• Breaking News

    [Android][timeline][#f39c12]

    Friday, January 31, 2020

    Home Unlabelled ARIN runs out of IPv4 address space (again) Networking

    ARIN runs out of IPv4 address space (again) Networking

    January 31, 2020

    ARIN runs out of IPv4 address space (again) Networking

    ARIN runs out of IPv4 address space (again)

    Posted: 31 Jan 2020 02:09 PM PST

    If you weren't aware, ARIN got back a large quantity of address space that they had been using to fulfill requests on the waiting list. They were able to fill every request up to last Friday.

    Today they ran out before fulfilling waiting list requests between last Friday and today. Next distribution to occur on March 24th 2020.

    https://www.arin.net/announcements/20200131/

    submitted by /u/ydio
    [link] [comments]

    Why Do good network engineers prefer printed books over Ebooks?

    Posted: 31 Jan 2020 12:25 PM PST

    When i see people preparing for CCNP or CCIE most of the time i find a big block of Cisco certification guides behind them , does it really matter or make difference ? will i grasp the concept faster or maintain it longer in my head if i read from printed books rather than ebooks?

    submitted by /u/Dembah
    [link] [comments]

    How common are core routers in the ISP environment?

    Posted: 31 Jan 2020 04:52 AM PST

    I started working at a smaller ISP half a year ago and was a bit shocked to find out that almost everything is essentially layer 2. The only routers I've come across so far are edge routers. Is this common practice?

    We essentially have like 2 big erps rings that all have their own edge routers that go back to the location where we peer with AT&T and other backbone providers.

    submitted by /u/mustang23200
    [link] [comments]

    Catalyst 1000 switches

    Posted: 31 Jan 2020 12:25 PM PST

    These are new, and it looks like they're the next step up for the small form-factor 2960s.

    To me it looks like a new Catalyst switch without any stacking, but has all the usual business that we need like PoE+ etc etc.

    Has anybody used them? Are there any real gotchas that we should know about?

    submitted by /u/LickingCats
    [link] [comments]

    Megaport now supports AWS Hosted Connect for Transit VIF

    Posted: 31 Jan 2020 02:09 PM PST

    Looks like Megaport is now supporting the AWS Hosted Connect model which supports the Transit VIF needed to connect to a TGW in AWS.

    https://knowledgebase.megaport.com/cloud-connectivity/aws-cloud/#hc

    submitted by /u/UDP4789
    [link] [comments]

    PIM ADJACENCY FLAPS

    Posted: 31 Jan 2020 08:46 AM PST

    Hi Guys, I'm having issues with my pim adjacency which goes down and It might due to the congestion.

    Question:

    1. Why my neighbor router didn't flap and still its up for more than a week.
    2. After the down state the DR change occur, Is this normal?

    Here's the logs:

    Setup: SW1 ------< Provider >------- SW2 SW1: Neighbor Interface Uptime/Expires Ver DR Address Prio/Mode 10.1.1.2 GigabitEthernet1/1 01:09:58/00:01:23 v2 1 / DR S P G LOGS: %PIM-5-NBRCHG: neighbor 10.1.1.2 DOWN on interface GigabitEthernet1/1 DR %PIM-5-DRCHG: DR change from neighbor 10.1.1.2 to 10.1.1.1 on interface GigabitEthernet1/1 %PIM-5-NBRCHG: neighbor 10.1.1.2 UP on interface GigabitEthernet1/1 SW2: Neighbor Interface Uptime/Expires Ver DR Address Prio/Mode 10.1.1.1 GigabitEthernet1/1 2w2d/00:01:42 v2 1 / S P G

    Thanks

    submitted by /u/1searching
    [link] [comments]

    Quick question about MAC addresses regarding local and unicast bits

    Posted: 31 Jan 2020 08:58 AM PST

    I'd like to ensure that I've read and interpreted the rules correctly for setting the local and unicast bits for randomly generated mac addresses. My understanding is that the first octet needs to end with a 2, 6, a, or e, specifically:

    • x2:xx:xx:xx:xx:xx
    • x6:xx:xx:xx:xx:xx
    • xa:xx:xx:xx:xx:xx
    • xe:xx:xx:xx:xx:xx

    Is this correct?

    My goal is I need to generate random MAC addresses for SR-IOV VFs and I would like to ensure they comply with standards. Below are the sets of MAC address groups I would like to use (each set would be applied only to particular SR-IOV VFs as a means for easily identify the underling physical device):

    ​

    • 22:26:2a:xx:xx:xx
    • 62:66:6a:xx:xx:xx
    • a2:a6:aa:xx:xx:xx
    • e2:e6:ea:xx:xx:xx

    ​

    • 26:2a:2e:xx:xx:xx
    • 66:6a:6e:xx:xx:xx
    • a6:aa:ae:xx:xx:xx
    • e6:ea:ee:xx:xx:xx

    ​

    • 2a:2e:22:xx:xx:xx
    • 6a:6e:62:xx:xx:xx
    • aa:ae:a2:xx:xx:xx
    • ea:ee:e2:xx:xx:xx

    ​

    • 2e:22:26:xx:xx:xx
    • 6e:62:66:xx:xx:xx
    • ae:a2:a6:xx:xx:xx
    • ee:e2:e6:xx:xx:xx

    This is the /etc/network/interfaces (Ubuntu 16.04) code I'm planning to use:

    auto eno1 iface eno1 inet manual bond-master bond0 bond-primary eno1 bond-primary-reselect better post-up echo 6 > /sys/class/net/eno1/device/sriov_numvfs post-up for i in $(seq 0 5); do ip link set eno1 vf $i mac $(printf "22:26:2a"; od -An -N3 -tx1 /dev/urandom | sed 's/ /:/g'); done post-up for device in $(ls /sys/bus/pci/drivers/bnx2x | egrep -v "0000:[0-9a-f]{2}:00" | grep 0000); do echo $device > /sys/bus/pci/drivers/bnx2x/unbind; done auto eno2 iface eno2 inet manual bond-master bond0 post-up echo 6 > /sys/class/net/eno2/device/sriov_numvfs post-up for i in $(seq 0 5); do ip link set eno2 vf $i mac $(printf "62:66:6a"; od -An -N3 -tx1 /dev/urandom | sed 's/ /:/g'); done post-up for device in $(ls /sys/bus/pci/drivers/bnx2x | egrep -v "0000:[0-9a-f]{2}:00" | grep 0000); do echo $device > /sys/bus/pci/drivers/bnx2x/unbind; done auto eno3 iface eno3 inet manual bond-master bond1 bond-primary eno3 bond-primary-reselect better post-up echo 6 > /sys/class/net/eno3/device/sriov_numvfs post-up for i in $(seq 0 5); do ip link set eno3 vf $i mac $(printf "a2:a6:aa"; od -An -N3 -tx1 /dev/urandom | sed 's/ /:/g'); done post-up for device in $(ls /sys/bus/pci/drivers/bnx2x | egrep -v "0000:[0-9a-f]{2}:00" | grep 0000); do echo $device > /sys/bus/pci/drivers/bnx2x/unbind; done auto eno4 iface eno4 inet manual bond-master bond1 post-up echo 6 > /sys/class/net/eno4/device/sriov_numvfs post-up for i in $(seq 0 5); do ip link set eno4 vf $i mac $(printf "e2:e6:ea"; od -An -N3 -tx1 /dev/urandom | sed 's/ /:/g'); done post-up for device in $(ls /sys/bus/pci/drivers/bnx2x | egrep -v "0000:[0-9a-f]{2}:00" | grep 0000); do echo $device > /sys/bus/pci/drivers/bnx2x/unbind; done
    submitted by /u/Hopperkin
    [link] [comments]

    JUNOS Config to Nexus

    Posted: 31 Jan 2020 11:46 AM PST

    Anyone know of a script/git that takes in a JUNOS config and converts it to Nexus or basic Cisco IOS?

    Don't want to reinvent the wheel if we do not have too.

    submitted by /u/pedrotheterror
    [link] [comments]

    Really weird multicast bug - Cisco 9500-40X switches

    Posted: 31 Jan 2020 08:10 AM PST

    We've run into a really weird bug on one pair of 9500-48Y4C switches that we're running at my work (it's a SVL pair running 16.12.1) - on ports Twe1/0/23 and Twe2/0/23, multicast streams lose packets corrupting an MPEG TS stream.

    This happens on any trunk or access connection made to either (or both) of these ports - but only on VLAN 2202.

    We've contacted TAC and they've never seen something like this, just wondering if anyone else had seen something like this?

    Edited because I had said 40X but I'm a dope that forgot we swapped all our 40X for 48Y4Cs so if an admin can change the post title... Sigh.

    submitted by /u/kevinmenzel
    [link] [comments]

    GLBP Design Questions

    Posted: 31 Jan 2020 12:54 PM PST

    Hello,

    I had some questions regarding GLBP and load-balancing.

    According to Cisco documentation, if State-full NAT is being used, you need to enable Host-Dependent balancing.

    "HOST DEPENDENT

    The MAC address of a host is used to determine which VF MAC address the host is directed towards. This ensures that a host will be guaranteed to use the same virtual MAC address as long as the number of VFs in the GLBP group is constant.

    Host dependent load balancing will need to be used when using statefull Network Address Translation (NAT) because it requires each host to be returned the same virtual MAC address each time it sends an ARP request for the virtual IP address.

    Host dependent load balancing is not recommended for situations where there are a small number of end hosts, for example less than 20, unless there is also a requirement that individual hosts must always use the same forwarder. The larger the number of host, the less likely it is to have an imbalance in distribution across forwarders.

    This method uses an algorithm designed to equally distribute hosts among forwarders, this distribution changes only when the number for forwarders permanently changes."

    Does this apply if my NAT is prior to hitting our Routers?

    Here is a a diagram of our network: https://i.imgur.com/gJrRry7.jpg

    We have two bgp routers dual homed to separate ISP.
    They are currently running HSRP across the links connected to the switch.

    All host traffic passes through a firewall and is NAT'd from there. Most traffic is sent as one IP.

    In this scenario does Host Dependent LB need to be on to allow it to return traffic properly?

    My other question is how disruptive this change will be (going from HSRP to GLBP)

    and how to minimize the disruption.

    I know it can be configured very quickly, wiithin one copy/paste.

    But I assume as the mac address will change from an HSRP to GLBP address, every host will lose connectivity while the switch in between relearns the routes?

    The hosts use the firewall as a default gateway.

    ​

    Thank you for any help!!

    submitted by /u/phoenixdon
    [link] [comments]

    What is the best wireless router?

    Posted: 31 Jan 2020 04:37 PM PST

    Hi there.

    I was wondering what the most powerful router is. Price is not relevant to me, I just want the most powerful one. I will use it primarily to upload heavy files, stream in 4K60fps/8K30fps and game a lot (having low latency is what I want). Could anyone help me find the best wireless router?

    submitted by /u/TheHolyAlpaca1
    [link] [comments]

    Cisco Firepower AWS head scratcher

    Posted: 31 Jan 2020 10:08 AM PST

    Hi All

    We've started to play about with vFMC and vFTD in AWS in work. Set up as follows:

    FMC ———

    Evaluation mode

    Eth0 configured with IP address in /24 subnet and the same as configured when setting up the VM in AWS

    Basic access control policy configured

    Routing configured (static)

    Not using NTP but using local system time

    FTD ———

    Four interfaces configured - eth0 (IP address in same subnet as FMC eth0), eth1, internal and external

    Approached it the same way as would do with physical but specified the eth0 as the management IP address. Then tried to bring FTD under management but can't allegedly be reached. Checked IP addressing on the FTD and the management IP address isn't visible after running the show ip interface brief command.

    I'm unsure as to what to check next and it's left me scratching my head. Surely the process shouldn't be that much different to bringing physical devices under management?

    Edited for formatting

    submitted by /u/hex_inc
    [link] [comments]

    Etherchannel Load Balancing

    Posted: 31 Jan 2020 07:15 AM PST

    Hey Guys! Just have a question about load balancing on an EtherChannel

    When does it make sense to load balance using the src/dest IP and the src/dest mac?

    I know there is also an option to use both the source and dest IP or mac. What scenarios would you use this option?

    Thanks for your help!

    submitted by /u/c1sc0n00b
    [link] [comments]

    ClearPass

    Posted: 31 Jan 2020 12:01 PM PST

    Does anyone know how ClearPass works with Aruba switches? Does it communicate over REST APIs at all?

    We are looking to enable enhanced mode for the switches to store the passwords more securely but it seems to disable certain things. I wanted to make sure before we do this and implement ClearPass in Q2 we aren't opening up any potential issues.

    submitted by /u/anxeyeteaz
    [link] [comments]

    How can I arrange some better peering arrangement/connection between two distant machines?

    Posted: 31 Jan 2020 03:10 PM PST

    As the title probably gives away this isn't my area of expertise, so I hope this isn't a low-quality or unwelcome post.

    I currently live in Australia, where I work at a three-man branch of a company headquartered in the United States. Every day, I transfer some reasonably large files (average around 700 MB) to the main office in New Jersey. Our connection is capable of 100 Mbps up (and yes, I'm aware of the distinction between megabits and megabytes), and theirs of at least 300 Mbps down. Yet my direct transfers over SFTP are lucky to reach 5 Mbps most of the time, 20 Mbps on a good day.

    Instead we're relying on Dropbox. We consistently get a full ~100 Mbps uploading, and I don't know their download speeds, but they're lightning fast in comparison. It's 10-20x faster to go through this middleman.

    I don't know much about networking, but am I right to assume this is an issue with the peering arrangements connecting us? And if so, is there anything I can do to create better conditions for these two specific machines? Is this the sort of thing where a VPN might help, if the VPN provider has more optimized peering arrangements, and if so, are there providers that specialize in that? I'm just not really aware of what services exist to solve this problem.

    Thank you very much to anyone who can offer me a little advice.

    submitted by /u/RogerThornhill_
    [link] [comments]

    Can someone explain this ACI concept?

    Posted: 31 Jan 2020 07:27 AM PST

    Distributed gateway: This sounds like a fancy way of saying devices vlans are trunked all over the fabric to wherever the bridge domain lives.

    "The ACI fabric decouples the endpoint identity and associated policy from the underlying forwarding graph. It provides a distributed Layer 3 gateway that ensures optimal Layer 3 and Layer 2 forwarding. The fabric supports standard bridging and routing semantics without standard location constraints (any IP address anywhere), and removes flooding requirements for the IP control plane Address Resolution Protocol (ARP) / Gratuitous Address Resolution Protocol (GARP). All traffic within the fabric is encapsulated within VXLAN."

    submitted by /u/NetworkHocusPocus
    [link] [comments]

    Subnet routed to server, squid not working

    Posted: 31 Jan 2020 02:53 PM PST

    Hello,

    I have a ubuntu server, and my provider routed a /24 to it

    Squid proxy is not working with the IPs routed (no internet), how can I check if the IPs are successfully on my server, and receiving internet connectivity

    submitted by /u/snobbypanda
    [link] [comments]

    Moving away from VLAN1 on Aruba 2930 switches

    Posted: 31 Jan 2020 02:47 PM PST

    Disabled VLAN1 and created VLAN100 to be my management vlan

    All good, but if I assigned a port to let's say VLAN 20 and then remove from VLAN20, the port will "fallback" to VLAN 1, not to my new Management VLAN100

    Is there a way to make 'orphaned' ports fallback to a VLAN other than VLAN1 ?

    Thanks

    submitted by /u/hombre_lobo
    [link] [comments]

    Strange speed issue with one ISP and Cisco 921 router

    Posted: 31 Jan 2020 10:29 AM PST

    Ok, losing my mind over this one.

    I have a site that recently changed locations and had to switch isp's. One ISP1 300mb Symmetric connection works great, ISP 2 400mb/20mb is extremely slow when used behind the cisco 921, but only behind the cisco router. With a PC directly connected to the isp cable modem, full speed no significant packet loss. Same is true if I connect the pc behind the isp provided router and obtain dhcp or I set a static on it from my block of 5 public statics. (Full speed)

    Connect my cisco 921 (on GigE5) to the isp provided router with a static ip and connect the pc to the 921. Slow... with lots of packet loss (8-12mb down, 18mb up.)

    Same pc, same cisco 921, connected to isp1 (on GigE4). Pulls 275mb down and 275mb up on a symmetrical connection.

