate is self-signed and SSL certificate is not trusted. So I went out to find an SSL certificate for our firewalls, but have had a hard time getting an SSL certificate for anything that is not a domain. We already have a wildcard certificate for our website, *.domain.com. I set up each firewall ip as a subdomain,firewall.domain.com, and added the wildcard certificate to the firewall and it worked! The problem is is that Trustwave says I need to use the IP Address in their scan, which still fails. I'm pretty sure I'm just missing something and once I figure that out it will all click. Any help you guys can offer would be greatly appreciated, if you need any additional information just ask. [link] [comments] |
Posted: 15 May 2019 11:45 AM PDT We are in the middle of upgrading our wireless network and are looking to replace an old outdoor WAP. We'd like to get something that is truly ourdoor and weather proof. For inside our greenhouse (high humidity, maybe some water splashing on it, nothing like rain) we use Ubiquiti UniFi UAP-AC-PRO. It does say it is Outdoor but upon later inspection it is only "Weather Resistant", not weather proof. I know this is usually a way to cover their asses but do any of you have any experience with this WAP unprotected in the elements? Any experience with this KuWfi? The reviews talking about the distance rating sounds right up my alley but I've never heard of the brand, so maybe someone could speak on that or offer something different? We are in New Hampshire, so think all sorts of weather (rain, freezing rain, snow, heat/humidity, lightning, etc). We don't have a huge budget so something around $200-300. Thanks! [link] [comments] |
Dialer interface: Shut & no Shut Posted: 15 May 2019 02:37 AM PDT I need to change the PPP credentials on a lot of Cisco 800 series xDSL routers. we can amend the startup config and then reload. But that's going to take several minutes for the router to boot and do it's xDSL sync. .. could do a "shut" and then "no shut" on the dialer interface to get it to drop the PPP session and re-establish with the new credentials - but when doing this remotely, the "shut" command will immediately drop my connection. Is there a "reload interface dialer0" type command? If not - I'll just have to do the reloads and wait for them all to come back up... (thanks) [link] [comments] |
Looking for a good networking company Posted: 15 May 2019 05:03 AM PDT Me and my partner work for a small ISP in the USA traveling the country setting up outdoor networks. We both enjoy the work and the travel, but the company we work for is just awful. We both take a lot of pride in our work and we want to find a company that will appreciate good, hard workers that are free to travel. I've been looking online and I can't find any other companies that do anything like what we do. I'm still entry level but my partner has a couple years of experience. We only work with CAT5, no fiber experience, but would love to learn. Can anyone here point us in the right direction? Thanks in advance! [link] [comments] |
Posted: 15 May 2019 10:31 AM PDT Hi all, I have just landed myself an amazing job opportunity as a GSOC Analyst for a reputable company with zero networking knowledge. Training is on the job and the learning curve is steep. I want to supplement my working knowledge with a bit of knowledge of how hardware and configurations work within my scope. We test and verify e1 circuits and 64k lines, as well as data circuits (normally 10mb a go) that we lease and let to clients. My job is to triage issues, grab logs and monitor tickets. Any hints or tips? I've watched the first 30 episodes of cbt nuggets, I would love more insight. [link] [comments] |
Sending alerts to Office 365 using Cisco FTD Posted: 15 May 2019 10:24 AM PDT Hi Guys, Can you please help me what is the static IP I need to set up for me to send alerts to Office 365. Thanks, in advance [link] [comments] |
Posted: 15 May 2019 07:17 AM PDT Hey all, so I am trying to get to know these peplink routers we have at our business and honestly, I hate them. Is there a way for me to print out the configuration in 1 clear and easy to understand page similar to the #show run command on a Cisco router? [link] [comments] |
Forward subdomain to TCP service Posted: 15 May 2019 06:24 AM PDT I have a computer with NGINX which acts as a router (so whenever I go to subdomain.mydomain.com it redirects this request to a local PC in my LAN, using proxyPass). The problem is that I'd like to do this with any TCP service (NGINX lets only HTTP services to be forwarded). Is this possible? Which software should I use? [link] [comments] |
Posted: 15 May 2019 04:06 AM PDT Some background... we are closing one office and expanding another in Europe. The office closing housed a small server farm supporting about 80 users across these two locations plus another office in Europe not getting touched now. Our server guys are looking at options for replacing, not moving the hardware to that office that is expanding. We have very old perimeter equipment in that same office and looking at replacing it and doing some circuit upgrades. My question to the forum, has anyone implemented a full, or almost full stack of NFV at a remote branch location? Any gotchas or regrets? We are looking at Cisco CSRs, Palo Alto VMs, maybe a virtual cisco WLAN controller. No business case for WAN Opto today. Switching will likely be 3850s with IP services. Our WAN is currently based on DIA and DMVPN phase 3. Circuits will be in the 50-100Mb range. Someday looking to replace the WAN with either Viptella or VeloCloud but thats maybe 12-24 months out. What do you guys think.... [link] [comments] |
Posted: 15 May 2019 02:39 AM PDT Hi All, I am facing connectivity to one of my device (Access control device). So, basically, I am getting high packet loss to one of my IP. Tried changing the cables, ports but nothing seem to work. Tried restarting the device nothing changed. No packet loss or connectivity issue to Gateway IP and utilization is also normal. The topology is Wifi -> Controller -> Core Switch -> Distribution Switch -> Directly connected to device. I have even tried connecting the device directly to my laptop, connectivity is perfect and no drops. Please help! [link] [comments] |
You are subscribed to email updates from Enterprise Networking news, blogs and discussion.. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
No comments:
Post a Comment