• Breaking News

    [Android][timeline][#f39c12]

    Monday, August 31, 2020

    Moronic Monday! Networking

    Moronic Monday! Networking


    Moronic Monday!

    Posted: 30 Aug 2020 06:04 PM PDT

    It's Monday, you've not yet had coffee and the week ahead is gonna suck. Let's open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarrassed to ask!

    Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.

    Note: This post is created at 01:00 UTC. It may not be Monday where you are in the world, no need to comment on it.

    submitted by /u/AutoModerator
    [link] [comments]

    Cloudflare posts analysis of Centurylink's outage on Sunday 8/30.

    Posted: 31 Aug 2020 04:16 AM PDT

    This is pretty informative, and matches up with what little I received from Centurylink on the topic.

    https://blog.cloudflare.com/analysis-of-todays-centurylink-level-3-outage/

    submitted by /u/krattalak
    [link] [comments]

    Cisco OpenDNS/Umbrella "newly seen domains" issue

    Posted: 31 Aug 2020 12:04 PM PDT

    Just got the following from Cisco TAC:

    Thank you for contacting Cisco Umbrella support. Our Engineering team is actively working to resolve an issue where a large quantity of domains were unexpectedly classified as Newly Seen Domains (NSD). They've temporarily suspended new classifications for the Newly Seen Domain category, and we've posted a notification on the Umbrella Status Portal. Further, NSD classifications within the past ~3 hours have been temporarily rolled back.

    This was at 3pm ET. If anyone else is getting a ton of block tickets today.

    submitted by /u/trinitywindu
    [link] [comments]

    Palo Alto Slow Download

    Posted: 31 Aug 2020 12:53 PM PDT

    This one has me stumped. Just hooked up Comcast metro Ethernet to the new PA-820. Download is less than 10 Mb and upload is 80 Mb. Hooked up the Comcast metro to a laptop and am getting 300 Mbps down.

    I thought maybe it was a duplex issue but they say it isn't. Any ideas?

    submitted by /u/fellow_earthican
    [link] [comments]

    Should you use the same domain name for each switch when generating SSH for vty access?

    Posted: 31 Aug 2020 10:01 AM PDT

    Currently changing my network from telnet to SSH. On the switches, do they have to have the same domain name or can I name them whatever? Will it cause any confusion? What is the purpose of the domain name for SSH access?

    Thanks

    Router is not doing DNS lookups

    submitted by /u/CluelessNetworkNoob
    [link] [comments]

    New GNS3 install, JunOS Olive running in VirtualBox but gray in GNS3. Anyone know how to fix this?

    Posted: 31 Aug 2020 08:18 AM PDT

    Hey all. Got a new job, they want me to spin up GNS3 with a JunOS Olive VM in VirtualBox but as the title says I'm having some trouble. I got the GNS3 image here and was able to get it running in VirtualBox, and I was also able to download GNS3 and integrate its VM into Virtualbox, but for some reason the JunOS template I've created in GNS3 is grayed out. I've emailed my team asking for help but thought I'd ask here as well.

    I've found some discussions that suggested bouncing the adapters, I tried that, no benefit. I've also seen some threads that suggest changing the server preferences port from 3080 to 80 (or vice versa), however I've got two VMs in VirtualBox (the GNS3 VM and the JunOS VM) and one is working while the other is not ... so I don't think it's the port that's the issue.

    I have installed a Microsoft loopback adapter, I can ping the address, I checked "Allow console connections to any local IP address", and I've also tried disabling my firewall, none of these have improved the situation. Does anyone have any other suggestions?

    submitted by /u/workrelatedquestions
    [link] [comments]

    Aruba LLW vs Cisco E-LLW

    Posted: 31 Aug 2020 11:46 AM PDT

    We're looking at 2 models of switches - the Aruba CX 6300M and the Cisco Catalyst 9300 series. Both of them appear to have damn near identical limited lifetime warranties including:

    *Lifetime hardware NBD replacement

    *90 Days TAC support after purchase

    *Major and Minor software updates (?)

    I couldn't fine much clear information on if Cisco Provides Major and Minor software updates with their base warranty without SmartNet. Is anyone able to clear that up for me?

    Cisco is actually coming in cheaper even with the Network Advantage license and DNA so this is kind of throwing me for a loop. I was always under the impression that Aruba was the cheaper route without the need for any added service contracts, but it appears to have changed with the CX line. If you want TAC support after 90 days you need to purchase Foundation Care, just like Smartnet?

    submitted by /u/ThisIsAnITAccount
    [link] [comments]

    NET Equalizer

    Posted: 31 Aug 2020 09:19 AM PDT

    Hello Techies,

    Does anyone have any personal experiences or have any information you'd like to divulge concerning a QoS device called NET Equalizer? I think they are sold by a company called AP Connections. We're looking at possibly purchasing this device and want to know if the community had any input on their services and overall experiences with them.

    submitted by /u/NetManMark
    [link] [comments]

    L2 MTU Questions

    Posted: 31 Aug 2020 03:08 PM PDT

    We just replaced some catalyst switches that did not support per-port MTU with Nexus switches that do support per-port MTU and ran into an MTU mismatch problem. We were able to finally work around it but this leaves me some questions.

    These switches serve some different storage systems that recommend jumbo MTU being set. They also serve some linux HPC servers which were also set for jumbo MTU. For this particular issue, it's all a single L2 network. This traffic does not hit an L3 interface.

    After we replaced the switches, Linux servers on one switch could not mount file systems from the storage server on the other switch These two ToR switches talk to each other via a core switch. All end hosts and their associated switch ports were set to jumbo. After a lot of troubleshooting, we set the MTU of the linux servers and their switch ports default 1500 and it started working. The way the switches were connected before we got it working was like this:

    Server <jumbo MTU> Switch A <1500 MTU> Core <1500 MTU> Switch B <jumbo MTU> Storage

    At first we thought the issue was between the Linux servers and the switch ports. Looking at it closer today, I realized that the uplinks between the ToR switches and the core switches are set to 1500. My theory now is that the frames were being dropped by the core switch when it saw a jumbo frame hit its 1500 MTU interface.

    Putting aside that this was a bonehead move in the first place, I have some questions:

    · The Linux servers are now sending sending 1500 byte packets to the storage server (NetApp) rather than jumbos. This is what got it to work. However, the storage servers are still set for a jumbo MTU. I assume that once they start sending data back to the server, they would use jumbos as well which should get dropped. This doesn't seem to be happening. Is the MTU path discovery mechanism taking care of this?

    · After looking at this, it seems like best practice would be to set everything on a VLAN (and any VLANs attached to these physical networks ) to the same MTU. Otherwise, you could end up with issues like this. Is that fair?

    The previous networking guy had set this up where the 10G interfaces were set to jumbo and 1G interfaces were default. My original thought was to avoid setting jumbo MTU as much as possible. The storage nodes needed high throughput to talk to each other on the same switch so we would only set those to jumbo, not taking into account that the fragmentation wouldn't happen until it hit an L3 interface.

    submitted by /u/ssherman68
    [link] [comments]

    Wireless Bridge

    Posted: 31 Aug 2020 08:46 AM PDT

    I have a new client that has an office build (one story) and a production facility about 300 yards from each other. Running cable is not possible in this scenario I know that would be the best option. I have been looking into doing a wireless bridge.

    What sort of gotchas and pitfalls should I expect?

    It really as easy as lining up the two antenna?

    Preferred vendors?

    Thanks for any advice

    submitted by /u/nivla73
    [link] [comments]

    Has anyone got their hands on the new Cisco Business 350 Series Managed Switches?

    Posted: 31 Aug 2020 02:03 PM PDT

    Looks like they came out this month - curious if anyone has any initial feedback on them.

    https://www.cisco.com/c/en/us/products/switches/business-350-series-managed-switches/models-comparison.html

    I have a handful of SG350Xs (which I believe are considered the predecessor) and have not been a fan of them.

    submitted by /u/FitButFluffy
    [link] [comments]

    Anyone using Cisco Catalyst 9100 series APs ?

    Posted: 31 Aug 2020 07:55 AM PDT

    I'm specifically looking at the 9115. This site would be running ME (or I guess EWC as it's now called ?). So I know what I'm getting into there and my limitations, I've ran ME before.

    My questions are more about stability, quirks, bugs etc. I'm a little gun shy from a bad experience with the 1832i APs. I was running the latest firmware at the time on these and I had client drops (I could see the icon blink out on a Mac / iPhone and they would reassoc. to another AP. This was a disruptive drop...)

    TL;DR - Anyone using 9100 APs (9115 specifically). Happy ? Bugs ?

    Thanks for any feedback.

    submitted by /u/vom513
    [link] [comments]

    Cisco new hardware add in account question

    Posted: 31 Aug 2020 08:45 AM PDT

    We bought new cisco nexus from CDW now how do i download new software from cisco website, i believe i have to register my new switch in my account right?

    This is first time i am doing this process so not sure what should i do after buy new switch and get new software for it.

    submitted by /u/satishdotpatel
    [link] [comments]

    (x-post from /r/Cisco) 2 Connections on QSFP-4x10G-LR-S not working

    Posted: 31 Aug 2020 08:19 AM PDT

    Hey everyone, I am attempting a connection from a N9K-C93180YC-EX to a A9K-24x10GE-TR using a QSFP-4x10G-LR-S optic on the Nexus side broke out into 4 10G LR single mode connections on the A9K side. The issue I am having is that I can only use 2 of the connections on the breakout cable, it does not matter which 2 I use and to what ports they go to, I cannot get more than 2 of the ports to come up. I have tried different cables, different optics on each side, different ports, and even completely different compatible chassis, every single time I have used this optic and these cables I can only get 2 connections to come up. Anybody run into this before? Any help would be greatly appreciated.

    submitted by /u/Dagger32304
    [link] [comments]

    Cisco Catalyst 2960-C Series POE switch doesn't have OS or USB port

    Posted: 31 Aug 2020 05:46 AM PDT

    Was given a switch to play with by my network admin. I've googled but it all recommends using a usb port which this one does have. Any suggestions?

    submitted by /u/ARP_This
    [link] [comments]

    Need to change remote access with out locking my self out Cisco switch

    Posted: 31 Aug 2020 11:44 AM PDT

    How do I change the current line vty lines to transport input ssh. I created a local user account, generated ssh keys and turn in ip ssh version 2. I tried a couple of ways but I keep getting password denied.

    line con 0

    password 7 somepassword

    login

    line vty 0 4

    password 7 somepassword

    login

    line vty 5 15

    privilege level 15

    password 7 somepassword

    login

    submitted by /u/boaz1215
    [link] [comments]

    Using a protocol analyzer to run code?

    Posted: 31 Aug 2020 11:23 AM PDT

    I'm looking to get into some automation via network protocol analyzers. I have a few ideas of what my projects could be, and it could be useful at work-I just don't really know where to begin.

    Essentially, I'm looking for a way to use a protocol analyzer such as Wireshark to trigger conditions in a script (Python, preferably, but anything is fine). Is there a protocol analyzer that is capable of doing this-let's say it sends a certain conditional/interrupt/toggles a variable each time it sees an OSPF hello packet?

    Any direction would be appreciated-I'm keeping this intentionally vague to keep discussion as open as possible.

    If there are subs better suited for this, please let me know! Thanks!

    submitted by /u/Jerevand
    [link] [comments]

    Australia - ACMA Open/Restricted Cabling Registration

    Posted: 30 Aug 2020 08:06 PM PDT

    Sysadmin/network eng from Australia here,

    Wondering if anybody has some experience regarding the ACMA Registrations for Open/Restricted Cabling Registration. I work in an organisation that, due to its nature, requires a lot of re-hauling and retrofitting of data cable through the buildings they own and wiring up the MDF of these buildings. We have some electricians on-staff, but none in my state are ACMA Registered and generally want me to do the data stuff, because I'm the one who at the end of the day, is responsible for plugging it into the switch and making sure it works for the end user.

    I want to get the license/registration to do this properly, but the requirements seem a bit convoluted:https://www.acma.gov.au/publications/2019-06/guide/pathways-cabling-registration

    For Restricted Registration, you need to do a handful of prerequisite qualifications, a registration test, plus 80 hours of cabling experience. For Open Registration, the same, but 360 hours of experience. On top of this, there are requirements around who can sign off on this experience:

    Unregistered cablers, who are undertaking telecommunications customer cabling work to gain experience, must be directly supervised by an appropriately registered cabler. Under the ACMA supervision rule, the registered cabler must accept full responsibility for the telecommunications customer cabling work undertaken by the unregistered cabler and must ensure that it fully complies with the wiring rules (AS/CA S009:2013 or its replacement), including completing the TCA1 form.

    Additionally...

    A person who intentionally or recklessly contravenes the ACMA's cabling regulatory requirements for CPRs is guilty of an offence punishable by a $2,040 on-the-spot fine issued by an ACMA inspector, or on conviction by a court, a fine of up to $90,00

    So, unless your organisation already has an ACMA registered data cabler to sign off your experience, how are you supposed to qualify to become one in the first place? It seems you either need to hire a contractor who has ACMA registration, just to come in and sign off on your cabling and experience log book until you have 80 hours, or go do a month long traineeship somewhere else where an ACMA registered cabler already exists.

    submitted by /u/the_it_mojo
    [link] [comments]

    EVPN-MPLS vs EVPN-VXLAN

    Posted: 30 Aug 2020 08:35 PM PDT

    I'm trying to understand the benefit of using VXLAN for the data plane in EVPN.

    It seems like you can use MP-BGP to have the MAC address info shared for EVPN. As in you can just run EVPN over BGP and call it a day.

    So why use VXLAN + BGP + EVPN, which seems to be the setup I find mostly when I google it? What does the additional VXLAN encapsulation get you?

    submitted by /u/JamMan23
    [link] [comments]

    Connect R550 APs to a Ruckus ZD1200

    Posted: 31 Aug 2020 05:35 AM PDT

    It's been a while since I've deployed Ruckus and a lot has changed. We purchased a ZD1200 and 3 R550 access points for a warehouse location. I set them up, but I can't get the APs to talk to the ZD. I've upgraded the ZD to the latest firmware, and pointed the APs to the IP of the ZD via the web interface. Still no luck. Everything I've read says they should be compatible and connect without issue. I can ping back and forth between them, so I know they have connectivity. Anyone familiar with the latest from Ruckus that can help me out?

    submitted by /u/Hitech_Redneck
    [link] [comments]

    Connecting Ruckus switch into Cisco switch with trunk

    Posted: 31 Aug 2020 01:43 AM PDT

    hello, im a newbie in network, i was browsing all over the internet but im stuck in here (maybe i dont know the concept), i cant connect 2 different device with trunk mode.

    btw i have 4 active vlan : 81,88,90,91. vlan 21 is for the trunk experiment.

    this is the ruckus setting :

    vlan 1 name DEFAULT-VLAN by port

    spanning-tree

    !

    vlan 21 name "connect test" by port

    tagged ethe 1/1/22

    spanning-tree

    !

    vlan 81 name Management by port

    untagged ethe 1/1/18 to 1/1/19

    spanning-tree

    !

    vlan 88 name Local by port

    untagged ethe 1/1/1 to 1/1/17

    spanning-tree

    !

    vlan 90 name Voice by port

    tagged ethe 1/1/1 ethe 1/1/6 ethe 1/1/9 to 1/1/17

    spanning-tree

    !

    vlan 91 name DMZ by port

    untagged ethe 1/1/20 to 1/1/21

    spanning-tree

    !

    end

    and this is the cisco setting :

    interface FastEthernet0/23

    description "LINK_MANRO_0/0/3"

    switchport mode trunk

    In ruckus port 22 which will be connected to cisco port 23

    How to connect a cisco switch to ruckus switch with trunk mode ? As i know that cisco uses command "switchport mode trunk" to trunking with other cisco device, and ruckus using "tagged" because the dual mode was depreciated.

    thankyou for helping me.

    submitted by /u/iefhanz
    [link] [comments]

    Dev resources for WPA Enterprise?

    Posted: 31 Aug 2020 01:46 AM PDT

    Hi there,

    I work for a company that creates an embedded tablet and we are currently working to implement WPA Enterprise in a more user-friendly GUI. The team responsible for the networking stack (shared app dev. team) is unsure what are some correct inner and outer-wrapping for WPA Enterprise and we are looking for some sort of insights/documentation that can tell us some of the different combinations etc. for the GUI.

    My google-skills have come up empty-handed, thus why I'm asking here for some pointers. Any help would be appreciated.

    Edit: I notice by some of the responses that I have been too vague about the intent, so allow me to elaborate.I work for a company that creates a tablet (based on Linux) and has an entire stack from hardware, operating system, and application on top. At the moment, we use wpa_supplicant as our base (this might change to iwd in the future), but apply dbus and our own user interface for all settings, etc. on top (in our application).

    The network stack is as follows:(Wireless) Network card --> Network Driver --> wpa_supplicant --> dbus --> our application.

    In our own application, the users input network information/credentials, and going further we want to support WPA Enterprise (this is technically supported through wpa_supplicant), but the options for selecting tunnel types etc need to exist in our application.

    At the moment, we don't have a very good GUI for selecting the different tunnels, and that is something we would like to improve. The challenge is to find an overview of what types of tunnel types that can be used together. For instance, I know that EAP-MSCHAPv2 is a valid setup, but that's where my knowledge stops (I'm not a dev, but work in tech. dept.).

    At the moment, we have used information from w1.fi/wpa_supplicant, but want to have a better approach to allowing correct types. Is there such a list somewhere? The list in the URL doesn't seem to have a comprehensive overview of allowed combinations.

    submitted by /u/Fallyfall
    [link] [comments]

    Routing between two completely separate but directly connected private networks

    Posted: 30 Aug 2020 11:58 PM PDT

    I've got a request from a partner vendor in a completely separate routing domain to directly route a /24 rfc1918 network on my rfc1918 internal network. The proposed solution has their handoff directly connected to our router and static routes with next-hop on my router pointing to the vendor router.

    At first glance, this sets off a bunch of bad practice alerts in my head. Realistically, it will work as long as we keep track of the overlapping subnet on the vendors network to make sure we don't provision the same subnet on our network.

    So I was wondering if anybody has scenarios or issues I am overlooking with this setup?

    submitted by /u/nest11111111
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel