Wednesday, September 5, 2018

CIR / EIR how to?

Hi, im wodering how to test CIR EIR between two localization? we have link between this localization and i get a question about CIR EIR, how can i test/calculate it?



Need to make my racks mobile

We got 8 42u racks and are setting up a lab for a variety of different classes. I need the racks to be mobile. I know this sounds like a crazy idea but the classroom is modular so I need to be able to disconnect power and data and move the racks around. Do any of you know of a solution that I could use. I know I can just install casters in the the bottom but I was looking for something with a little more stability and strength. Money is not really a factor as far as purchasing a solution, but I do need to use the current racks I have. Having a hard time finding a solution that is satisfying.



vendor invoice management and approval

good morning-

I run an ISP/NSP that is part of a larger company that also provides cloud, proserv and managed services.

I mention that first because it means I'm somewhat wedged into using certain software, and using outboard stuff is an uphill battle.

My business unit provides traditional NSP type stuff: DIA, MPLS, L2 services. We have some of our own fiber, but most of our work is done via NNIs (about 40) as well as some "managed broadband" stuff (where we hold paper on normal broadband circuits, coax, DSL, etc). We also do managed firewalls (which we couple with managed broadband).

The company uses Connectwise and it's not going anywhere. The company also uses ITGlue, Sharefile and Sharepoint, and it's unlikely they are going anywhere. My group uses Solarwinds Orion NPM.

My challenge is invoice approvals and linking vendor account info back to our own records of service delivery. We get about 300 invoices a month.

I'm looking for a scheme whereby I establish cannonical storage of the invoices that also me to associate arbitrary attributes to the invoices (like, linking to structured account info) as well as received dates, paid dates, approval status, and so on.

One feature of this scheme would be that if an invoice (and it's various dollar amounts) is linked to revenue, and the revenue and supporting agreement is not changed from the previous month, it would be approved without much (if any) human effort. The back office could do this without my team's involvement.

There's other stuff too - like my support staff being able to quickly drill into an invoice for a delivered services (going from monitored element in Solarwinds, our Agreement with the customer, and then to the structred account info, and then into spefici invoices if more details is needed).

Or, if we want to do a cost drive-down, we can select all the accounts/invoice based on various attributes and focus on them.

Etc etc.

Just looking for some tool/process ideas from y'all.

Thanks!



I'm studying Networking and need help with a question...

I recently started college and have been given an assignment to complete. One of the questions just doesn't make sense to me and was hoping to see if it made sense to you.

Q. Which two factors determine what you would use a network for?

Thanks for anyone who takes the time to help :).



Cisco Wireless question about client disassociation

So something I've been noticing a lot when attempting to troubleshoot clients through Prime Infrastructure... a lot of wireless clients seem to disassociate fairly frequently and then immediate associate again... usually to a different AP. The association history in Prime for the client ends up looking like a repeating wave between three APs. The durations between association times usually seem to always be around an a factor of 5 minutes... so 15 min 14 sec, 10 min 14 sec, 25 min 39 sec, 1 hr 10 min 55 sec, etc.

I've been wondering what this is about and how it probably affects the end-user experience. My assumption is it is disruptive due to the client having to move between APs... so anything real-time and/or latency sensitive like video chat or online gaming might be affected. I figured at first it may be due to a system default of 5 minutes on the User Session Idle but I adjusted it up to an hour and didn't see a noticeable difference. DCA is currently set on an interval of 10 minutes and I have EDRRM on so it seems like it wouldn't always happen in a factor of 5 between changes.

I can see a ton of RRM events for 2.4ghz, so many so that Prime is saying there are to many unique events per device, so I think I may need to tweak 2.4ghz RRM sensitivity down but the clients I'm seeing are also 5ghz which doesn't have nearly as much of an interference or co-channel utilization issue at our location and no where near the number of events.

Anyone have any thoughts or experience with this or is this just normal?



30ft Wall-mounted Free-standing Antenna Pole for 16kg antenna. Feasible or Not?

Hi. Is it okay to install a free standing 30ft wall-mounted antenna pole that can accommodate a single 16kg radio antenna? This will be installed on a rooftop and an option of a pole from the ground up is prohibited. AirFiber5u to be exact.

My concerns are maybe the antenna will not be stable because of the wind, will the pole needs support aside from wall clamps? What kind of pole do you suggest? Size? Im looking to use GI Pipe with 4inch in diameter, is it okay? Im also looking for ways to install this properly. Any help will be very much appreciated. Thank you.



PCs unable to get IP from DHCP with tons of DAI deny logs

Hey guys,

I had this weird DHCP issue happening on all our access switches (3850) after upgrading our core Nexus switches (7k). I upgraded our core on a Sunday morning and went smoothly. But then on Monday morning we received calls from users that their network is down.

All attempts on renewing DHCP was failing and when I had a look at 3850 logs and there were heaps of logs like below :

 1 Invalid ARPs (Res) on Gi2/0/4, vlan 100 ([847b.XXXX/169.254.0.55/501c.bXX/0.0.0.0/09:19:17 ])

1 Invalid ARPs (Req) on Gi3/0/8, vlan 100.([a44cxxxx/10.30.112.210/0000.0c9f.XXX/10.30.112.1/)

As soon as turned off DHCP snooping and DAI for VLAN 100 then the issue was resolved and I could renew DHCP almost on all affected PCs.

Anyone has had similar issues with DAI before? I read somewhere that I have to add below command to fix the issue:

ip arp inspection validate src-mac dst-mac ip allow zeros

I have also seen this as suggested solution to allow APIPA in DAI:

arp access-list VLAN_100

permit ip 169.254.0.0 0.0.255.255 mac any

ip arp inspection filter VLAN_10 vlan 100

Cisco TAC could not find an issue on the switches and are asking to re-enable DAC to troubleshoot further. But given the huge impact of this, I wanted to see if there a fix for this issue before turning it back on.

I'd appreciate any suggestions.

Thanks.



Anyone using Cisco FRA in production? Started testing and am noticing a feedback loop with RRM and FRA

So we have started deploying 3802Is on 8.5.120.0 and recently started testing FRA. Set all the radios to static role assignment, turned on FRA, then started turning the radios with a 100% COF to auto role assignment. We started with ~100 APs in a moderately dense deployment. Minimal LoS AP placement, normally a wall or two between placements, but still about ~25-40ft apart.

This initially seemed to go well, first COF run we had 8 APs show 100%. All the 2.4 Ghz radios were running a TX power of ~7-8. Set the 100% COF APs to auto and they converted to dual 5Ghz. Next batch about 5 APs, same story. Rinse and repeat for a couple of hours.

I've let it bake for about 12 hours and come back to something disturbing. We're up to 23 APs that have been converted to dual 5Ghz, and another 10 APs saying they have 100% COF. It seems like RRM and FRA are starting to form a feedback loop. FRA will disable an AP, RMM will boost power of the surrounding APs. FRA will have new redundant APs, convert, and RMM will boost the power.

So far I've noticed at least one area where a coverage hole seems to have formed. The center AP was converted, then later the 3 surrounding APs were converted. For the most part the 2.4 radios are still TX powered between 7-8, but there is a group starting to raise into the 4-5 range. Right now about 80% of the clients are still reporting RSSIs of => -65dBm and 70% are => -60. Signal quality is also looking really good with 90% at => -25dB. Our worst 5Ghz client is also reporting -77dBm, and the worst 2.4Ghz is reporting -66dBm. So the numbers say there isn't actually a problem and I should keep letting FRA go to town.

I've read the documentation, and I know that if there's an actual coverage hole, FRA will dump a radio back to 2.4 immediately. I know I have set an upper limit on what I want my 2.4 radios to TX at. I've looked at the debug and know that I'm not getting any significant bleed between floors. I'm just not sure if I want to ride the train all the way to end of the track where RRM has raised all the 2.4 radios to a TX power of 4, and FRA determined half of my APs were now at 100% COF.

TL;DR: FRA and RRM seem to be feeding into each other, FRA disabling 2.4 radios, RRM increasing TX power. FRA disabling more 2.4 radios. Repeat. Do I really want to end up with a bunch of 2.4 cells with a TX power of 4, and half my APs turned to dual 5Ghz?



Secure mounting options for firewall/switch? Dust protection and a fan?

I’m looking at replacing some of the equipment at our smaller international locations. Last time I visited one the cheap router was covered in gecko poop and dust. I’d like to avoid that :)

I’ve found small small wall rack units in country, but I’m not seeing anything for just a few desktop sized boxes (Fortigate 60e and an 8 port Unifi switch).

These are indoor locations, but really dusty environments and many have open venting/windows. I’m not worried about water, but dust and critters, and then heat from enclosing things.

Suggestions?



Tuesday, September 4, 2018

Firewall certifications?

For a beginner with some good sound knowledge in Network Security which certification is HOT currently? Palo Alto vs Juniper vs Cisco vs Fortinet?