Sunday, November 11, 2018

QoS on WLAN (AP to Client only)

Hey, I'll get right to the point. It's about QoS in a Cisco WLAN environment. Target is to apply QoS only for the AP to Client Traffic to priorize voice traffic. Not on the LAN Part as the bad performing part is the AP <-> Client way.

Setup:

  • a central WLC in version 8.5

  • an SSID with mixed Traffic (normal data and voice traffic (lync/Skype for Business))

  • an SSID for guests.

  • APs in Flexconnect and local switching for all SSIDs.

  • switchport in trunking mode to AP (native vlan for mixed traffic SSID

  • silver Profile for all SSIDs currently

  • WMM enabled

Is it possible for the AP to make QoS only on DSCP value? (voice packets are only tagged with DSCP by Skype Client)

The switchport is native vlan for the mixed traffic SSID so ToS seems not to be an Option.

Would simply changing the QoS Profile from silver to Platinum for the SSID with mixed traffic do the job? From what i read and understood so far it might be possible (as long as the AP can work with DSCP only).



Best practices for building redundancy into a regional WAN, especially during natural disasters

We are currently under the impact of the "Camp" wildfire) in Northern California, which destroyed the city of Paradise and still threatens surrounding areas.

Our org serves as regional ISP to all county's schools. The fire burned through several of our circuits (Comcast EPL and dark fiber), and shut down the county's residential/business CMTS for most of Thursday/Friday. Most consumers and businesses were without Internet

Thankfully Comcast was extremely responsive in repairing the most critical circuits as soon as possible, and the CMTS is now back online. Several branch offices/sites remain offline, however.

Given that the network is critical information infrastructure especially in times of emergency, what can we do to mitigate downtime in the future? We have redundant 10Gb circuits from our office to our upstream ISP, which worked exactly as planned when our primary circuits were down. However all circuits to our node sites are not currently redundant.

What's best practice in 2018? DMVPN mesh where each site gets 2+ circuits over diverse carriers? SD-WAN? Maybe WiFi p2p to sites with clear LOS? Specifically interested in L1-3 topology considerations.

BTW: we are safe, and have validated offsite backups of everything, generator-backed DC, etc.



Favorite IP address Managers

One things that's been neglected in my organization is a proper IP address manager... Do you have any recommendations? I'd love to see something that ties into Grafana.



Networking confusion

Hello,

I recently wanted to connect my ethernet outlets in my house to networking switch and then to wifi but when I went to the networking "cabinet" i noticed, that there are only 4 cat5e cables comming out but I have something arround 30-40 connected keystones/outlets. Can somebody please explain this to me?



Would you expect to see single mode fibre for short runs? Also easiest way to find out what fibre is currently installed?

Doing some work and for whatever reason we assumed the fibre was MM and turns out it was SM. Thing is when scoped we just assumed it was MM due to the short run involved. Rookie mistake to assume I know.

Would you expect a short <100m run to be MM? Fibre went in about 10 years ago from what we can tell.

Also for the future what sort of tips are there to work out what sort of fibre is installed if it’s legacy links for which no documentation exists?



Why is DrayTek's captive portal loaded with jWeixin (JS API for Chinese IM / Spyware)

https://imgur.com/a/rvX3ZIC

Anyhow I really, really don't like their captive portal. Can I go pfSense without having to re-setup our LAN-to-LAN configs?



Need help with selecting an ISP

I’m a sysadmin by trade, so I don’t have much experience with corporate level ISP’s.

I’m currently helping my Mother-in-law setup a new daycare, and working on selecting an ISP. The primary network won’t be very heavy, mainly just regular web browsing and word processing. However, I’m planning a fairly extensive VLAN for cameras, that parents will be able to remote into and view. At the previous daycare, parents would always have issues remoting in on the basic Comcast connection. (They paid $150 a month).

I’ve been getting prices for dedicated fiber connections, but the prices are a bit outrageous. 1gbps is coming to about $2500 a month. I know with a dedicated fiber line, this would be near light speed, but is this overkill for my needs? Would a 50mb or 100mb connection be enough if it’s dedicated?

I did look into Comcast, but the only upload speed they offer is 35mb, which is not enough.



Job Hunting after leaving state NOC

I'm currently lost as to where to head next and am asking for advice. I have been a sys admin for a very large state university for +7 years, working in a few different offices all relating to IT and networking infrastructure. I wanted to learn more networking within a large scale environment (only used active directory and ms servers prior to noc). My latest gig was +2 years as a lower engineer within a state NOC (primarily Juniper environment). In August I received a JNCIA cert (small cert I know) and left the position because it was short of a mess (lost Hostmaster the first week I started, lost 4 engineers within first year, one was our only senior engineer). I feel like I know enough to not be considered "new" to networking in a large scale environment. I regret my last two years as I feel it was not a conductive learning environment and many engineers bull-shitted me with fixes / information. I understand the outside issues of the networking world very well (failure points in escalation, procedure, carrier issues, aka the entire 'human' side of networking. On paper I feel like I only qualify for low paying jobs. I had students under me start leaving making 20k more with literal no professional experience. I have a degree and just want to be able to afford a house. Is there any hope?

​

​

This sub has been a world of information for me so let me say thank you, I appreciate anything! Also, sorry for the long read :)



How do I check a WAP is honouring DSCP markings

Is there a show command that will display what markings it is placing into what queues?

​

Thanks guys



Saturday, November 10, 2018