• Breaking News

    [Android][timeline][#f39c12]

    Tuesday, August 13, 2019

    Cabling an office without a raised floor Networking

    Cabling an office without a raised floor Networking


    Cabling an office without a raised floor

    Posted: 13 Aug 2019 07:19 AM PDT

    Our last office had a raised floor so we could run all the cabling under the floor and have it pop out in a box under the desk.

    Our latest office has cabling run all the walls in trunking, and rows of wall ports near the desks.

    This has worked, but obviously means all desks need to be touching the walls otherwise you have cabling running over the carpet.

    We have another office build due in October and I want to look at other options such as running cabling down poles or something.

    What are you all doing in an office space without raised flooring?

    submitted by /u/LittleWanger
    [link] [comments]

    Why does some telecoms equipment we install, use -48Vdc? What’s the relevance for the negative voltage?

    Posted: 13 Aug 2019 07:31 AM PDT

    Disappointed about new Checkpoint 23900 Firewalls HPP

    Posted: 13 Aug 2019 01:07 PM PDT

    We bought new CheckPoint 23900 FWs are already had two big problems.

    1. We were not able to receive the actual R80.20 GA take. Neither online or offline were successful. We just received an strange error massage.

    We contacted the CheckPoint Support and they told us "yeah this bug has already happend for other customer, please just reinstall R80.20 with isomorphic and you are fine." -> Nothing was documented about this known bug

    Problem was solved with this "workaround"

    1. During our migration period we had to shutdown one of our bond interfaces. A shutdown caused a core dump / crash and rebooted the systems. After two reboots our RAID1 was corrupted and we had to wait to re-establish the RAID.

    Currenty I am rully frustrated about this new 23900 model. Also the lack of documentation and bugs with the Firewall is really frustrating, if you think about the 6-digit price tag. I expected a much more stable and less buggy system to be honest.

    Has somebody same experiences with this model or with Checkpoint overall ?

    My experiences with Fortigate the last two years were much more positiv.

    submitted by /u/ProxyOps
    [link] [comments]

    Meraki VLAN Troubleshooting Steps Exhausted

    Posted: 13 Aug 2019 01:21 PM PDT

    Reached a stopping point in my troubleshooting, I've exhausted all my options. Hoping the community can help point me in the righ direction.

    I'm trying to access a server from my workstation on the Wired VLAN. All pings, and http requests to the server come back null. We can access the server in question from our WiFi VLAN, Meraki APs, no problem. There are 5 VLANs total. The server in question is on its own VLAN called Security. The other two are VoIP and Guest WiFi.

    I have an email from the predecessor detailing to connect to a specific port on the switch, change the NIC config to match the Subnet and hit the server IP in a Browser. Looking at that port's config it's exactly the same as the port config of my workstation: same VLAN, VoIP VLAN, Access (instead of Trunk). How is this possible?

    I've mirrored my workstation's port config to the WiFi's port config and still nothing.

    The Meraki is showing 2 DHCP servers for the Wired VLAN. One is the Meraki, the other is our secondary Domain Controller. Could this be the issue? All other VLANs only show the Meraki as thir DHCP server.

    I can ping devices on the WiFi VLAN from the Wired VLAN

    What the heck is going on?

    Is it a port rule? Is it a VLAN rule?

    Any help is greatly appreciated

    submitted by /u/SicSemperTympanis
    [link] [comments]

    Business case example

    Posted: 13 Aug 2019 03:52 PM PDT

    Double post delete

    submitted by /u/CaliforniaIT
    [link] [comments]

    POE Injector Question

    Posted: 13 Aug 2019 11:20 AM PDT

    Anyone know if the Multi-Port POE injectors can be triggered to power off a port depending on if the switch port it is plugged into is active? I have a Cisco SG300-28 which does not have POE, but I would like get rid of multiple POE injectors. Since this a good managed switch I do not want to spend $400+ to replace it with a new switch just for POE. But it would be nice to have the ability to power down a device when needed.

    I was looking at purchasing this one below.

    https://www.amazon.com/gp/product/B01IODMBRY/ref=ox_sc_act_title_1?smid=A2SZCFXJT89WME&psc=1

    submitted by /u/raidflex
    [link] [comments]

    Business case example

    Posted: 13 Aug 2019 02:35 PM PDT

    Hello,

    I was wondering if anyone has business cases for network upgrades ... I'm happy to pay few hundred.

    I understand that ROI and lots of case is tailored to organization but that fine.

    Please DM me

    I will use this as an template.

    submitted by /u/CaliforniaIT
    [link] [comments]

    Is it feasible to run your own DOCSIS point-to-point network with cheap OTS hardware?

    Posted: 13 Aug 2019 02:03 PM PDT

    Let's say a I want to create an IP link between two points 50 miles apart and there is already (unused) coaxial cable in place. What kind of hardware would one need to make this work? I assume it wouldn't be as easy as screwing two Motorola DOCSIS 3.1 modems in on each end, but I also don't want to start an entire ISP for a point-to-point link. Is anything like this done in practice? Could it be done, say, in an old house without Ethernet but with lots of coax in the walls?

    Would there be issues with asymmetry in the up/down speeds?

    submitted by /u/jagger27
    [link] [comments]

    QFX5100 - still not on FreeBSD 10+

    Posted: 13 Aug 2019 01:58 PM PDT

    Does anyone know for sure if QFX5100 does not support FreeBSD 10+ kernel?

    I loaded up 18.1.R3-S6.1 on a QFX5100 in my lab and was surprised when I didn't have to two-step the upgrade (it was on 13.x). And then looking here, I see that QFX5100 is noticeably absent:

    https://apps.juniper.net/feature-explorer/feature-info.html?fKey=6880&fn=Junos%20kernel%20upgrade%20to%20FreeBSD%2010%2B

    But Juniper is also notorious for terrible docs.

    submitted by /u/JaySuds
    [link] [comments]

    Internet cutoff theories

    Posted: 13 Aug 2019 01:17 PM PDT

    Me and my co-worker love talking about what-ifs and how-would that play out a lot, and we are stumped on this topic. We began talking about the shutdown of the internet in Egypt back in 2011. I have a little bit of a computer background, but no where near on the scope to fully explain or understand weather its possible to completely cut off a region/country's internet access. I know that to cut off the internet in a region, you have to kill the countries DNS and plug their border gateway protocol. The part i don't understand is, they cannot stop satellite based internet connections can you? i mean, can't a satellite just relay a request to the nearest satellite with an open gate? I know its asking alot but could someone with a more technical background/knowledge of this explain why or why not this is/isnt possible?

    submitted by /u/brad35309
    [link] [comments]

    Any thoughts on HPE Aruba??

    Posted: 13 Aug 2019 07:17 AM PDT

    Hello guys!

    I'm a Looong time Cisco Classic user who is now in the process of upgrading. I've heard allot about HPE Aruba but not looked much into it.

    Anyone here have any general experience with them?

    submitted by /u/ciizone
    [link] [comments]

    Is it legal to decrypt signals that are passively receivable?

    Posted: 13 Aug 2019 12:56 PM PDT

    First I'd like to point out I'm not certain if this is the right place for this question, I couldn't find a better place to ask.

    My question is - if Alice were to send an encrypted message to Bob over the air (lets just say using WiFi), would MaliciousMan be breaking any U.S. laws by also receiving the data and decrypting it? MaliciousMan would have absolutely no active involvement, simply receive the message and use something locally to decrypt it. (of course we are being theoretical, assuming MaliciousMan has somehow managed to procure the ability to decrypt within a reasonable time frame AES, SSL and/or whatever else.) Imagining Alice and Bob to be, for example, your grandma logging into her online banking.

    submitted by /u/xorist
    [link] [comments]

    Mcast across networks on SonicWALL

    Posted: 13 Aug 2019 12:52 PM PDT

    The AV guys brought in a device that should probably sit on our IoT subnet, which doesn't have direct access to guest or the private network. However, private and guest should have access to this network. They do via firewall rules, but my problem is that these devices use multicast to broadcast their availability and I can't figure out how to get them to broadcast to other networks (if that's even how it should work). In short, I want to be able to see these devices from both the guest and the private network.

    My Google Fu has sent me on an 8 hour trip to nowhere. Can anyone point me in right direction? This link on ServerFault is basically what I'm trying to do, but the KB link in one of the comments is dead.

    submitted by /u/jackmusick
    [link] [comments]

    Firewall setup advice - small businesses

    Posted: 13 Aug 2019 12:39 PM PDT

    Looking for some advice regarding firewall setups for small businesses, I've done it a few years back but just looking for reminders / pointers.

    1. What firewalls do you guys recommend for small business networks (around 5-20 users)?
    2. Any good guide / best practice articles ? (I've googled a few but sometimes there's one guide everyone swears by)
    3. Do most firewalls come with cloud access? I've used Fortinet years ago and they did - plus is this advised to setup or not for security?

    Any other tips appreciated

    submitted by /u/newad01
    [link] [comments]

    Guest WiFi Splash Page

    Posted: 13 Aug 2019 12:31 PM PDT

    Hey guys! I'm trying to figure out why a computer isn't getting the splash page for a guest wifi sign in. In doing this I've realized I don't actually know how that system works other than sending an HTTP request or an ICMP request to the client trying to connect but I have no clue where it stores the information when the user says "i agree" and then connects to the internet.

    Where can I find a tutorial or information about guest wifi splash page and how that system works at the network level?

    submitted by /u/i_vant_my_burd
    [link] [comments]

    How much Layer 2 traffic is there on an average subnet?

    Posted: 12 Aug 2019 05:40 PM PDT

    Many years ago I worked for an ISP where we learned a lot more MAC addresses than you'd expect from a non-insignifigant number of our commercial customers. In the office we'd chuckle amongst ourselves that these companies clearly didn't know routing from switching.

    I know in some odd cases you might need to have a subnet stretch across a private line, but we saw some extreme cases. There were internet circuits where we were learning two thousand MACs from a school district. There were private VPLS networks with hundreds of MACs. Etc.

    I always wondered how much money these companies were probably wasting each month by needing a larger bandwidth pipe for all that L2 traffic. At $1k/mo even a 10% reduction could save a company $1,200 a year.

    This question has been bugging me for years. I really need to set up Wireshark to do a test on my own subnet at work but I keep forgetting to. Maybe the responses from this post will remind me to. Even then, I'm not sure the traffic on our subnet will be average compared to other companies.

    What's your experience with these things been?

    submitted by /u/flapanther33781
    [link] [comments]

    ASA v SRX

    Posted: 13 Aug 2019 10:17 AM PDT

    Looking for a good LAN firewall no FWNG crap, need redundancy, need to be able to direct terminate VPNs.

    submitted by /u/supnul
    [link] [comments]

    WIFI Heatmap/Planning Software?

    Posted: 13 Aug 2019 08:58 AM PDT

    What is everyone using to do WIFI planning/heatmapping?

    submitted by /u/djwyldeone
    [link] [comments]

    Cannot ping device on another VLAN

    Posted: 13 Aug 2019 11:39 AM PDT

    I have a device that is on a VLAN2 and I am not able to ping it from another VLAN1. Even though I am able to ping other devices on that same VLAN2 from VLAN1. You can see the diagram here of what I am trying to say. Thanks!

    submitted by /u/enjoiracin
    [link] [comments]

    ASR1004 VS ASR1006

    Posted: 13 Aug 2019 01:25 AM PDT

    Hello everyone,

    Since i recently started my first job as (co)infrastructure engineer i want to make a good first desiscion.

    I'm looking at ASR1004, ASR1006 and ASR1006-X for my company backbone. We are a B2B internet provider.

    And I would like to know pros and cons of these routers, and understand the difference between 1006 and 1006-X.

    I have been looking at 9000 series too and I'd like someone to give personal feedback.

    Thank you in advance!!

    submitted by /u/Nickl1904
    [link] [comments]

    Critique my networking workshop outline?

    Posted: 12 Aug 2019 04:16 PM PDT

    I've been asked to conduct a networking workshop to teach basic networking to some members of our IT department. They also wanted some hands on stuff, so I dug out an old 8-port Cisco switch and a smaller router (1900 series) from storage.

    I've been thinking of how to structure the class, and I think I've come up with a rough lesson outline, but I wanted to bounce some ideas off all of you.

    Anyway, here goes...

    • First part of the class starts with some slides, before we jump right into labbing.

    • Start by showing the OSI Model and confirming that everyone's seen this and knows what it is.

    • Tell them to forget that and then bring in the TCP/IP model (which I feel better represents what you actually see in real life.)

    • Work up from the bottom of the stack

    • Physical layer stuff explaining basic concepts like sending pulses on the line in a specific timing window to create "symbols". (Make obvious reference to telegraphs, and explain how it's like that only faster and machines read the symbols instead of humans.) (Spend no more than 5 minutes on this part, this isn't electrical engineering it's basic networking)

    • Explain concepts like half vs full duplex, Auto-Negotiate and a few standards like 100base-T, 1000base-T, 1000base-sx, etc. (Again spend no more than 3-5 minutes on this part maybe just 1 slide to show a few basic pinouts and connectors.)

    • Delve into layer 2 and give an explanation on the Ethernet standard and the structure of a frame. Explain about MAC Addresses, and broadcast vs unicast.

    • Explain about how switches build a layer 2 forwarding table, explain mac learning, and Broadcast & Unknown Unicast flooding.

    • First lab, everyone plugs a laptop into the switch and I have them all IP their machines based on seat number, and ping each other with no default gateway configured. I run wireshark on my machine, and show off all the ARP broadcasts as their machines seek out which layer 2 address they should send these packets to. (I'm hoping this part blows them away.)

    • Taking a short break, we'll be moving on to layer 3 when return.

    • More slides when they come back. I'll explain about layer 3 and how the layer 2 frames carry layer 3 packets in them when it needs to be written on the wire. I'll show them the IPv4 Packet Header and explain some of the basic concepts.

    • I'll load a new configuration on the switch that puts every 2 ports in a separate VLAN. I'll have the class re-IP their laptop based on flipping their index card over and seeing their new address, subnet mask, and gateway.

    • Confirm that they can still ping eachother in the same VLAN but they can't ping the laptops in the other VLAN's any more.

    • Ill introduce the concept of routing and how it's used to get between different networks. At this point I'll hook up the 1900 to the switch and make them watch while I configure a basic Router on a Stick configuration. I'll then make them watch while I put together a quick trunk port on the switch.

    • Everyone will set their default gateway based on the previous configuration.

    • Everyone will confirm they can now ping each other. The Router is routing their packets between the different VLAN's.

    • Now at this point I'll ask various people around the room questions and toss them a piece of candy if they get it right. Review questions like "what does a switch do if you send it a frame to a destination MAC Address that isn't in its forwarding table?" and "how do hosts determine where they should send their layer 2 frames when they want to talk to a specific IP Address?)

    • After the section we finish up with Transport Layer and Application layer. Briefly explain about source port, destination port, show a TCP header and a UDP headers.

    • Obligatory explanation of "TCP vs UDP" lol (every networking class should always mention this, right?)

    • Show a wireshark capture of me SSH'ing to the switch from my laptop or something so we can see the ports in the packets, and sequence numbers and ACK's etc, also they can see the crypto handshake

    • By then it will probably be around lunch time, so class dismissed.

    What do you all think? I know it sounds kinda lame right now, I've been thinking of ways to make it more interactive like making them "be a switch" and write out "frames" on index cards and build a mac table, but some of that could possibly take up too much time or be a little difficult to orchestrate.

    Also I'm kinda not happy with not having at least a 2-hop routing scenario. I was originally wanting to make a 3-router network and have everyone taking via static routes, and show how many static routes they need, and then configure like a super basic "router ospf 1, network 10.0.0.0" configuration to show how easy that made it, or heck even just "router rip" and done... but I think it would take too much time and the fan noise from the 3 routers would make it difficult for people to stay focused.

    EDIT: Another big concern is that it doesn't touch subnetting or binary, which seem staples in all beginner level courses. Do I dare skip this?

    Any thoughts?

    submitted by /u/MyFirstDataCenter
    [link] [comments]

    MacOS - Binding ethernet connection to a specific app, while using wifi for the rest

    Posted: 13 Aug 2019 11:03 AM PDT

    I've tried searching the internet for a guide on this (or to see if it was possible), but I can't seem to find something exact (or at least I just didn't understand it), so I thought I would reach out on here. Here is what I am trying to do (using a personal Macbook on MacOS 10.15):

    1) Connect my work ethernet to the the laptop and bind the ethernet connection specifically to my Citrix Workspace application so I can use a windowed and secure windows VDI session.

    2) Connect to my work visitor wifi for internet and all other mac apps (mail, browsers, messages, etc).

    Is this possible? The issue is that our ethernet is very restrictive and blocks a lot of things (like social media), however, these are allowed on the wifi from personal devices.

    I can access my VDI session through the wifi and go solely wifi, but I was hoping to use the ethernet connection as it will allow me to skip the RSA authentication (which kicks me off after inactivity, despite the session locking itself, which is a huge pain).

    submitted by /u/DarkPrinc3
    [link] [comments]

    HP5130 console ports dead?

    Posted: 13 Aug 2019 05:02 AM PDT

    Hi,

    a few days ago you guys were very helpful regarding my question about upgrading my HP5310 stack. I wanted to make sure everything is ready for the scheduled downtime on thursday but I'm unable to access the console ports of any of the stacked switches.

    I used the original cable (ethernet to serial) and a serial to usb dongle and used the following parameters in putty:

    Serial line to connect to: COM1 (this is correct)
    Speed: 9600
    Data bits: 8
    Stop bits: 1
    Parity: none
    Flow control: none
    Putty then tries to connect but nothing happens, window stays blank. Same thing happens when I try to connect directly with another server which has an onboard serial port.

    The indicator lights of the console ports are off the whole time. The dashboard in webgui doesn't even show the console ports.

    I tried to enable ssh in the web gui which seemed to work but if I connect, I get "Server unexpectedly closed network connection" after entering the password.

    I was planning to upgrade the software with the web gui but am a bit concerned now because without console or ssh access there is no second option in case of failure. Any thoughts? Thanks in advance!

    submitted by /u/0815_argh
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel