• Breaking News

    [Android][timeline][#f39c12]

    Tuesday, July 13, 2021

    Microsoft discovered another SolarWinds vulnerability Networking

    Microsoft discovered another SolarWinds vulnerability Networking


    Microsoft discovered another SolarWinds vulnerability

    Posted: 13 Jul 2021 02:18 PM PDT

    CVE-2021-35211

    https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211

    Makes me wonder how many other holes exist that they STILL haven't discovered.

    submitted by /u/Beruque
    [link] [comments]

    Is 25Gbps the new 10Gbps in the last mile?

    Posted: 12 Jul 2021 07:55 PM PDT

    For enterprises connectivity in the last mile over the next 3-5 years do you think we'll see the emergence of 25Gbps (SFP28), 50Gbps (SFP56), and 100Gbps (QSFP28) services? What's in the pipeline for enterprise firewalls in gateways? Fortinet seems to be the only vendor with a handful of 25Gbps appliances with SFP28. Do you think others will release 25Gbps capable firewalls or will vendors skip right to 50Gbps or 100Gbps? I'm asking this question with complete ignorance to the costs of the associated ports and the ASICS that are capable of supporting these traffic flows. Thanks in advance!

    submitted by /u/thecybernerd
    [link] [comments]

    Is there a way I can get a pcap on cisco 8540 WLC?

    Posted: 13 Jul 2021 12:52 PM PDT

    Our WLC is not sending radius accounting info to the radius server so I want to get a pcap to check what's the issue. Any idea how to do that? Thanks in advance.

    submitted by /u/Som3a92
    [link] [comments]

    Using NRL's MGEN?

    Posted: 13 Jul 2021 12:23 PM PDT

    I need to start off by saying; networks and network things are not my strong suit. At all. Like, I'm not even playing the same game.

    But, I need to learn how to use MGEN. And I think I've mostly almost got it? At least enough to sort of do what I need to?

    I'm struggling with the data, though. I need to transmit data with it, ideally have it read it from a file, and output in the receive log what data was in the packet.

    When I use the DATA command, it does that, but it puts the same data in every packet, and if there's more data than the packet size, it doesn't send any at all? At least it doesn't list it in the log?

    Help. I'm frustrated. And there seems to be precious little information on how to use this. The manuals from NRL are.....not great, and most of the Google results are about some STI. Even if you could just load me up with some keywords or search terms, that would be fantastic.

    Like I said, network stuff is not my jam. So please, please, talk to me like I'm all of four years old. Assume I know nothing, and use very small words, lol.

    submitted by /u/SoftPanic
    [link] [comments]

    Good resources on networking troubleshooting for Systems Engineering interview.

    Posted: 13 Jul 2021 08:20 AM PDT

    Anyone have some good resources for studying for networking interview part of a systems engineering loop? I know the basics pretty well so I can talk how a packet travels from layer 7 to 1 and back to 7. I know my protocols. What I was not able to find a good resource; is networking troubleshooting. How do you use ping/traceroute/tracert/ check dns/ telnet/ when do you go to tcp dump/ etc?

    submitted by /u/connic1983
    [link] [comments]

    24 port vs 48 port 1U patch panel?

    Posted: 13 Jul 2021 12:12 PM PDT

    Hi,

    I've tried to look online about the difference between the two, and the only difference I can really see is the price and the relative lack of supply of 48 port 1U patch panels

    Everywhere I've worked, they've always used 24 port 1U patch panels, instead of 48 port 1U patch panels. Is there a reason for doing this, other than cost? Kinda like why you'd use DACs instead of fibre SFP transceivers?

    I guess the other reason that I can think of is that two 24 port patch panels, would be "better" from a cable management POV, given you could plonk 24 ports in the top half of the switch, and 24 ports in the bottom half of the switch without necessarily needing a cable management arm. I'm struggling to think of any other reasons, however. So any help would be appreciated. Is it a case that the 24 port ones might just be more reliable somehow?

    submitted by /u/Solid-Profession
    [link] [comments]

    Is there a document superseding NIST Special Publication 800-41 Revision 1?

    Posted: 13 Jul 2021 07:28 AM PDT

    Hey geeks. Thanks for checking in. I'm diving into the Guidelines on Firewall and Firewall Policy published by the ITL and NIST. This document is incredible - but I noticed it was published in Sept. 2009.

    The latest update I've seen was from August 7, 2015 stating this rev 1.0 is still the current standard.

    Anyone have source on an additional document that's as high quality as the ITL's?

    Guidelines on Firewalls and Firewall Policy Source:

    https://www.govinfo.gov/content/pkg/GOVPUB-C13-f52fdee3827e2f5d903fa8b4b66d4855/pdf/GOVPUB-C13-f52fdee3827e2f5d903fa8b4b66d4855.pdf

    I'm sure very much of this information is still relevant - would be awesome to delve into a newer version featuring some bells and whistles, maybe taking cloud security into deeper consideration.

    Thanks again!

    submitted by /u/tg089
    [link] [comments]

    Accepted methods of measuring/projecting link capacity

    Posted: 13 Jul 2021 02:51 PM PDT

    I need give 500-600 links a "congestion score". Are there any accepted models or methods for doing this? When I asked for more specifics, my boss was no more specific than "congestion score", so I imagine he doesn't know what he wants either. I feel like there has to be an existing accepted best answer to this question. percentiles? standard deviations?

    I found some papers on measuring congestion in a link but it's too much https://www.researchgate.net/publication/270894492_Congestion_Score_Computation_of_Big_Traffic_Data

    I feel like some kind of stock market technical indicator would be perfect. Bollinger bands? To me, boiling this down to a single score would be answering the question "How likely is this link to reach capacity in the next X days".

    submitted by /u/Roisen
    [link] [comments]

    How to adjust Fragment thr: on Linux and Windows?

    Posted: 13 Jul 2021 02:21 PM PDT

    Hello Everyone,

    Not sure if this is a valid question. But, can I adjust the fragment of the MTU? Or, is that a hardware specification?

    If I am able to change it, can you direct me on how to change on Linux and Windows?

    submitted by /u/byteyourinteger
    [link] [comments]

    Failing over IP Range to DR with BGP

    Posted: 13 Jul 2021 12:36 PM PDT

    Been a while since I've done this so just need a quick refresher

    Currently building our DR site with the intension that our pool of WAN IPs will be able to failover from Site A to Site B.

    Both sites have ISR routers and /30 fixed subnets as the point to point between us and the ISP.

    Our pool of production IPs is a /24 that's currently statically routed to Site A by the ISP.

    Plan is to enable BGP at Site A + Site B and inject that /24 route ourselves.

    That much I can handle, but remind me how I set the metric so that Site A is the Primary and Site B is the secondary?

    EDIT: Same ISP on both sides

    Site A goes offline, ISP updates it's routing tables automatically and sends traffic for that subnet to Site B instead.

    submitted by /u/DarkAlman
    [link] [comments]

    typical MLAG convergence time

    Posted: 13 Jul 2021 12:22 PM PDT

    Working on an industrial application which requires end station redundancy. Looking at a redundant star topology. Does anyone know or point me to data on redundancy convergence latency numbers. I'm looking for 200ms or below.

    submitted by /u/jcsf321
    [link] [comments]

    Silverpeak Hub + Spoke help/question

    Posted: 13 Jul 2021 10:21 AM PDT

    We've got a ticket open with them but either I have a fundamental misunderstanding, or something else is wrong. The initial support guy said it should work and isn't sure why it's not.

    We've got an overlay in hub and spoke mode, let's just say Hub A, Spoke A and B. The overlay is applied to all 3 appliances and we can see that the underlay tunnels are built and the overlays exist.

    The hub site knows about Spoke A (shows in the hub appliances route tables as SP: Spoke-1 (SPOKE)), however it will not share that with spoke B. If I do a "find preferred route" from Spoke B to Spoke A it shows it as a "passthrough" route to the MPLS, and not a "SDWAN" route to go via a tunnel.

    Any idea whats up? We don't have regional routing enabled. Why isn't spoke B learning the path to A via Hub A?

    submitted by /u/sryan2k1
    [link] [comments]

    Streaming multiple real time video and audio feedback over the internet

    Posted: 13 Jul 2021 08:51 AM PDT

    Hi,

    I am new here and fairly unfamiliar with all the networking side of things however I was wondering if anyone can shed some light on my conundrum.

    I have been tasked with come up with a solution to stream high resolution video and audio feeds through the Internet to customers that need to witness some activities we do at our premises. This will involve:

    1) the customer able to check different cameras /microphones at any given time 2) the customer can change but the feed needs to be secured (using encryption, password, etc.) 3) at least one of the camera must be mobile, ideally with the customer being able to manipulate the parameters remotely (zoom, movement) 4) cannot have an external server for video and audio streams, must be internal

    Do you know of any way to do it? Is there any particular software / solution I can look into?

    Thanks for your help!

    submitted by /u/Lord_Darth_Endriu
    [link] [comments]

    [Troubleshooting/Design] Juniper EX4200 and ip routing question.

    Posted: 13 Jul 2021 07:39 AM PDT

    Hi all, might be a simple question for some of you to answer but I am just looking at feedback as to why this was setup in the way it was. Our microwave links aren't able to see each other.

    We have a juniper ex4200 switch with only a few ports configured. This is for radio traffic and microwave communication from multiple sites.

    We have 6 sites, each site has the following IP scheme for the microwaves.

    site 1: 172.16.1.1-254 subnet: 255.255.255.0

    site 2: 172.16.2.1-254 subnet: 255.255.255.0

    Each site has the microwave devices setup as

    172.16.siteID.10

    172.16.siteID.11

    All sites have the microwave devices on port 20, configured with this

    set protocols ospf area 0.0.0.0 interface ge-0/0/20.0 passive set class-of-service interfaces ge-0/0/20 unit 0 classifiers dscp cos-classifier

    The microwave links are unable to see each other, my assumption is because they're not on a proper subnet for traffic to communicate, or that there should be some vlan/bridge setup for them to communicate inside.

    Each site also has a technician IP setup on port 23

    set interfaces ge-0/0/23 unit 0 family inet address 172.16.siteID.1/24

    The sites all have internet access and have public IP addresses accessible but I don't see it anywhere in the configs.

    Thanks for any help!

    submitted by /u/spektatorfx
    [link] [comments]

    What's a decent protocol/FOSS implementation for naive multiplexing of multiple tcp streams over one port?

    Posted: 12 Jul 2021 10:31 PM PDT

    Hi. Long time lurker, first time poster. Wasn't sure if this would be more suited to /r/networking, /r/linux, /r/cpp, /r/programming or others, so I'm starting here.

    Hopefully one of you kind souls will have a simple solution.

    What's a decent, free, off the shelf, method to multiplex multiple TCP streams on the same IP over one stream/port number?

    I could implement my own library without TOO much thinking (and w/ plenty of time), but I'm trying to get out of the habit of rolling-my-own just because I can. It's a bad habit.

    What I have:

    • Working server code which implements several off-the-shelf TCP based services, as well as a custom one. Less vague: VNC (port 5900), Chrome DevTools (port 9222), custom-thingie (port 9999).

    • Working client code which connects to the server, and all 3 services, given all 3 port numbers.

    What I want:

    • Some sort of middleware (stand alone or library), which lets me put all of the server protocols "under" a single port number (aka multiplex), and a counterpart for the client. From an admin perspective it's easier to manage a single port number than several, and it's more correct to have my service use a single port number, than a tuple of them, where the tuple might change as implementation progresses.

    • For this middleware/library to be LOW OVERHEAD and trivially cross platform. I only touch Linux, but I've taken care, so far, to write cross platform code and use protocols and libraries which work on other platforms, and I'd hate to sacrifice that now.

    What I'm considering/am aware of:

    • vtun?

      • overkill? it encapsulates at the IP (tun) or Ethernet (tap) layer, and I don't want all that. I just need to multiplex multiple TCP streams over one. Also, I have no idea if it works cross platform or how much work it would be to make it a library.
    • ssh?

      • even more overkill? Authentication is already handled out of bound, so I'd need to disable all of that in ssh.. somehow. And encryption. I have no idea how easy it is to use as a library. Also using ssh SIMPLY for it's port forwarding-multiplexing abilities seems bloated, but maybe I'm wrong.

    TL;DR: I could write it myself, but what's a free and easy way to wrap multiple existing TCP-based services, both client and server (which I control the code of) so that they can use a single port number instead of several. I'm thinking something like socat except with fan-out.

    Thanks for your time.

    submitted by /u/loxias0
    [link] [comments]

    Cisco FMC - AnyConnect Client with DUO

    Posted: 13 Jul 2021 06:40 AM PDT

    Hey guys,

    I configured SAML authentication on my FMC, because I want to configure AnyConnect client with DUO.

    Everything works fine. However, When you try to authenticate to the AnyConnect using DUO, the DUO authentication screen takes 15 seconds to show up.

    is it normal?

    Thanks

    submitted by /u/Existing-Finish-3338
    [link] [comments]

    Visualizing flows in cloud (GCP)

    Posted: 13 Jul 2021 06:08 AM PDT

    Hi,

    I'm looking for solutions that will visualize traffic flow inside cloud environment (Google Cloud to be specific). One of the solutions I'm considering is to use Elastiflow which I've used in the past in on-premise DataCenter in the past.

    I know that Elastiflow is built so that is supports network based protocols (sFlow, NetFlow i.e.), but idea is to use Elastiflow as a base and utilize its Kibana dashboard for graphs and logstash logic for log enrichment. Idea would be to create a logstash configuration so that it will be able to read format of Google VPC flow logs.

    Just to clarify - planning to use Elastiflow from GitHub

    Anyone tried that or is aware of any other tool?

    submitted by /u/FINpacket
    [link] [comments]

    Citrix architecture design

    Posted: 13 Jul 2021 09:13 AM PDT

    Hi All,

    We are looking to migrate our current citrix ADC appliances to ADC SDX appliances. The old active / standby appliances are currently connected to the Core Switch at each of the DCs.
    The new design proposed is looking at connecting the ADC SDX directly to our perimeter internet firewalls.

    Does anyone know if there are any issues / limitations with connecting the Citrix appliances directly to the firewalls as opposed to the Core switches ?

    submitted by /u/s1lentninja
    [link] [comments]

    Just entering the industry - internship/co-op. How am I doing?

    Posted: 12 Jul 2021 06:24 PM PDT

    Hi all,

    I couldn't find much resources in terms of internship compensation for a networking company so I wanted to reach out to this community as I have questions regarding my future career path and wanted to get a feel on if I'm being fairly compensated.

    I accepted a co-op at a major networking company working as a fiber optics engineer, compensation of 70k/yr equivalent (OT available, 9 months) with a 9000 signing bonus. NE metro area. No certs, working on a bachelor in CE, will graduate in a year or so with a 2.8-3.0 GPA.

    I know salary is highly dependent on location, but how am I doing relative to other network engineers in the field for major metro areas? Would getting certs bolster my compensation in the future?

    submitted by /u/idontusereddit161
    [link] [comments]

    [Small Business] What's the best way to connect guest LAN computers separate from a private staff network?

    Posted: 12 Jul 2021 08:00 PM PDT

    Hey guys,

    I'm struggling to find the appropriate hardware for my makerspace setup where I need to separate staff & automation devices from guest/member devices. If this is the wrong place to post this, let me know.

    Our needs aren't so high (and limited budget) to require enterprise hardware. Just hoping to get a second opinion whether this is even the right way to approach this, or potentially recommendations for hardware.

    tl;dr: Should I try to find hardware that can separate networks with VLAN or can I do something like nested routers?


    Setup:

    • Staff devices include 3 LAN computers, and another 3 WIFI computers, all our phones and about 4 dozen WIFI IOT automation devices spread across a fairly large warehouse (70ft x 140ft).
    • Guest/member devices are purely LAN connections to communal computers and a few extra wall ports. Ideally these should be on a separate network from the staff devices.
    • Our internet provider gave us a Hitron CODA-4582 that is acting purely as a bridge. I don't seem to have the ability to get into to it to adjust any settings. Of it's four ports, 3 of them go to access points given to us by the provider which is doing a private and guest wifi. The remaining port goes into our router.
    • Currently, we're using a second-hand Buffalo WZR-HP-AG300H running DDWRT which came out 10 years ago and is really struggling to provide adequate throughput/speeds on the staff computers. It doesn't help that it's a wifi router tucked away in a server closet.
    • Everything is set up in a server closet where a patch panel and 24 port switch connects all the wall ports throughout the building.

    Here's a map of our ideal setup, assuming the Hitron could be setup with some firewall or security settings to protect the guest computers.


    Research:

    • I originally thought I might do VLAN but apparently that's mainly an enterprise feature and is rare on consumer hardware
    • I'm attempting to see if our provider will find a way to give us access to the hitron gateway but I'm not holding my breath.
    • I was recommended a VPN setup by a friend but I don't think that's suitable with IOT devices. I don't really have that many device to device connections anyways, it's mostly just giving staff a connection to internet (most work is cloud based) and connecting to the odd printer or google cast device.
    • I don't think I can use a single wifi router as without VLAN I'm not sure how to separate the public network. I could theoretically run a cable from the closet to where we want to mount the router, and then back to the closet to the patch panel. I might be have to find something with additional number of ports as I need 3 for the staff LAN and potentially one or more for a second access point expansion in the future if the coverage isn't good enough.
    • My current thought is I might need a wired router at switch 1 before my wifi router. I feel like it should be possible to setup the secondary router as a private subnet or something separate from the connections to the primary router, I'm not entire sure how as it might depend a lot on the firmware.

    Not having a clear understanding of the best way to map this has made it pretty difficult to choose hardware. At first I was ready to just grab some ubiquiti stuff for the VLAN features, but with such meager requirements I was wondering if one or two consumer routers would be adequate.

    Thoughts?

    submitted by /u/Gonazar
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel