• Breaking News

    [Android][timeline][#f39c12]

    Saturday, July 6, 2019

    Home Unlabelled Can I send generated traffic through another switch to somewhere else? Networking

    Can I send generated traffic through another switch to somewhere else? Networking

    July 06, 2019

    Can I send generated traffic through another switch to somewhere else? Networking

    Can I send generated traffic through another switch to somewhere else?

    Posted: 06 Jul 2019 11:30 AM PDT

    I have a packet generator used for testing. At the moment it writes to a dedicated NIC on a server and the device being tested is on the other end of the wire and sniffs the traffic.

    Is there a way to send this through a switch to somewhere else? The MACs, IPs and timestamps will all be wrong for the 'real' network so it needs to be kept isolated.

    submitted by /u/anomalous_cowherd
    [link] [comments]

    Back to basics.

    Posted: 06 Jul 2019 02:10 PM PDT

    Ok, first of all, this is my first time posting here. I'm a one man IT department with a modest amount of networking knowledge from being a 25N in the army. The majority of my civilian career however has been managing VMware and Wintel server administration, so please be gentle, I'm by no means a career network pro. I simply know enough to get by (or get in trouble) in small networks. A discussion in a private facebook group for IT folks about the fundamentals of Ethernet had wondering a few things and it was at this point, my brain ran away from me...

    ​

    (I'm going to number my questions so if you feel like answering any of them, you can number your answer)

    1. What were the origins/applications of "IP Broadcast" in the early days of ethernet?
    2. Was broadcast back then "litteral" in terms of literally broadcasting onto the coaxial medium or has it always been protocol based broadcast?
    3. What is the purpose of broadcast on the Internet as it is now? (Not in private networks, I get that)
    4. To what extent does WiFi implement ethernet? 4/5G?
    5. What/if any broadcast traffic is allowed to traverse the internet between or at least internal to ISPs today?
    6. Is there any authority that decides what/who is allowed to broadcast or is it just up to companies like Level3 to manage their own infrastructure's means of handling any broadcast traffic?
    7. Is digital traffic on coaxial cable from ISPs still modulated onto a carrier frequency or have the means evolved to be purely digital such as in Cat5? My instincts tell me it must still be modulated because the medium must loop for two-way traffic to traverse one wire. Am I wrong?
    8. If the above assumption is correct, do cable companies struggle with frequency management on wire? It sounds like the most nightmarish wave theory problem I've ever imagined.
    9. Might companies like this broadcast time or hardware events for infrastructure management or route analysis?
    10. Also wondering, on an ethernet network, could someone theoretically configure an FPGA to act like an ethernet controller that would accept packets destined for any IP/MAC address?
    11. Is placing intentionally non-compliant hardware on the Internet "illegal" in the same sense that the FCC punishes unlicensed radio broadcasters?
    12. I understand that with proper network segmentation, only traffic in that network segment could be trapped/interfered with but given a small/unsegmented private network, would this see the same data Wireshark would capture?
    13. How much of network infrastructure depends on trusting hosts to behave when it comes to bits on wire?
    14. What safeguards exist against hosts designed intentionally against protocol?
    15. Is the internet especially vulnerable to "rogue" hardware/infrastructure assets that manipulate traffic on the bit level? Is there any history of hardware based attacks on ethernet?

    Of course nobody has to answer any questions, but even if you only answer one question, I'm still grateful.

    submitted by /u/robtalada
    [link] [comments]

    Aruba SD-WAN - anyone using it?

    Posted: 06 Jul 2019 01:03 PM PDT

    We are looking into SDWan solutions and currently have Clearpass and some Aruba wireless infrastructure in place.

    Has anyone deployed Arubas SDWAN using 72XX or 70XX controllers for edge routing for mpls/internet?

    submitted by /u/ripbgp
    [link] [comments]

    eBGP - Multiple neighbors off one interface?

    Posted: 06 Jul 2019 01:45 AM PDT

    Might be a silly question but is it perfectly fine to have multiple eBGP neighbours with one common subnet between them all?

    Usually with a router we would use 2 interfaces and have a /30 off each with one eBGP neighbor off one interface.

    In this instance we have a active/standby ASA setup so im proposing making the transit subnet a /29 on one interface, into a switch (vss so also ha), and have our wan routers inside interface(which will be used to bring up the bgp session) also within this /29

    I think it is fine, but wanted some feedback before into ahead with the proposal on Monday.

    Reason behind this is it will save me having to mess about with interface zones, as all traffic will be coming in and out of one interface on the ASA, rather than potentially causing issues with statefull TCP checks etc

    submitted by /u/LittleWanger
    [link] [comments]

    Problem with VPRN

    Posted: 06 Jul 2019 06:48 AM PDT

    Hello guys, I am configure a vprn using nokia/alcatel for the core and cisco for the customers, and I am with a bit difficult, maybe someone can help me.

    My topology is this one:

    https://ibb.co/sHDPGjt

    I am using BGP in the core, and eBGP from PE to CE,but for example, this is my routing table for the bgp from one PE view:

    A:vRR# show router route-table =============================================================================== Route Table (Router: Base) =============================================================================== Dest Prefix[Flags] Type Proto Age Pref Next Hop[Interface Name] Metric ------------------------------------------------------------------------------- 1.1.1.1/32 Local Local 00h06m44s 0 system 0 2.2.2.2/32 Remote OSPF 00h06m25s 10 10.0.0.1 100 3.3.3.3/32 Remote OSPF 00h06m25s 10 10.0.0.1 200 10.0.0.0/31 Local Local 00h06m30s 0 toR2 0 10.0.0.2/31 Remote OSPF 00h06m25s 10 10.0.0.1 200 ------------------------------------------------------------------------------- No. of Routes: 5

    I can the the other PE and on customer, but I cant see the customer with the ip 10.2.2.1 from the other side.

    Here I leave the configuration of this PE: https://pastebin.com/cvfMpatx

    Thanks for any help...

    submitted by /u/raikone51
    [link] [comments]

    DHCP via VPN

    Posted: 06 Jul 2019 10:13 AM PDT

    Hello guys

    I don't know if this is the right place for this, but I have a question about VPN site to site

    I'm trying to implement site to site VPN between site A and site B ( either IPsec or GRE)

    Site A is using DHCP server for it's LAN scope I want site B to have the same scope from the same DHCP server is there anyway to implement that

    I searched through the cisco community but I didn't find a satisfied answer, I'm using 2 CISCO routers btw

    is there anyway you can help me with ?

    Edit : I decided to go with L2TPV3, thanks everyone And again I tried to get the client out of it but when they go all dumb i can't do nothing about it Anyways thanks for those who helped.

    submitted by /u/NekoHYR
    [link] [comments]

    Cisco key-chain update playbook

    Posted: 06 Jul 2019 12:52 AM PDT

    I made this playbook for learn more about ansible and for manage/update the key-chain key and date-time.

    It maybe be useful to someone else so here it is: https://github.com/max-cz/cisco_keychain_update

    submitted by /u/Max-8
    [link] [comments]

    Need recommendations for Top of Rack switch with BGP and IPS/DoS support

    Posted: 06 Jul 2019 02:05 PM PDT

    We are moving from leased servers to colocation, we will run BGP to advertise our own prefixes to the upstream provider. Half rack for now.

    I was first thinking about a classic pair of routers with VRRP and then another pair of switches with 2 NICs per host for redundancy, then I actually though:

    What about if the switches run BGP and we skip the routers altogether, but I don't know if this is something people are doing and what would be the cons/pros of doing it.

    Open to suggestions.

    Thanks,

    submitted by /u/felart
    [link] [comments]

    Meraki MR33 + Rukus R500, can they cooperate/extend?

    Posted: 05 Jul 2019 11:41 PM PDT

    I know they are relatively competing products, but if I've got a single MR33, that doesn't quite cover a space, and I also have a spare Rukus R500, is it plausible to use both to provide a full-zone coverage, albeit without the speciality features from the Meraki side, of course.

    ​

    Not using anything fancy like guest networks or even VLANs, purely for wifi coverage, extending the LAN segment; DHCP done by higher up. Is there anything special to make them work together, or is it simply a matter of giving both the same SSID and tuning power to reduce overlap pools?

    submitted by /u/VIDGuide
    [link] [comments]

    Airmagnet or Ekahau?

    Posted: 05 Jul 2019 05:16 PM PDT

    I've been using Airmagnet for about 14 years, but it's expensive and Tamograph is a bit like early versions of it, so not a bad choice (cheap) and then there's the 'industry leading' Ekahau. (Which isn't cheap either)

    I've recently conducted a multi floor survey for a client who specified that I use Ekahau, and these are my concerns with it.

    (I don't work for, or have any interest in, any of these software companies, I'm just a WiFi Surveyor and posted this as an FYI for anyone interested)

    1. If you conduct a survey on a site that already has multiple deployed AP's (or even use APoS), it doesn't use the physical data collected when you place Simulated AP's, it ignores all sources of attenuation and displays the Simulated AP signal propagation as if the walls Etc. don't exist. You need to add these attenuation sources manually, which then skews the results of the physical survey, since you are adding attenuation on top of attenuation. (Airmagnet bases the simulated attenuation and signal strength on the data already collected from the physical survey, and I'm sure Tamograph does as well).
    2. SNR visualisations appear to be way off. i.e You can select two adjacent AP's broadcasting on the same channels on each band and its shows no issues. (They will interfere and they will have an impact on SNR)
    3. Channel Interference (as above) is off. It shows the amount of interfering radios (see 6.), not the value of interference.
    4. You can't turn off the survey paths in survey mode, best you can do is grey them out, which clutters the floor plan. A nightmare when you have a complex floor plan and conducting multiple surveys.
    5. The entire building survey is a single file, so there's no easy way tor export particular parts of it. (You can open it with WinRar (it's an archive like docx), but it's a pile of json files etc, so impossible to pick apart.)
    6. You can't filter single SSID's for each AP (not sure how it works with Ekahau, but with AM we filter them out, as multiple SSID's seen on a single radio show as sources of (self) interference...might be OK though, jury's out on that until I give it more thought)

    Don't get me wrong, Airmagnet can be a pain in the hoop at times (i.e. having to enter separate MAC addresses etc. for every simulated AP on each band and intermittent crashes during surveys, even more when running Sims)....but you can hit Save at least without stopping the survey, unlike Ekahau which has to be paused/stopped, which also has a habit of locking up all your USB ports after disconnecting the adapter. (If you don't see the notification that it's dropped the adapter you can find yourself conducting a survey that isn't collecting any data.)

    Upshot is, I'm not impressed with Ekahau, it's only as good as your planning was before you deployed the AP's.

    ​

    #1 is a massive issue though.

    Real World Data is Gold, but it ignores this for estimations based on how thick (attenuating) you think a wall might be, rather than how much it was measured to be.

    By ignoring the collected data, you essentially have to start with a clean sheet every single time you add or move an AP.

    Fine if you have a room or two with a requirement for data traffic only, but when you have a high density deployment for voice & data with 40 or 50 AP's per floor requiring channel planning, it's a damn nightmare.

    submitted by /u/AirbearUK
    [link] [comments]
    Read more
    at

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel