Rant Wednesday! Networking |
- Rant Wednesday!
- Major Stack F Up
- Another CenturyLink Blip this morning?
- Active vs Passive SD-WAN Health Checks
- OLD CCNA Industrial Resources
- Spoke-to-Spoke with NAT
- NPRM ballast calculation?
- Cisco WLC and browser compatibility
- Capturing number of end devices via access switches?
- Exinda WAN optimiser recognising Whatsapp as peer to peer traffic
- Help: static ip not being stable
- Network question
- NAT on a ISP network
- Help: Suggestion for proxy replacement
- Could reach an external site from intranet
- Silicon Valley ISPs?
- So Arista only has a 1 year hardware warranty?
- Point to point testing with two CentOS clients
- Juniper EX3300 "Storage size changed"
- Can someone explain to me the purpose of a Recursive Static Route?
- Why are you using VRFs?
Posted: 01 Sep 2020 05:04 PM PDT It's Wednesday! Time to get that crap that's been bugging you off your chest! In the interests of spicing things up a bit around here, we're going to try out a Rant Wednesday thread for you all to vent your frustrations. Feel free to vent about vendors, co-workers, price of scotch or anything else network related. There is no guiding question to help stir up some rage-feels, feel free to fire at will, ranting about anything and everything that's been pissing you off or getting on your nerves! Note: This post is created at 00:00 UTC. It may not be Wednesday where you are in the world, no need to comment on it. [link] [comments] |
Posted: 02 Sep 2020 01:42 PM PDT I'm pretty screwed right now. We have a Dell S4048-ON stack set up that connects our virtual environment to the our network. I stupidly changed the admin password without specifying the privilege level on the primary switch, but did on the secondary. Now, not only did the stack break, I can't log in with exec or exec config privileges AND the virtual environment is down. We had HA setup but for some reason since the primary went down everything did. Is there a way to get exec and conf privileges again on the primary switch? . . . Without wiping it. I'm not a network admin if you can't tell already. Someone, anyone, please save my ass. [link] [comments] |
Another CenturyLink Blip this morning? Posted: 02 Sep 2020 05:24 AM PDT Anyone in South West US notice a small blip with CenturyLink 0240 MST / GMT -7 - 0245? Our external monitoring is not the best but the same public endpoints we monitor seemed to have gone down as did the ones from Sunday's issue. My guess is another brief routing issue or a peering issue with CenturyLink. I've ruled out internal infrastructure as much as I can. I don't see a full drop in traffic via internet during that time so it seems like only a subset of remote endpoints were inaccessible. Packets / sec dropped by 50% during that window as well as remotely monitored endpoints being inaccessible. [link] [comments] |
Active vs Passive SD-WAN Health Checks Posted: 02 Sep 2020 01:49 PM PDT We use FortiGate as our SD-WAN appliance for our branch sites. They work extremely well but a colleague recently was raving about Cloudgenix's application monitoring. The way he put it, they are looking at things like RTT between application to monitor how well a given application is performing. I personally dont see the value in making steering decisions for an entire branch based off a metric like this but I am curious for if anyone else has any experience. Does anyone have any experience with these kinds of passive health checks? If so, what is your experience with them? I'd be curious if other vendors have this capability and how accurate this kind of passive monitoring truly is. [link] [comments] |
Posted: 02 Sep 2020 03:18 AM PDT Hi Everyone, Controls engineer here. Not looking to get certified (Yet, anyway), but I was wondering if anyone had a source for old CCNA Industrial resources for cheap/free? Just looking to learn some things to make my job easier. [link] [comments] |
Posted: 02 Sep 2020 02:39 PM PDT Hi all, I'm having trouble writing the NAT rules to handle this. I started by attempting to translate 10.10.0.0/23 to 10.11.0.0/24 prior to sending to 10.200.10.128/25 (I know the varying size subnets will affect which clients get translated, that's fine.) but couldn't wrap my head around the NAT rules needed to do that. If I could do that that would be cool, then if the vendor changes. However it would be just as helpful if I could simply translate 10.10.0.0/23 to 10.11.0.130 <-> 10.200.10.130 as it's the only server the clients on spoke 1 need to access on spoke 2. 10.11.0.0/24 is a non-existent subnet, it's included in the tunnels between Spoke 1 <-> Hub and Spoke 2 <-> Hub. TL;DR, want to hide a subnet behind another subnet or IP behind another IP between two spokes over VPN tunnels. Not sure how to write NAT rules. Caveats/Additional Info:
[link] [comments] |
Posted: 02 Sep 2020 02:30 PM PDT We're looking at using the Wade NPRM-3. http://wadeantenna.com/product/economical-light-duty-non-penetrating-roof-mount/ They have a wind-loading/thrust-vs-surface area guide, but I'm not entirely sure if I completely understand it. We're looking to mount a Meraki MR84 and two MA-ANT-25s to it, for a total surface area of 1.27 sqft. That document doesn't help us calculate the amount of ballast we would need, as the lightly shaded grey area is indicated as requiring 480 lbs of ballast (about 12 cinder blocks at 40lbs each). We're planning to mount the hardware at human accessible height so I'd say we're within 2' from the collar. My questions would be...can we use less weight than this and how can we calculate that? I see in Wade's promo videos this same NPRM with less weight, and much higher mast heights. [link] [comments] |
Cisco WLC and browser compatibility Posted: 02 Sep 2020 11:33 AM PDT Hey guys, I've long been seeing issues with Cisco WLC's and compatibility issues with Chrome and Edge, IE seems to work fine but it's being deprecated by MS. Is anyone aware of browser settings or a software version of WLC what's more compatible with modern browsers? We're currently running 8.5 Edit: Thanks for the recommendations. Apparently the the official Cisco response too: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp80151/?rfs=iqvred [link] [comments] |
Capturing number of end devices via access switches? Posted: 02 Sep 2020 01:47 AM PDT I have a strange requirement to gather the number of people in a office (returning to work during CV19). Now, i streight away thought about pulling something from the access switches. I also an idea to pull something from the DHCP Scopes as they renew when they are in the office. Anyone done any of this type of monitoring/reporting? [link] [comments] |
Exinda WAN optimiser recognising Whatsapp as peer to peer traffic Posted: 02 Sep 2020 06:30 AM PDT Hi All, I have recently moved to a company that uses Exinda WAN optimising appliances for some customers. I have discovered an issue with some of them where they no longer seem to be recognising Whatsapp traffic correctly and are not treating the traffic as per the Whatsapp application policy. The traffic seems to be hitting the Peer to Peer traffic rate limit we have in place instead. Has anyone had any experience with an Exinda doing this before and if so did you resolve it ? I plan to engage Exinda regarding this but just thought I'd reach out on here too. [link] [comments] |
Help: static ip not being stable Posted: 02 Sep 2020 04:37 AM PDT I have a windows CE device connected to a switch with multiple other PCs. Every time I set the ststic ip it stays online for few hours and then disconnects and goes back to DHCP. When it goes to DHCP it assigns to a completely random ip with a random subnet mask with no access to local network. Only happens on this one device. Any idea where to look, or is it network or device problem [link] [comments] |
Posted: 02 Sep 2020 02:25 PM PDT Hello guys! Ok so I have a charter school who their previous "IT" set up WiFi ubiquity AP AC PRO one in each floor (3 floors) My question is 1- how can I get the best coverage in each floor using just the current APs (is there settings on the web interface ) I am not a pro at ubiquity system, each AP goes straight to a Cisco POE switch through CAT6. 2- how can I make each AP "seemless" like WiFi jump from AP to AP, Any suggestions is highly appreciate it!! [link] [comments] |
Posted: 02 Sep 2020 01:20 PM PDT Hello everyone, I have just landed on a new job on the ISP side of networking. All my career I've been working on corporate networks and all of their perks. Now I'm facing things like having to NAT like 30 to 35 Gbits of traffic at the peak hours of business. The current team is using some Linux physical servers with iptables for this job and when it works, it does it pretty well. But I've seen a couple incidents were the lack of support is notorious and I'm guessing that there has to be another way. Maybe more expensive on the upfront, but with some decent return of investment to show. What kind of brands and models can I look for before getting in contact with the vendors? I'm thinking Cisco/Juniper/Huawei or maybe another one. This is a new field for me and I don't want to recommend to but some BS. Thanks! [link] [comments] |
Help: Suggestion for proxy replacement Posted: 02 Sep 2020 02:22 AM PDT We currently use a TMG server for controlled access to the Internet, and want to replace it. There are no direct openings towards internet with a few exceptions. Basicly, it has 2 roles - Squid can easily handle the web proxy role. TMG is running on a 4 server cluster, with failover. We would like failover as well (Short lived DNS records and DNS round robin could do as a poor mans failover). Can we run 1500 VPN servers on servers without any issues ? How does VPN solutions scale ? We do not see more than 500Mbit/s bandwidth total among the 5000 clients (after eliminating forbidden traffic). We also want always-on VPN from home, more or less same functionality. That one gets more difficult. Layering VPN channels is theoretical possible but too complicated. So 2 different always-on VPNs if possible ? Route LAN through one, Internet through another ? or a 3rd solution ? [link] [comments] |
Could reach an external site from intranet Posted: 02 Sep 2020 12:35 PM PDT This morning a user alerted me to an issue where she was unable to reach some links we sent her. When she click the links she got a generic ERR_CONNECTION_TIMED_OUT message in the browser. Working remote, I said ok let me try the links, and they opened up for me no problem. So I VPN'd in and RDP'd to a machine onsite and tried to reach those links and sure enough, same error. Tested numerous other sites and they all worked. So the next thing I tried to do was a ping test to the site. Ping resolved the IP, but didn't return any responses. Tried this several times. I did an nslookup for the site and that showed our local DNS resolving the sites host. Then I tried a ping again and the host responded. Want I'm curious to know is did the nslookup do something that cleared this issue up, or was it just coincidence (which I would find very strange)? [link] [comments] |
Posted: 02 Sep 2020 12:22 PM PDT Looking for non-DC and not ATT, Comcast, Verizon ISP recommendations in the valley. I have vast experience with the aforementioned along with Telepacific, Cogent, Zayo, CenturyLink (L3) but looking for what other people are using. We are moving into a new building (300 users) and really would like to try something new. Can anyone recommend one? Looking for gig/gig over fiber for straight internet access for roughly 300 users. [link] [comments] |
So Arista only has a 1 year hardware warranty? Posted: 01 Sep 2020 07:04 PM PDT I've been comparing some of the major players for a hardware refresh coming up and - am I reading this right - Arista only has a 1 year hardware warranty?! Aruba and Cisco both come with a limited lifetime warranty on hardware, which is 5 years past the EoL date. Am I missing something here? Does everyone just look past it because they like the hardware & software? Is the pricing that much better to deal with the risk of only a 1 year warranty? [link] [comments] |
Point to point testing with two CentOS clients Posted: 02 Sep 2020 12:59 AM PDT Hello! I wanted to put this out there to see if anyone has setup anything similar! I'm troubleshooting some network performance issues a very large WAN. I've done my usual tests but I haven't found anything conclusive. I've setup two CentOS Linux boxes as network probes one at a branch site and another at our data centre. I regularly run iperf to test performance but I'm really looking for something I could run constantly that wouldn't take up bandwidth to troubleshoot connection issues. Wondering if anyone had a similar setup could give me a few pointers of ways to approach this! Looking forward to reading the responses thank you for your time! [link] [comments] |
Juniper EX3300 "Storage size changed" Posted: 01 Sep 2020 06:41 PM PDT In the last three weeks I've started getting the following messages on two EX3300 stacks:
Each stacks is made up of seven switches running version 12.3R12-S10. My google-fu has failed me in finding a resolution. Has anyone else seen this before? [link] [comments] |
Can someone explain to me the purpose of a Recursive Static Route? Posted: 01 Sep 2020 06:30 PM PDT Some background, I passed my CCNA a year ago and I know what a static route is. I've heard of a floating static route, and understand it's purpose and configuration. But during my studies (Self) I never came across a Recursive Static Route. I have a friend who is getting ready to take Net+/CCNA and he has asked me for help with it. Both of us understand...vaguely...what it is but neither of us understand the purpose of it. At best, it seems like it saves the Router a little bit of overhead by avoiding a second lookup? But what it saves seems minimal. What are we missing here? [link] [comments] |
Posted: 01 Sep 2020 11:41 PM PDT Been reading the different subs related to networking. While browsing I've noticed; from my perspective, a very high number of users running multiple VRFs in their networks. Please tell me why you're doing this. I hate them and think they're used as a crutch. I'm considering a move to an agency that uses them extensively and has consistent outages/network problems. Help me see it from your perspective. [link] [comments] |
You are subscribed to email updates from Enterprise Networking Design, Support, and Discussion.. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
No comments:
Post a Comment