Microsoft discovered another SolarWinds vulnerability Networking |
- Microsoft discovered another SolarWinds vulnerability
- Is 25Gbps the new 10Gbps in the last mile?
- Is there a way I can get a pcap on cisco 8540 WLC?
- Using NRL's MGEN?
- Good resources on networking troubleshooting for Systems Engineering interview.
- 24 port vs 48 port 1U patch panel?
- Is there a document superseding NIST Special Publication 800-41 Revision 1?
- Accepted methods of measuring/projecting link capacity
- How to adjust Fragment thr: on Linux and Windows?
- Failing over IP Range to DR with BGP
- typical MLAG convergence time
- Silverpeak Hub + Spoke help/question
- Streaming multiple real time video and audio feedback over the internet
- [Troubleshooting/Design] Juniper EX4200 and ip routing question.
- What's a decent protocol/FOSS implementation for naive multiplexing of multiple tcp streams over one port?
- Cisco FMC - AnyConnect Client with DUO
- Visualizing flows in cloud (GCP)
- Citrix architecture design
- Just entering the industry - internship/co-op. How am I doing?
- [Small Business] What's the best way to connect guest LAN computers separate from a private staff network?
Microsoft discovered another SolarWinds vulnerability Posted: 13 Jul 2021 02:18 PM PDT CVE-2021-35211 https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211 Makes me wonder how many other holes exist that they STILL haven't discovered. [link] [comments] |
Is 25Gbps the new 10Gbps in the last mile? Posted: 12 Jul 2021 07:55 PM PDT For enterprises connectivity in the last mile over the next 3-5 years do you think we'll see the emergence of 25Gbps (SFP28), 50Gbps (SFP56), and 100Gbps (QSFP28) services? What's in the pipeline for enterprise firewalls in gateways? Fortinet seems to be the only vendor with a handful of 25Gbps appliances with SFP28. Do you think others will release 25Gbps capable firewalls or will vendors skip right to 50Gbps or 100Gbps? I'm asking this question with complete ignorance to the costs of the associated ports and the ASICS that are capable of supporting these traffic flows. Thanks in advance! [link] [comments] |
Is there a way I can get a pcap on cisco 8540 WLC? Posted: 13 Jul 2021 12:52 PM PDT Our WLC is not sending radius accounting info to the radius server so I want to get a pcap to check what's the issue. Any idea how to do that? Thanks in advance. [link] [comments] |
Posted: 13 Jul 2021 12:23 PM PDT I need to start off by saying; networks and network things are not my strong suit. At all. Like, I'm not even playing the same game. But, I need to learn how to use MGEN. And I think I've mostly almost got it? At least enough to sort of do what I need to? I'm struggling with the data, though. I need to transmit data with it, ideally have it read it from a file, and output in the receive log what data was in the packet. When I use the DATA command, it does that, but it puts the same data in every packet, and if there's more data than the packet size, it doesn't send any at all? At least it doesn't list it in the log? Help. I'm frustrated. And there seems to be precious little information on how to use this. The manuals from NRL are.....not great, and most of the Google results are about some STI. Even if you could just load me up with some keywords or search terms, that would be fantastic. Like I said, network stuff is not my jam. So please, please, talk to me like I'm all of four years old. Assume I know nothing, and use very small words, lol. [link] [comments] |
Good resources on networking troubleshooting for Systems Engineering interview. Posted: 13 Jul 2021 08:20 AM PDT Anyone have some good resources for studying for networking interview part of a systems engineering loop? I know the basics pretty well so I can talk how a packet travels from layer 7 to 1 and back to 7. I know my protocols. What I was not able to find a good resource; is networking troubleshooting. How do you use ping/traceroute/tracert/ check dns/ telnet/ when do you go to tcp dump/ etc? [link] [comments] |
24 port vs 48 port 1U patch panel? Posted: 13 Jul 2021 12:12 PM PDT Hi, I've tried to look online about the difference between the two, and the only difference I can really see is the price and the relative lack of supply of 48 port 1U patch panels Everywhere I've worked, they've always used 24 port 1U patch panels, instead of 48 port 1U patch panels. Is there a reason for doing this, other than cost? Kinda like why you'd use DACs instead of fibre SFP transceivers? I guess the other reason that I can think of is that two 24 port patch panels, would be "better" from a cable management POV, given you could plonk 24 ports in the top half of the switch, and 24 ports in the bottom half of the switch without necessarily needing a cable management arm. I'm struggling to think of any other reasons, however. So any help would be appreciated. Is it a case that the 24 port ones might just be more reliable somehow? [link] [comments] |
Is there a document superseding NIST Special Publication 800-41 Revision 1? Posted: 13 Jul 2021 07:28 AM PDT Hey geeks. Thanks for checking in. I'm diving into the Guidelines on Firewall and Firewall Policy published by the ITL and NIST. This document is incredible - but I noticed it was published in Sept. 2009. The latest update I've seen was from August 7, 2015 stating this rev 1.0 is still the current standard. Anyone have source on an additional document that's as high quality as the ITL's? Guidelines on Firewalls and Firewall Policy Source: I'm sure very much of this information is still relevant - would be awesome to delve into a newer version featuring some bells and whistles, maybe taking cloud security into deeper consideration. Thanks again! [link] [comments] |
Accepted methods of measuring/projecting link capacity Posted: 13 Jul 2021 02:51 PM PDT I need give 500-600 links a "congestion score". Are there any accepted models or methods for doing this? When I asked for more specifics, my boss was no more specific than "congestion score", so I imagine he doesn't know what he wants either. I feel like there has to be an existing accepted best answer to this question. percentiles? standard deviations? I found some papers on measuring congestion in a link but it's too much https://www.researchgate.net/publication/270894492_Congestion_Score_Computation_of_Big_Traffic_Data I feel like some kind of stock market technical indicator would be perfect. Bollinger bands? To me, boiling this down to a single score would be answering the question "How likely is this link to reach capacity in the next X days". [link] [comments] |
How to adjust Fragment thr: on Linux and Windows? Posted: 13 Jul 2021 02:21 PM PDT Hello Everyone, Not sure if this is a valid question. But, can I adjust the fragment of the MTU? Or, is that a hardware specification? If I am able to change it, can you direct me on how to change on Linux and Windows? [link] [comments] |
Failing over IP Range to DR with BGP Posted: 13 Jul 2021 12:36 PM PDT Been a while since I've done this so just need a quick refresher Currently building our DR site with the intension that our pool of WAN IPs will be able to failover from Site A to Site B. Both sites have ISR routers and /30 fixed subnets as the point to point between us and the ISP. Our pool of production IPs is a /24 that's currently statically routed to Site A by the ISP. Plan is to enable BGP at Site A + Site B and inject that /24 route ourselves. That much I can handle, but remind me how I set the metric so that Site A is the Primary and Site B is the secondary? EDIT: Same ISP on both sides Site A goes offline, ISP updates it's routing tables automatically and sends traffic for that subnet to Site B instead. [link] [comments] |
Posted: 13 Jul 2021 12:22 PM PDT Working on an industrial application which requires end station redundancy. Looking at a redundant star topology. Does anyone know or point me to data on redundancy convergence latency numbers. I'm looking for 200ms or below. [link] [comments] |
Silverpeak Hub + Spoke help/question Posted: 13 Jul 2021 10:21 AM PDT We've got a ticket open with them but either I have a fundamental misunderstanding, or something else is wrong. The initial support guy said it should work and isn't sure why it's not. We've got an overlay in hub and spoke mode, let's just say Hub A, Spoke A and B. The overlay is applied to all 3 appliances and we can see that the underlay tunnels are built and the overlays exist. The hub site knows about Spoke A (shows in the hub appliances route tables as SP: Spoke-1 (SPOKE)), however it will not share that with spoke B. If I do a "find preferred route" from Spoke B to Spoke A it shows it as a "passthrough" route to the MPLS, and not a "SDWAN" route to go via a tunnel. Any idea whats up? We don't have regional routing enabled. Why isn't spoke B learning the path to A via Hub A? [link] [comments] |
Streaming multiple real time video and audio feedback over the internet Posted: 13 Jul 2021 08:51 AM PDT Hi, I am new here and fairly unfamiliar with all the networking side of things however I was wondering if anyone can shed some light on my conundrum. I have been tasked with come up with a solution to stream high resolution video and audio feeds through the Internet to customers that need to witness some activities we do at our premises. This will involve: 1) the customer able to check different cameras /microphones at any given time 2) the customer can change but the feed needs to be secured (using encryption, password, etc.) 3) at least one of the camera must be mobile, ideally with the customer being able to manipulate the parameters remotely (zoom, movement) 4) cannot have an external server for video and audio streams, must be internal Do you know of any way to do it? Is there any particular software / solution I can look into? Thanks for your help! [link] [comments] |
[Troubleshooting/Design] Juniper EX4200 and ip routing question. Posted: 13 Jul 2021 07:39 AM PDT Hi all, might be a simple question for some of you to answer but I am just looking at feedback as to why this was setup in the way it was. Our microwave links aren't able to see each other. We have a juniper ex4200 switch with only a few ports configured. This is for radio traffic and microwave communication from multiple sites. We have 6 sites, each site has the following IP scheme for the microwaves. site 1: 172.16.1.1-254 subnet: 255.255.255.0 site 2: 172.16.2.1-254 subnet: 255.255.255.0 Each site has the microwave devices setup as 172.16.siteID.10 172.16.siteID.11 All sites have the microwave devices on port 20, configured with this
The microwave links are unable to see each other, my assumption is because they're not on a proper subnet for traffic to communicate, or that there should be some vlan/bridge setup for them to communicate inside. Each site also has a technician IP setup on port 23
The sites all have internet access and have public IP addresses accessible but I don't see it anywhere in the configs. Thanks for any help! [link] [comments] |
Posted: 12 Jul 2021 10:31 PM PDT Hi. Long time lurker, first time poster. Wasn't sure if this would be more suited to /r/networking, /r/linux, /r/cpp, /r/programming or others, so I'm starting here. Hopefully one of you kind souls will have a simple solution. What's a decent, free, off the shelf, method to multiplex multiple TCP streams on the same IP over one stream/port number? I could implement my own library without TOO much thinking (and w/ plenty of time), but I'm trying to get out of the habit of rolling-my-own just because I can. It's a bad habit. What I have:
What I want:
What I'm considering/am aware of:
TL;DR: I could write it myself, but what's a free and easy way to wrap multiple existing TCP-based services, both client and server (which I control the code of) so that they can use a single port number instead of several. I'm thinking something like Thanks for your time. [link] [comments] |
Cisco FMC - AnyConnect Client with DUO Posted: 13 Jul 2021 06:40 AM PDT Hey guys, I configured SAML authentication on my FMC, because I want to configure AnyConnect client with DUO. Everything works fine. However, When you try to authenticate to the AnyConnect using DUO, the DUO authentication screen takes 15 seconds to show up. is it normal? Thanks [link] [comments] |
Visualizing flows in cloud (GCP) Posted: 13 Jul 2021 06:08 AM PDT Hi, I'm looking for solutions that will visualize traffic flow inside cloud environment (Google Cloud to be specific). One of the solutions I'm considering is to use Elastiflow which I've used in the past in on-premise DataCenter in the past. I know that Elastiflow is built so that is supports network based protocols (sFlow, NetFlow i.e.), but idea is to use Elastiflow as a base and utilize its Kibana dashboard for graphs and logstash logic for log enrichment. Idea would be to create a logstash configuration so that it will be able to read format of Google VPC flow logs. Just to clarify - planning to use Elastiflow from GitHub Anyone tried that or is aware of any other tool? [link] [comments] |
Posted: 13 Jul 2021 09:13 AM PDT Hi All, We are looking to migrate our current citrix ADC appliances to ADC SDX appliances. The old active / standby appliances are currently connected to the Core Switch at each of the DCs. Does anyone know if there are any issues / limitations with connecting the Citrix appliances directly to the firewalls as opposed to the Core switches ? [link] [comments] |
Just entering the industry - internship/co-op. How am I doing? Posted: 12 Jul 2021 06:24 PM PDT Hi all, I couldn't find much resources in terms of internship compensation for a networking company so I wanted to reach out to this community as I have questions regarding my future career path and wanted to get a feel on if I'm being fairly compensated. I accepted a co-op at a major networking company working as a fiber optics engineer, compensation of 70k/yr equivalent (OT available, 9 months) with a 9000 signing bonus. NE metro area. No certs, working on a bachelor in CE, will graduate in a year or so with a 2.8-3.0 GPA. I know salary is highly dependent on location, but how am I doing relative to other network engineers in the field for major metro areas? Would getting certs bolster my compensation in the future? [link] [comments] |
Posted: 12 Jul 2021 08:00 PM PDT Hey guys, I'm struggling to find the appropriate hardware for my makerspace setup where I need to separate staff & automation devices from guest/member devices. If this is the wrong place to post this, let me know. Our needs aren't so high (and limited budget) to require enterprise hardware. Just hoping to get a second opinion whether this is even the right way to approach this, or potentially recommendations for hardware. tl;dr: Should I try to find hardware that can separate networks with VLAN or can I do something like nested routers? Setup:
Here's a map of our ideal setup, assuming the Hitron could be setup with some firewall or security settings to protect the guest computers. Research:
Not having a clear understanding of the best way to map this has made it pretty difficult to choose hardware. At first I was ready to just grab some ubiquiti stuff for the VLAN features, but with such meager requirements I was wondering if one or two consumer routers would be adequate. Thoughts? [link] [comments] |
You are subscribed to email updates from Enterprise Networking Design, Support, and Discussion. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
No comments:
Post a Comment