Mobility Express Units on Site with Autonomous Units

Hi,

I have a site with 5 Cisco 1702 AP's in autonomous standalone mode. The site has put a ticket in today for more wireless units. The 1702's are end of life now, and in this part of the world there is no surplus or refurb stock, so I am forced to get the 1832 units in mobility express flavor. My question: Will wireless roaming and client connectivity work fine at a site with a mix of standalone 1702's and Mobility Express 1832's if the same SSID, Encryption and PSK are used? I know the Mobility Express master controller can't control the 1702's, but can they at least co-exist and provide the same SSID to the users?

Is the F5 BIG-IQ a Failed Product?

All I hear about it is, it's just a bunch of bugs and promises of fixes in the next release.

Did anyone experience it here?

Direct Vector routing

Hi all !

I just learning Direct vector routing. I confused about the part where a router whether considers the upddated or initial Direct vector from it's neighbors. For example, R1's neighbors are R2 and R3.

R1: [R1,R2,R3,R4] or R1= [0,2,4,inf]

R2: [R1,R2,R3,R4] or R1= [2,0,1,4]

R3: [R1,R2,R3,R4] or R1= [4,1,0,2]

R4: [R1,R2,R3,R4] or R1= [inf,4,2,0]

N.B: other all router are neighbors of R2; all other routers are neighbors of R3; Only R2, R3 are neighbors of R4

After round 1 update, R1 = [0,2,3 (R2),5(R2)]

So if I want to update R2, somehow it says R1 and R2 are in parallel so we are assuming that R2 did not get the updated info from R1.

But when it came to R4 ,which is on the other side of R1 and not a neighbor, it used the R1's updated table not the initial one.

Why is that? When do I consider other routers' updated table and the initial table?

Troubleshooting "Blocked by AAA" on procurve switches after

We are running dynamic VLAN with 802.1x peap-TLS for our end users and are experiencing an issue where after 24 hours or the weekend a computer powered back on/brought back into the office is blocked by the switch (in this case HP2530-48GB-POE+) for 7 minutes until it just lets the device on the network.

Double checking the NPS logs shows the server replying to the switch that this host is granted access and passed it's health checks when the host first tries to get on the network.

Here is a snippet of our config:

; J9775A Configuration Editor; Created on release #YA.16.04.0016 ; Ver #10:19.02.13.98.82.34.61.18.28.f3.84.9c.63.ff.37.27:00 hostname "HP2530-48G-3" console baud-rate 115200 dhcp-snooping authorized-server 10.1.10.1 dhcp-snooping authorized-server 10.10.10.10 dhcp-snooping authorized-server 10.10.10.11 dhcp-snooping vlan 1-2 1003 1005 1007 1012 1014 1016 1018 1020 dhcp-snooping vlan 1022 1024 1026 1028 1030 1032 1034 trunk 47-48 trk1 trunk banner motd "BANNER" logging 10.10.10.17 max-vlans 64 radius-server host 10.10.10.10 key radius-server host 10.10.10.11 key timesync sntp sntp unicast sntp server priority 1 10.10.10.10 sntp server priority 2 10.10.10.11 no stack no telnet-server time daylight-time-rule continental-us-and-canada time timezone -500 no web-management ip default-gateway 10.10.10.1 ip dns server-address priority 1 10.10.10.10 ip dns server-address priority 2 10.10.10.11 interface Trk1 dhcp-snooping trust exit snmp-server community "public" snmp-server contact "IT Department" location "1st Floor Data" aaa accounting update periodic 10 aaa accounting suppress null-username aaa accounting exec stop-only radius aaa accounting system stop-only radius aaa authentication web login radius local aaa authentication web enable radius local aaa authentication ssh login radius local aaa authentication ssh enable radius local aaa authentication port-access eap-radius aaa port-access authenticator 1-46 ... aaa port-access authenticator 2 unauth-vid 2 aaa port-access authenticator 2 unauth-period 60 aaa port-access authenticator 3 unauth-vid 2 aaa port-access authenticator 3 unauth-period 60 ... aaa port-access authenticator active vlan 1 name "default" untagged 1-46,49-52 tagged Trk1 ip address 10.10.10.100 255.255.254.0 ip helper-address 10.10.10.10 ip helper-address 10.10.10.11 ip helper-address 10.10.10.4 exit vlan 2 name "guest" tagged Trk1 no ip address ip helper-address 10.1.10.1 exit ... vlan 1038 name "DEPARTMENT1" tagged Trk1 ip address 10.10.38.100 255.255.255.0 ip helper-address 10.10.10.10 ip helper-address 10.10.10.11 exit vlan 1040 name "Digital-Signange-TVs" tagged Trk1 ip address 10.10.40.100 255.255.255.192 ip helper-address 10.10.10.10 ip helper-address 10.10.10.11 exit spanning-tree 40 admin-edge-port spanning-tree Trk1 priority 4 bpdu-protection no tftp server no dhcp config-file-update no dhcp image-file-update no dhcp tr69-acs-url device-profile name "default-ap-profile" cos 0 exit activate software-update disable activate provision disable password manager password operator 

Anyone ever experience this or can know how else I can troubleshoot this issue?

Labeling 48pt switches

How do you guys put physical labels on 48pt switches? I have 200 locations I manage, no IT staff onsite. We've had difficulty labeling our 48pt bad boys because there's no real estate to do so. 24pts are fine.

Labels are needed as we end up sharing closets with other companies and it's hard directing someone on which device is ours in a full rack.

TIA

How to remove ip6tnl0 and tunl0 interface from Ubuntu 16.04 running in Docker

Hello /r/networking,

I am currently running Ubuntu 16.04 in Docker and need to get rid of (or adjust) /sys/class/net/ip6tnl0 and /sys/class/net/tunl0.

The reason is that I need to install software that crashes when those interfaces are present. The precise reason is that the two interfaces have weird MAC addresses of unusual length:

root@5b573f1125d0:/# cat /sys/class/net/tunl0/address

00:00:00:00

root@5b573f1125d0:/# cat /sys/class/net/ip6tnl0/address

00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00

My questions:

• How can I remove those interfaces?

• What would that imply?

• Why are they there in the first place? They are not there on my AWS instances...

• If I can't remove them, how can I give them mac addresses that are 6 bytes long?

P.S. The only packages that I install on bare-bones Ubuntu 16.04 docker image are:

openssh-server ntp gparted sqlite3 libpython2.7 libfreetype6 libxml-security-c17v5 python-minimal net-tools vim 

Thank you very much :-) lmf4o

Cisco Router Firewall Options

I'm trying to enable some options in Cisco router, but not too sure which one to enable. Any help will be greatly appreciated. Thank you.

Options:

Filter Proxy

Filter Cookies

Filter Java Applets

Filter ActiveX

Filter Popup Windows

Block Fragmented IP Packets

Port Scan Detection

IP Flood Detection

Get the amount of real-time traffic for specific QOS in Juniper?

Hi, Is it possible to get the current amount of traffic for a specific QOS? In below example I just want to get the traffic for EF tag but seem like the volume recorded is more than the assigned configuration.

​

I used the below command to check and the interface has limit of 300m

Question:

1. does the packet/bytes are the number of traffic recorded, means its not the actual volume of traffic that is passing thru and the value is incremental?
2. Is it possible to get the real-time value of the traffic that being tag as EF?

​

show interfaces queue xe-5/0/0.5016 Queue: 5, Forwarding classes: EF Queued: Packets : 29954045173 141 pps Bytes : 5944710779298 212336 bps Transmitted: Packets : 29954045173 141 pps Bytes : 5944710779298 212336 bps Tail-dropped packets : Not Available RL-dropped packets : 65442 0 pps RL-dropped bytes : 15468759 0 bps RED-dropped packets : 0 0 pps RED-dropped bytes : 0 0 bps 

Thanks

Sonicwall 4650 WAN port to Force10 S4810 over fibre module

Hi Everyone,

Hoping someone might know why this particular pairing does not want to communicate.

The setup:

Subnet: 10.0.0.0/21

S4810 - Port 37 has Dell 10Gbit SR fibre module

Sonicwall 4650 - X24 has Sonicwall 10Gbit SR fibre module

X24 is configured in WAN zone with Static IP Address 10.0.0.9

S4810 has a VLAN 3 configured as untagged on port 1-6, and tagged on port 45 to 48 which connect to further downstream switches. Equipment on ports 1-6 are Hyper-V Servers running a number of virtual machines.

Sonicwall Port 37 on S4810 is configured as switchport and portmode hybrid with no shutdown

VLAN 3 on the S4810 has an IP address 10.0.0.22. Port 37 is added to VLAN 3 as untagged port.

My issue is that after configuring the Sonicwall X24 port with Static IP and connecting the fibre cable between the Sonicwall and the S4810, it is unable to ping any device on the 10.0.0.0/21 subnet from it's diagnostic pages. Also none of the other devices on the subnet are able to ping the WAN port 10.0.0.9 of the Sonicwall. I even made sure ping was enabled on the X24 port.

I have checked the cable and it lights up on either end and the Sonicwall page reports that full duplex 10Gbps connectivity is found.

This Sonicwall is acting as it's own little isolated pocket from the rest of this network due to security requirements to have IPS and some firewall control of traffic coming from devices connected to the sonicwall to the subnet 10.0.0.0/21. The Sonicwall's lan side is running on a different subnet with rules and services in place to filtering outgoing traffic.

Moronic Monday!

It's Monday, you've not yet had coffee and the week ahead is gonna suck. Lets open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarassed to ask!

Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.