Sunday, March 17, 2019

Moronic Monday!

It's Monday, you've not yet had coffee and the week ahead is gonna suck. Lets open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarassed to ask!

Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.



What are some fun networking projects that use arduinos?

I have a bunch of arduinos lying around in my house, including an Arduino Yun which has a Wi-Fi chip and a Linux distrubtion on board (https://store.arduino.cc/arduino-yun).

Are there any projects I could do around the house with them?

I was thinking of setting up a VPN with the Yun but I think it does not have enough RAM -_-



802.1x computer base certificate issues

Hi,

We are currently rolling out 802.1x authentication using EAP-TLS and have noticed issues when some users have to re authenticate and they send their username with 'host/' prepended. The username/CN is made up of the [hostname@xx.com](mailto:hostname@xx.com) however when the reauth occurs some computers send through host/hostname@xx.com which our radius server (Cloudpath) will respond with a REJECT response. They will 5-10 minutes later attempt to re-authenticate again, and eventually will send through their username/CN correctly which any intervention.

Has anyone seen this issues before? currently the issues appear to be with random Windows 7 and 10 computers.

Thanks



How to combine two internet connections

I live in a 3rd world country where my broadband speed is 4.3Mbps but also get free 5Mbps from my mobile carrier from midnight to 6am. I'm just wondering if there's a way I can combine both of these connections one that is a sum of both so I can download things faster. The router that I'm using to receive the broadband is running ASUS Merlin firmware. I can receive internet from my phone via USB tethering.



OSPF with two Router/Switch failover?

So been playing with how to accomplish a task based on no budget and "oh god this is config is so messy". This is involving my SIP voice network.

https://i.imgur.com/7cZveNk.jpg

I currently have SW1 and SW2 that are just basically hardware failover with full HSRP redundancy between the two. There is two /29's also between all of SW1-2 and R1-2. SW1-2 are nothing but static routes for two different ip sla tracks. If first track is up, send all traffic out the primary /29. If down, send out the secondary /29.

Every Router in the network also has an IP track for the primary IP of each /29, for if the first /29 goes down, go to the second /29.

I'm thinking ideally, I should replace SW1 and SW2 with something that can actually route, and keep the target IP the same between them with somehow failing over between. I was thinking of something like OSPF with L2/L3 trunk between and changing the AD on the secondary. That way if SW1 were to ever go fully down, HSRP would elect SW2 as the new .1, and it'd be the only valid route anyway from an L3 perspective.

Of course, budget is limited and I have two ASAs handling only very small chunks of public space but are whole chunky 5525's that I bet could work well for this LAN config w/ OSPF to exchange on my core as well.

Any thoughts would be great, since this would eliminate one more use case of default route in my network and make my voice network failover even smoother.



Anyone using CSR 1000V virtual routers?

Anyone using CSR 1000V virtual routers? What are you experiences like? What sort of hardware are you using? Are you using SR-IOV or just emulated vNICs?



Trying to learn about networks and discovered my router has several unexpected ports open

I decided to NMAP my local router and discovered there are several ports open that I do not think should be open.

PORT STATE SERVICE 21/tcp filtered ftp 53/tcp open domain 80/tcp open http 443/tcp open https 631/tcp filtered ipp 8080/tcp open http-proxy 49152/tcp open unknown

When I look at my router's backend I saw it said "Ports 22 and 443 are reserved by the service provider".

What is the reason for so many ports being open? I did not set up this router, it is just in my apartment.

This also occurs when i scan my global IP address, not the local IP.

Could someone from the outside world actually see all of these services offered by my router?



Scheduled Export SSH Session Output to CSV

I am trying to script a way to generate SSH output in a repeated, scheduled fashion and then export the output data to a CSV or TXT file. I have this mostly figured out using Excel and VBA scripting but the one big stumbling block right now is that I am having to run a bat file to initiate the SSH session. For this reason, the script is having to login and authenticate a new SSH session each time as opposed to simply keeping one SSH session open and executing the desired commands. While this isn't a complete show stopper for me, it is still not quite as clean as I would like it to be.

I have seen there is an active x library that is supposed to allow for running SSH out of VBA/Excel but it is a very old library - MSWINSCK.OCX. In fact, it isn't even available in any official Microsoft sanctioned manner. I had to get it off of an older install of Windows 2008r2 that I had. Even once I found it, I wasn't able to get it working as it just generated an error message while trying to run the VBA module.

In case it isn't obvious, I am new to scripting. Hopefully there is an easy answer for this for someone more experienced.



Is infrastructure ready for programmability (Cisco DNA)

Hello guys and GIRLS :)

I am making a research if the infrastucture is ready for programmability ?

*For example are you guys ready to throw out Cisco 2960X to be able to use VXLAN and SDA??

*What do you guys think about new 9200 model switches? (Advatage and Essential)

As far as i know Essential models are like L2 switches even if you take 9300 ? (old 3850 which is L3 or i don't understand their new system )

Please elaborate :)

Have a great day!

Denis



How often should I see OSPF LSUs?

I am working through an issue and need a sanity check... shouldn't i only see a few of these an hour? i am seeing 3-5 every few minutes and I think it the reason why I am dropping OSPF routes that are being redistributed by my firewall(s). I was hoping someone could shed some light onto this... Google tells me what they do, but my assumption is that I should only see one for every OSPF node every 30 minutes.

Thanks in advance