    Both interfaces use fifo queuing, I have no QoS turned on. Router is doing nat for both interfaces. Interfaces are configured identically (except for IP)

    Troubleshooting so far:

    Replaced all patch cables associated with the cable modem with known good.

    Verified mtu and tcp-adjust mss were set and proper. Played with lower values and no change, not a fragmentation issue.

    Set 1000mb full duplex on interface and even tried 100mb. No change (I did note that the pc connected directly to the isp provided router did negotiate full duplex)

    Added a switch between isp router and the cisco router. No change

    Connected 921 GigE5 directly to isp modem and got a public ip with dhcp. (I assume it is in bridge mode) No change.

    ​

    Anyway, the ISP has washed its hands of it as they can see full speed at their hardware. So its up to me to figure out or dump the isp and go cellular for backup. Any thoughts?

    ​

    ​

    Update: Issue resolved. Make sure you turn on IP CEF. The input queue was dropping as the 400mb down exceeded the routers ability to process every packet. The 300mb connection did not.

    submitted by /u/fuzzylogic_y2k
    [link] [comments]

    10G SFP+ Copper not really 10Gbps?

    Posted: 31 Jan 2020 02:12 AM PST

    Is this true? If you use the SFP+ copper, you will not get 10Gbps.

    I got this info from our Cisco, and they advise us not to use SFP+ copper because it is not really 10G because of some compliant issue or something.

    submitted by /u/pingmanping
    [link] [comments]

    Are there any routers with VyOS installed?

    Posted: 31 Jan 2020 01:49 PM PST

    My office is using an EdgeRouter X to do failover between two ISPs. We have a script that is just running a cron job to check if the interfaces have changed state and then email us. We were looking at using VyOS since it has an policy based event handler. Are there any routers that come with VyOS installed?

    submitted by /u/foohyfooh
    [link] [comments]

    Running data and power along one conduit- Looking for advice

    Posted: 31 Jan 2020 12:34 PM PST

    So I'm in the planning stage of a re-design of my current workspace for computer assembly and repair
    Currently, everything is done with daisy chaining network switches and running extension cables, which is slow, inefficient, costly and introduces too many points of failure
    During this redesign, we will be fitting trunking around the entire perimeter of the room which will (hopefully) provide both 10g ethernet and power
    (This is in the UK so 230V)

    What would need to be done to prevent EMI issues between the power runs and ethernet runs
    Along with that what cabling for both ethernet and power would be recommended. I know its a very entry-level basic question, but any advice or help would be greatly appreciated

    submitted by /u/HelpMyInternet
    [link] [comments]

    I am struggling to connect to a VOIP phone on my network

    Posted: 31 Jan 2020 06:49 AM PST

    Hi,

    I bought 12 phones from eBay (Cisco DX650), but I am pulling my hair out trying to get them setup! I want to get them to work with 3CX.

    I have the phone connected to my internet, but every time I try to go to the phone's IP address to configure the device nothing loads.

    When I open the browser on the phone, it doesn't load any webpages. For example, if I go to twitter.com from the phone's browser I get a message saying "Couldn't establish a secure connection."

    I am unsure of what to do from here. I would really appreciate any insights you could give me.

    SOLVED: The device has been connected to the internet and everything has been working fine. My issue this entire time was that all the trusted certificates on the device were expired.

    submitted by /u/dyingmouse
    [link] [comments]

    Cisco experiencing an outage?

    Posted: 31 Jan 2020 06:19 AM PST

    Is anyone having an issue accessing their Cisco account or perhaps their smart licensing failing to authorize?

    While on a virtual ASA today I received a very brief alarm, WARNING ASAv platform license state is unlicensed. ASAv will reload in 30 seconds. What a heads up, by the way... I then go to sign into Cisco and it appears to be having issues after entering the username and not able to sign in.

    Anyone else seeing this? I do have them on the phone now but was seeing if anyone else is seeing this issue.

    Edit: ok licensing wasn't the same issue. I had the domain lookup pointing to an interface I used while setting up the ASAv. It went to look for the licensing server, through the same interface which is no longer used and couldn't resolve. Definitely missed that then just assumed it was an issue on Cisco when I couldn't sign in. The site is still having issues but the licensing was, in the end, a DNS issue.

    submitted by /u/CheesierYeti
    [link] [comments]
    Read more
    at

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel