Thursday, February 8, 2018

What's something you haven't spent the time to learn, but know learning it would make your job easier.

For me:

  • Multicast
  • QoS


EdgesSwitch to Meraki MX65 poor performance

Hey Everyone,

Have something that is perplexing me...

I have an Edgeswitch ES-16-XG with a port uplinked to our Meraki MX65 (temporary).

When connected to the Meraki directly on its /24 I get close to our ISP advertised speeds 300/300...

When connecting to the internet via the Edgeswitch I get speed that is ~100Mbit..

Anyone know of what might be causing this or what things I might try to resolve this...?



Blog post about Fortnite going down last Sunday, goes into some nice details about their servers and databases



I made a thing by ripping off someones thing

https://imgur.com/a/0NibL

original https://imgur.com/gallery/29wGY

I might get fired for making this all day at work, so you better give me some damn karma.



scheduled andAutomated file transfer between two computers on different networks

So i'm looking for a bit of network advice.

I'm trying to figure out a solution to a problem we are currently facing at work.

We're implementing a new system where we need to schedule an automatic transfer between an export folder on our office network to an import folder on a different network every day at a set time.

Basically i need to copy everything from the export folder to the import folder on the other network and afterwards move the content from the export folder to an archive folder on the same computer, at 10am every day.

What's the best practice here? I was looking in to creating an FTP server on the remote computer and automating it with winSCP. But is there a better way?



[Question] DHCP Relay and DHCP server on the same network

I have a network A with a old dhcp server (call it server A) I want to get rid off. I have set up a dhcp-relay on the main L3 switch (also gateway) to my other dhcp server (on network B, call it server B) and I have added a scope for network A on it.

As today, both dhcp server respond to dhcp request for network A (obviously, only a small part get a IP from B because server A is much closer). But, if I set the scope down on server A, no one get an IP. Why?

I can ping server B from any machine in network A, so, it's not a routing issue.

Any guess where I need to look?

I know I may need to wireshark the sh*t out of this, but I just can't understand why my dhcp-relay seems to work only when server A is operating.



What do you use for PtP/PtMP encryption?

Alright /r/networking I need some help. I've got a customer who owns a couple of data centers. He's currently building a new one and his niche market is Top Secret data storage and transfer. We have the ability to provide the PtP to interconnect his data centers via Layer 1 DWDM or Layer 2 Ethernet but I'm running into some issues when it comes to Encryption. It must support FIPS 140-2 Level 3 and at minimum 10G transport. What do you think are the best option? I've looked into the Ciena 6500 and don't know if that will be the right fit as it's more of a Carrier/ISP product set.



Core switch stacking & multicast issue

Hello,

I've made a setup of 3 switches (Extreme x670) which are stacked native. I'm experiencing high stack port utilization (100% some times).

My guess is that multicast is redirected to the master switch through this stack connection. But to my knowledge multicast stays within its own VLAN, even while using stacking?

The setup is used to stream raw video to devices within the same VLAN, occasionally to another VLAN (max 4 at a time). The average bandwidth of these streams is high, over 3gb/s. The bandwidth of the stack is 80gb (native v_160).

The setup itself seems to work as intended, which seems odd because when hitting the 100% you should receive some kind of packet/link loss.

I'm new to this subreddit, so if I've missed any crucial information please tell me.



Is there a limit to the seq numbers for prefix-lists in IOS?

Simple question, I know, but I can't find an answer on the web. I'm about to make a change to one of our prefix-lists and as part of that I'm going to change the numbering from sequential to by 10s if possible. This particular list as 28 entries so I want to make sure it will accept seq numbers up to or higher than 280 before I start making these changes.



Patched ASA to fix CVE-2018-0101 and now Anyconnect rejecting SSL

Hi guys, we updated our ASA 5520 to 9.1(7)23 last night and everything looked good. But this morning we are getting reports of users not able to VPN in. We have been able to isolate the problem to Windows PC's, (Our testing last night was with people who all happened to have Apple devices) that have home firewalls that do SSL inspection. Getting the users to add SSL exceptions into their firewalls fixes it, but isn't very feasible given our scale and technical aptitude of our remote employees. Anyone else had this weirdness after patching, and if so any other workarounds?