• Breaking News

    [Android][timeline][#f39c12]

    Saturday, August 10, 2019

    UDP packets dropped, ressources to help a noob Networking

    UDP packets dropped, ressources to help a noob Networking


    UDP packets dropped, ressources to help a noob

    Posted: 10 Aug 2019 04:34 AM PDT

    Hello Guys,

    Not sure if it the right section : I work on a C# application (but language is irrelevant here), and we happen to have a huge issue of dropped UDP packets recently.

    I'm not an expert in networking, but I'm starting to get a grasp on this kind of issue (each time we got a network issue, I got to learn a bit more, or each time I discuss it with knowledgeable people).

    But this time I want to have a more complete grasp on what is happening. Could you advise me on ressources : Books, blogs, YouTubers, to help me have a complete understanding on this kind of subject ?

    For example, how UDP packets are handle by the network card, what are the parameters (and windows parameters) that can have an effect on it, or on the internal buffer of the card, how it interacts with Windows native sockets and internal buffers, what parameters can I use at this level. How to identify if the dropped packets comes from my app or the network ....

    You get the idea (I hope)

    submitted by /u/Red_Thread
    [link] [comments]

    What do you use for gathering Netflow data?

    Posted: 10 Aug 2019 12:58 AM PDT

    Hello,

    We use Solarwinds to monitor our network equipment and Netflow data. We are 99% Cisco and our IT Director and Manager no longer like Solarwinds as they cost to much. I kind of agree and can see they are lots of open source products out there. I was just wondering what you use to monitor?

    We also monitor our servers and Azure metrics.

    Thanks

    submitted by /u/G0nz0uk
    [link] [comments]

    DMVPN - first config, hub doesn't learn EIGRP routes

    Posted: 10 Aug 2019 08:54 AM PDT

    Hi.

    I'm making DMVPN config for customer for the first time and have some issues with EIGRP. Spoke (for now there's only one) learns EIGRP routes advertised by Hub, but not the other way around.

    DMVPN is formed correctly (EDIT - sorry, spoke sits in DMZ, hence "DN" status in "show dmvpn - not sure if that's important), same for EIGRP neighborship.

    Hub (3945): Gi0/0 (LAN), Gi0/3 (WAN)

    Spoke (3925): Gi0/0 (LAN), Gi0/2 (WAN)

    Configs below:

    ***HUB*** interface Tunnel1 description DMVPN-HUB ip address 10.255.141.254 255.255.255.0 no ip redirects ip mtu 1400 ip authentication mode eigrp 1 md5 ip authentication key-chain eigrp 1 EIGRP-KEY no ip split-horizon eigrp 1 ip nhrp authentication NHRP_PASSWORD ip nhrp network-id 100 ip nhrp redirect ip tcp adjust-mss 1360 qos pre-classify keepalive 10 3 tunnel source GigabitEthernet0/3 tunnel mode gre multipoint tunnel key 111111111111111 tunnel protection ipsec profile DMVPN_IPSEC_PROFILE shared router eigrp 1 network 10.255.141.0 0.0.0.255 network 192.168.0.0 passive-interface default no passive-interface Tunnel1 eigrp router-id 10.255.141.254 ***SPOKE*** interface Tunnel1 ip address 10.255.141.77 255.255.255.0 no ip redirects ip mtu 1400 ip authentication mode eigrp 1 md5 ip authentication key-chain eigrp 1 EIGRP-KEY ip nhrp authentication NHRP_PASSWORD ip nhrp map multicast PUBLIC_IP_REDACTED ip nhrp map 10.255.141.254 PUBLIC_IP_REDACTED ip nhrp network-id 100 ip nhrp holdtime 600 ip nhrp nhs 10.255.141.254 ip nhrp shortcut ip tcp adjust-mss 1360 if-state nhrp qos pre-classify keepalive 10 3 tunnel source GigabitEthernet0/2 tunnel mode gre multipoint tunnel key 111111111111111 tunnel protection ipsec profile DMVPN_IPSEC_PROFILE shared router eigrp 1 network 10.255.141.0 0.0.0.255 network 192.168.77.0 passive-interface default no passive-interface Tunnel1 eigrp router-id 192.168.254.77 eigrp stub connected summary 

    Any ideas what's happening?

    EDIT: IOS versions (I'm hesitant to update it because I had sooo many problems with AnyConnect on hub killing it...):

    • HUB: 15.7(3)M2

    • Spoke: 15.1(4)M4

    EDIT2: BRAIN IS DEAD. Of course EIGRP won't advertise network if the interface is down...

    submitted by /u/marek1712
    [link] [comments]

    PoE help

    Posted: 10 Aug 2019 11:18 AM PDT

    Hey everybody,

    Been lurking for a while now. Finally making my first post. Anyway, I need some clarification on how exactly I'd use PoE on a device that supports it. For reference, this is the device I'm considering. It has a dc power input and PoE-in on the internet port.

    What I'm wondering is will it provide PoE out ports 2-5 regardless of how I power it? (eg. dc input vs PoE-in port)

    And just to be clear, I'm more asking this in general, not just in the context of the mikrotik device. That just happens to be the device that sparked this question.

    Thanks in advance for your help everybody.

    submitted by /u/bagostini
    [link] [comments]

    Used Cisco update

    Posted: 10 Aug 2019 10:35 AM PDT

    It looks like buying used cisco stuff is going to get a ton harder to get.

    https://www.ifixit.com/News/cisco-is-making-it-more-difficult-to-use-pre-owned-hardware

    submitted by /u/demonfurbie
    [link] [comments]

    E911 calling wireless

    Posted: 09 Aug 2019 04:19 PM PDT

    So we're switching from hardphones to Jabber softphones. We just learned that for e911 calling with Jabber, it can only differentiate location using different subnets as opposed to CDP with our previous phones.

    For wired devices, we can just create a different subnet per floor, so not a big deal. However, how are we supposed to do this with wireless? If we break each floor into its own subnet, we'll have handoff issues and bleed through issues which I'm sure will cause all kinds of fun as folks walk around and between floors with their laptops.

    How are you all solving these issues?

    Update: We are in Michigan and this is the requirement that we, as a building over 40,000 feet, have to abide by.

    "To extend until the end of 2019 the deadline on a requirement that owners of buildings larger than 40,000 square feet with a multiline phone system must install equipment and software that reveals where in the building a 911 call comes from."

    https://www.michiganvotes.org/2016-SB-878

    submitted by /u/marbell35
    [link] [comments]

    DHCP relay on Juniper EX4300 not sending response back to client

    Posted: 10 Aug 2019 12:39 PM PDT

    Juniper EX4300 - DHCP relay response dropped by switch

    Hi,

    I have a simple topology with Juniper EX4300 as the access-switch and DHCP server running on a VM connected thru an L3-interface (ge-0/0/12). A host connected to ge-0/0/0 is trying to get IP using DHCP. I see(log at the end) that the request is being relayed to the server, getting a response back, juniper stack is processing it, and then dropping it with the following reason:

    Aug 10 19:51:47.218568 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] jdhcpd_packet_handle: *** routing packet ***

    Aug 10 19:51:47.218636 [NOTE] jdhcpd_io_route_packet: Failed to route packet, No route to host

    Can you please have a look at the config, state, and logs, and comment on what config is wrong from my side?

    Regards,

    Ramesh

    root> show version

    fpc0:

    --------------------------------------------------------------------------

    Model: ex4300-48p

    JUNOS EX Software Suite [13.2X51-D35.3]

    JUNOS FIPS mode utilities [13.2X51-D35.3]

    JUNOS Online Documentation [13.2X51-D35.3]

    JUNOS EX 4300 Software Suite [13.2X51-D35.3]

    JUNOS Web Management [13.2X51-D35.3]

    JUNOS py-base-powerpc [13.2X51-D35.3]

    ##DHCP Relay configuration

    root> show configuration forwarding-options

    storm-control-profiles default {

    all;

    }

    dhcp-relay {

    server-group {

    ws-dhcp {

    10.10.5.0;

    }

    }

    active-server-group ws-dhcp;

    group all {

    interface irb.10;

    }

    }

    ## Host interface

    root> show configuration interfaces ge-0/0/0

    unit 0 {

    family ethernet-switching {

    vlan {

    members VLAN0010;

    }

    storm-control default;

    }

    }

    ## L3 uplink to connect to DHCP server

    root> show configuration interfaces ge-0/0/12

    unit 0 {

    family inet {

    address 10.10.2.3/24;

    }

    }

    ## Static route to DHCP server towards uplink

    root> show configuration routing-options

    static {

    route 10.10.5.0/24 next-hop 10.10.2.2;

    }

    ## SVI/BVI/IRB interface for VLAN 10

    root> show configuration interfaces irb.10

    family inet {

    address 10.10.30.1/24;

    }

    ## VLAN 10 configuration

    root> show configuration vlans VLAN0010

    vlan-id 10;

    l3-interface irb.10;

    root> show vlans

    Routing instance VLAN name Tag Interfaces

    default-switch VLAN0010 10

    ge-0/0/0.0*

    root> show dhcp relay binding

    IP address Session Id Hardware address Expires State Interface

    0.0.0.0 1 00:e0:4c:68:08:bc 0 SELECTING irb.10

    root> show ethernet-switching table brief

    Ethernet switching table : 1 entries, 1 learned

    Routing instance : default-switch

    Vlan MAC MAC Age Logical

    name address flags interface

    VLAN0010 00:e0:4c:68:08:bc D - ge-0/0/0.0

    root> show log dhcp_logfile | last 100

    Aug 10 19:51:47.214000 [INFO] [default:default-switch][RLY][INET][ge-0/0/0.0] --[ OPTION code 12, len 12, data 4d 61 64 68 61 76 61 73 2d 4d 42 50 ]--

    Aug 10 19:51:47.214032 [INFO] [default:default-switch][RLY][INET][ge-0/0/0.0] --[ OPTION code 255, len 0 ]--

    Aug 10 19:51:47.214058 security-packet-handle input bd VLAN0010

    Aug 10 19:51:47.214091 [DEBUG] jdhcpd_security_client_key_compose: mac 0 e0 4c 68 8 bc subnet 0 key_type CK_TYPE_SECURITY_V4 8

    Aug 10 19:51:47.214124 [INFO] jdhcpd_security_packet_handle: security-packet-handle client entry not found from client pdu

    Aug 10 19:51:47.214162 [INFO] [default:default][RLY][INET][ge-0/0/0.0][SID=1] jdhcpd_packet_relay: *** relaying packet ***

    Aug 10 19:51:47.214200 [DEBUG][default:default][RLY][INET][ge-0/0/0.0][SID=1] jdhcpd_packet_relay: Setting giaddr for non L3-wholesale client, interface ge-0/0/0.0, flags 2050, address 10.10.30.1

    Aug 10 19:51:47.214236 [INFO] [default:default][RLY][INET][ge-0/0/0.0][SID=1] jdhcpd_packet_relay: added giaddr 10.10.30.1

    Aug 10 19:51:47.214276 [INFO] [default:default][RLY][INET][ge-0/0/0.0][SID=1] jdhcpd_packet_relay: Using server group ws-dhcp, with 1 DHCP server(s)

    Aug 10 19:51:47.214791 [INFO] [default:default][RLY][INET][ge-0/0/0.0] jdhcpd_io_send_packet: DHCP PDU from 10.10.30.1 to 10.10.5.0 port 67 out interface 568 len 300

    Aug 10 19:51:47.216353 [INFO] jdhcpd_io_l2ng_pfe_reader: jdhcpd_pfe_pkt_hdr_t: len 328 L3ifindex = 602, L2ifindex = 0, dpi_rtbl=0

    Aug 10 19:51:47.216420 rc_entry_sus_find_ipaddr: TYPE 0 for IP ADDR 10.10.30.1 in routing context LR default/RI default-switch

    Aug 10 19:51:47.216467 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] jdhcpd_io_pfe_packet: SNOOP : recv sa 10.10.30.1 da 10.10.30.1, src_port 67, dst_port 67 if name ge-0/0/12.0 len 300

    Aug 10 19:51:47.216507 [INFO] --[ DHCP/BOOTP from == 10.10.5.0, port == 67 ]--

    Aug 10 19:51:47.216536 [INFO] --[ DHCP/BOOTP size == 300, op == 2 ]--

    Aug 10 19:51:47.216563 [INFO] --[ DHCP/BOOTP flags == 0 ]--

    Aug 10 19:51:47.216590 [INFO] --[ DHCP/BOOTP htype == 1, hlen == 6 ]--

    Aug 10 19:51:47.216617 [INFO] --[ DHCP/BOOTP hops == 1, xid == 84d6e0b0 ]--

    Aug 10 19:51:47.216644 [INFO] --[ DHCP/BOOTP secs == 4, flags == 0000 ]--

    Aug 10 19:51:47.216672 [INFO] --[ DHCP/BOOTP ciaddr == 0.0.0.0 ]--

    Aug 10 19:51:47.216700 [INFO] --[ DHCP/BOOTP yiaddr == 10.10.30.10 ]--

    Aug 10 19:51:47.216729 [INFO] --[ DHCP/BOOTP siaddr == 10.10.5.0 ]--

    Aug 10 19:51:47.216757 [INFO] --[ DHCP/BOOTP giaddr == 10.10.30.1 ]--

    Aug 10 19:51:47.217117 [INFO] --[ DHCP/BOOTP chaddr == 00 e0 4c 68 08 bc 00 00 00 00 00 00 00 00 00 00 ]--

    Aug 10 19:51:47.217151 [INFO] --[ DHCP/BOOTP sname == ]--

    Aug 10 19:51:47.217178 [INFO] --[ DHCP/BOOTP file == ]--

    Aug 10 19:51:47.217211 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 53, len 1, data DHCP-OFFER ]--

    Aug 10 19:51:47.217246 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 54, len 4, data 0a 0a 05 00 ]--

    Aug 10 19:51:47.217290 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 51, len 4, data 00 00 1c 20 ]--

    Aug 10 19:51:47.217324 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 1, len 4, data ff ff ff 00 ]--

    Aug 10 19:51:47.217359 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 3, len 4, data 0a 0a 1e 01 ]--

    Aug 10 19:51:47.217397 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 15, len 11, data 65 78 61 6d 70 6c 65 2e 6f 72 67 ]--

    Aug 10 19:51:47.217429 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 255, len 0 ]--

    Aug 10 19:51:47.217481 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP from == 10.10.5.0, port == 67 ]--

    Aug 10 19:51:47.217831 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP size == 300, op == 2 ]--

    Aug 10 19:51:47.217869 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP flags == 0 ]--

    Aug 10 19:51:47.217901 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP htype == 1, hlen == 6 ]--

    Aug 10 19:51:47.217932 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP hops == 1, xid == 84d6e0b0 ]--

    Aug 10 19:51:47.217963 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP secs == 4, flags == 0000 ]--

    Aug 10 19:51:47.217997 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP ciaddr == 0.0.0.0 ]--

    Aug 10 19:51:47.218030 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP yiaddr == 10.10.30.10 ]--

    Aug 10 19:51:47.218136 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP siaddr == 10.10.5.0 ]--

    Aug 10 19:51:47.218176 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP giaddr == 10.10.30.1 ]--

    Aug 10 19:51:47.218220 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP chaddr == 00 e0 4c 68 08 bc 00 00 00 00 00 00 00 00 00 00 ]--

    Aug 10 19:51:47.218251 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP sname == ]--

    Aug 10 19:51:47.218290 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ DHCP/BOOTP file == ]--

    Aug 10 19:51:47.218322 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 53, len 1, data DHCP-OFFER ]--

    Aug 10 19:51:47.218360 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 54, len 4, data 0a 0a 05 00 ]--

    Aug 10 19:51:47.218396 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 51, len 4, data 00 00 1c 20 ]--

    Aug 10 19:51:47.218431 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 1, len 4, data ff ff ff 00 ]--

    Aug 10 19:51:47.218465 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 3, len 4, data 0a 0a 1e 01 ]--

    Aug 10 19:51:47.218503 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 15, len 11, data 65 78 61 6d 70 6c 65 2e 6f 72 67 ]--

    Aug 10 19:51:47.218535 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] --[ OPTION code 255, len 0 ]--

    Aug 10 19:51:47.218568 [INFO] [default:default-switch][RLY][INET][ge-0/0/12.0] jdhcpd_packet_handle: *** routing packet **\*

    Aug 10 19:51:47.218636 [NOTE] jdhcpd_io_route_packet: Failed to route packet, No route to host

    {master:0}

    root>

    submitted by /u/rameshpvn
    [link] [comments]

    VPN with lowest latency

    Posted: 10 Aug 2019 08:23 AM PDT

    Hi guys, between the following options:

    • remote L2TP user
    • site-to-site vpn
    • wireguard

    which offers the lowest latency? why?

    i am trying to create smoothest connections for users in site B to access resources in site A (both have 1000/1000 ISP).

    Thanks for your time!

    submitted by /u/Agonbrex
    [link] [comments]

    Updating relevant bodies of IP range geo-location

    Posted: 10 Aug 2019 02:16 AM PDT

    We have a /21 and a /22 that we currently announce out of the UK. We are opening a new data centre in a different country in a few months time and want to trim what we announce in the UK and announce a /24 out of our new DC.

    Who do we need to notify about the change of geo-location for this range so that users in that country who will come from behind those addresses are correctly geo-located by the relevant content providers?

    submitted by /u/LittleWanger
    [link] [comments]

    Cisco TrustSec?

    Posted: 09 Aug 2019 04:11 PM PDT

    Anyone here deploying TrustSec or currently running TrustSec? We are currently in the thick of it and shocker, it's a pain in the a$$. Currently attempting enforce on the existing tags we have with about 40K+ users. Any advice is welcome. What not to do, what you should be doing, etc.

    From what we have gathered from Cisco, we are one of the largest and most aggressive companies when it comes to deployment strategy so if you need me, I'll be on the phone with TAC discussing what bug we are currently hitting :)

    Edit: Please tell me someone else is implementing TrustSec and we aren't the only ones dumb enough...

    submitted by /u/myaccount4workhours
    [link] [comments]

    Cabling the office, router and switch are 1GB, same for ethernet ports on computer but speed is 100-200 at best

    Posted: 09 Aug 2019 11:43 PM PDT

    I have got a new office,(one room dedicated to servers, 4 rooms for employees. I have got 1 switch for each room, with 4 Gb ports each, and one router with 4 GB ports, which act as both wifi router and LAN, connected to a cable modem.

    The issue is that I am getting pretty low speed all over the network. The person that sold me the place, told me that they cabled the office with Cat6 cables few years ago; although they are in the wall, so I have no way to check them.

    Is there an easy way to verify the speed of each element on the network, to figure out if the problem is the cables in the wall? I am using the wall cabling from the modem to the router, and from the router to the wall plugs, which connect to the switches; I checked the cables that are not in the wall, and they are CAT6, so should support gigabit ethernet like the rest of the hardware.

    submitted by /u/fttklr
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel