Hello,
I would like to know when using Tacacs+ instead of using password, use user SSHCA within Tacacs+ server, not in the network device.
So that, avoid password being expired or authentication being failed. User will use the SSH Certs within Tacacs server to be authenticated.
Thanks
In my AWS console, it lists a particular IP address. I see this same IP address listed as one of the addresses listed when I do ifconfig -a. However there are a lot of other addresses listed so I'm not sure which one is the "right" one. And then finally when I do one of those online "what's my IP address sites", I get an IP address that I have never seen before. Just trying to understand these discrepancies. What am I not understanding? Thanks.
In my AWS console, it lists a particular IP address. I see this same IP address listed as one of the addresses listed when I do ifconfig -a. However there are a lot of other addresses listed so I'm not sure which one is the "right" one. And then finally when I do one of those online "what's my IP address sites", I get an IP address that I have never seen before. Just trying to understand these discrepancies. What am I not understanding? Thanks.
We had a Cisco stacked 3750 as our core/distribution in a collapsed model and we replace it wit 2 Cisco Nexus with vPC/HSRP/OSPF/static ip route summarization taking over the core/distribution role and also hosting our ESXi and SAN. However we never move our WAN/VPN and internet edge routers backbone connection to the new Nexus core/distribution switch. Our edge WAN/VPN internet routers consist of Cisco, Vyos (on DECISO hardware) and UBNT Edge Router Pro.
Recently we had power issue with the primary device in the stacked Cisco 3750 and we loose connection to some device connected directly to it. So to eliminate single point of failure I want to move the backbone connections of all our edge WAN/VPN internet routers to the Nexus and have redundant backbone connection distributed to the two Nexus with VRRP and HSRP configured on the edge WAN/VPN internet routers
What other advantages will I gain from this and is there any disadvantage of aggregating the WAN to the core/distribution ?
Hi all,
I'm in the need for a replacement Internet router. I'm currently sporting an end of life ASR1000 series. It's happily supporting my 1Gb/s Internet connection. If it goes "pop" I'm in trouble (see end of life).
I wish to replace it with a 10Gb/s capable model, as my next Internet speed upgrade will need to go beyond 1Gb/s. I also wish to be able to peer with a couple of providers. (eg. my ISP plus Megaport). Behind this router is a HA pair of Fortigate 500E's which can talk 10Gb/s if we use the X1/2 ports.
I am in New Zealand and we only get summary routing advertised to us so I don't need to house the full Internet routing table. I do run my own AS number, dual IPv4/6 stack and other "normal" things that you need a front end router for.
I've received quotes for both dual/resilient ASR1001-HX and ASR1002-HX models and they blow my budget out of the water. Either my expectations are wrong, or I've spec'd it wrong.
A 3rd option is that I should stop looking at Cisco and broaden my horizons.
Ideally I'd also build this front end in a more resilient way (HA?), but I need to be realistic with risk vs. budget too. I'm co-lo'd in a tier3/4 DC so about as good an environment as possible in terms of stability and proximity to services.
What other options should I be looking at?
All pointers gratefully received.
Cheers.
Hello - We've got some CLCs that we'd planned on using for Cisco Live that are expiring soon - can anyone make any recommendations as to online training partners that we should look at using them with? Areas we're looking to focus on would be switching/routing & datacentre.
Harvard, Yale, Princeton, etc. Obviously don’t disclose your identity but I’d be interested to know if their network is more or less the same or different than your typical public colleges. Is it more complex? Less? Does the hardware get updated more often? Do you get fun fancy “toys” to play with? Do you get a bigger budget? Finally, how’s the culture compared to other workplaces?
I'm a low level tech that is lucky enough to be mentored through real experience. Bear with me, I have a year of experience and most of the networking i've done was internal on one subnet- so basically between switch and clients/servers.
I have a customer that currently has 2 external static IPs, one from ATT and one from Comcast.
It basically looks like this:
ATT router->Cisco router1->Switch1->Clients
Comcast router->Cisco router2->Switch1->Clients
The clients are all static, with sales on one gateway (say comcast side) and production on another gateway (say ATT side)
Internally, these two gateways (cisco router 1 and 2) are in the same subnet. They are overlapped.
The goal is to replace both Cisco routers with a UniFi Security Gateway without changing other network properties beyond that. This would work if I could assign LAN 1 as one gateway and LAN 2 as another gateway on the same subnet, but the UniFi GUI will not allow this. It gives an error due to the second gateway being on the same subnet.
How can I make this work without defining a new subnet for one of the LAN ports and statically setting half the clients to this new subnet???
My work affects yours. I'm a cable installer for large construction projects. Currently we try to maintain a serialized/organized faceplate scheme. For example, in the hospital we are currently working on, one patient room will have outlets 1-6, the next room 7-12 etc. With those groups being terminated in that same order in the TR.
However, it causes a lot of headaches trying to accomplish that and I don't see the benefit to doing it that way. I want to more or less run the cables from the outlets into the TR without worrying so much about keeping them sequential. Instead, dress it nice into the TR and label the faceplates with whatever port it so happens to get terminated in. This would mean one outlet could have U46 port 32 and U21 port 12 next to each other in the same outlet. To me it doesn't make a difference. As long as both ends are well labeled and neat, does it matter to you?
Hey everyone!
I'm wondering if this is possible and if anyone has experience
Host: Ubuntu 18.04 - 1 NIC - 1x Public IP 144.x.x.x ETH0
Guest: PFSENSE
Guest: PC1
Guest: PC2
i'd like to see if I can do the following:
HOST -- Pass through all traffic to PFSENSE device to act as a firewall.
PFSense accepts that traffic on the 144.x.x.x. IP and then I run Internal Nat for 192.168.x.x on my PC1 and PC2 (Or any additional servers).
I've done the following:
1. Created a bridged adapter EM0
2. Created a NAT Adapter EM1
I would assume the bridged adapter would be sharing the hostip but I can't get it to pick up on that address - and setting it statically fails to ping anything.
Do i need to forward all traffic to a secondary, internal IP such as 10.x.x.x and then use that as my WAN or is it possible to share the 144.x.x.x IP?
I've been looking through docs but have been unsuccessful so far.
Can provide additional details if needed.
Thanks in advance
