Normal day to day time spent on what in work?

Hi everyone,

I thought I'd pop up pose the question to everyone, what does everyone mostly come into contact with or work on mostly these days? For me I work in a medium sized business so for me its mainly our medium sized data centre and branch sites which are pretty large in size. For me almost all my time is split between Cisco and Juniper devices using the CLI. I use to be the number 2 at my company but I'm the number 1 now since the senior moved on. I still keep in touch and he's gone to a massive company with a huge huge international network, SD-WAN and hundreds of branches etc...I asked him the same and he said he spends most of his time still on the CLI on 99% Cisco gear (the odd SRX here and there to). But he doesn't really touch the SD-WAN kit that much because it doesn't need as much "day to day" work on it all. I thought I'd pop up ask everyone what their day to day looks like and what they're usually on?

Here is a quick guide on getting policy based routing to work with PIA VPN on VyOS

https://hedberg.io/vyos-policy-based-routing-with-openvpn/

This is a guide on getting specific hosts to use specific OpenVPN connections. It also enables load balancing of the VPN connections.

It is also possible that aspects of this can be ported over to EdgeOS, however this is not tested.

Change IP address without proxies and VPN

Hi, I am trying to change my ip. I used to have dsl internet in which i turned the power off and got a new Residential IP address. I was able to run new fresh adwords, paypals etc. But now I have cable internet and the IP address does not change. Does anyone know how get a different public ip address without having to purchase proxies and vpns?

Connecting two VLT cores

Hello all, Anyone know if it’s possible to connect two switch groups using VLT to each other?

In my scenario I have two 40Gb switches acting as the core and two 10Gb switches on the VMware end. Both have VLTi connected to each pair. I’d like to do LACP between the two stacks. Is this accomplished by a two port channels (one on each 10Gb switch) with the vlt-peer-lag on the core end for each? Or can I use one port channel shared by both via vlt-peer-lag connected to core?

CoLo Datacenter Connectivity with Main DC

Hey everyone,

Our IT manager has been planning for building a hot disaster recovery site at local Colo. If the main DC fails for whatever reasons, systems must be available to users at any given point of time.

We are to figure out what would be the connectivity type to connect the two data centers. I have no experience with this, I figured some of you might have done this before.

VXLAN RT Problem on Nexus

I have problem in my Eve-NG lab. My Nexus 9000v version 9.2(2) switch gets route from external network, and then adds RT, despite there aren't strings:

 route-target export 65000:10077 route-target both auto evpn 

in VRF address-family ipv4 unicast config. I don't understand why it adds RT. Could you explain me, or show where are my mistake.

Leaf-103(config-vrf-af-ipv4)# sh bgp l2vpn evpn 172.16.77.0 BGP routing table information for VRF default, address family L2VPN EVPN Route Distinguisher: 192.168.77.103:3 (L3VNI 10077) BGP routing table entry for [5]:[0]:[0]:[24]:[172.16.77.0]/224, version 20 Paths: (1 available, best #1) Flags: (0x000002) (high32 00000000) on xmit-list, is not in l2rib/evpn Advertised path-id 1 Path type: local, path is valid, is best path, no labeled nexthop Gateway IP: 0.0.0.0 AS-Path: 64577 , path sourced external to AS 192.168.100.103 (metric 0) from 0.0.0.0 (192.168.77.103) Origin IGP, MED 0, localpref 100, weight 0 Received label 10077 Extcommunity: RT:65000:10077 ENCAP:8 Router MAC:5000.000d.0007 Path-id 1 advertised to peers: 192.168.77.11 

Configs Nexus:

cfs eth distribute nv overlay evpn feature ospf feature bgp feature pim feature fabric forwarding feature interface-vlan feature vn-segment-vlan-based feature lacp feature nv overlay fabric forwarding anycast-gateway-mac 0001.0001.0001 ip pim rp-address 192.168.238.1 group-list 238.0.0.0/24 bidir ip pim ssm range 232.0.0.0/8 vlan 1,10,20,77 vlan 10 name L2VNI-for-VLAN10 vn-segment 10000 vlan 20 name L2VNI-for-VLAN20 vn-segment 20000 vlan 77 name TENANT77 vn-segment 10077 vrf context TENANT77 vni 10077 rd auto address-family ipv4 unicast vrf context VPC-Peer-Keepalive vrf context management hardware access-list tcam region racl 512 hardware access-list tcam region arp-ether 256 double-wide interface Vlan10 no shutdown vrf member TENANT77 ip address 192.168.11.1/24 fabric forwarding mode anycast-gateway interface Vlan20 no shutdown vrf member TENANT77 ip address 192.168.12.1/24 fabric forwarding mode anycast-gateway interface Vlan77 no shutdown mtu 9216 vrf member TENANT77 ip forward interface nve1 no shutdown host-reachability protocol bgp source-interface loopback100 member vni 10000 suppress-arp mcast-group 238.0.0.10 member vni 10077 associate-vrf member vni 20000 mcast-group 238.0.0.10 interface Ethernet1/1 no switchport medium p2p ip unnumbered loopback0 ip ospf network point-to-point ip router ospf UNDERLAY-NET area 0.0.0.0 ip pim sparse-mode no shutdown interface Ethernet1/7 description ** to Ext-Ro02 ** no switchport vrf member TENANT77 ip address 10.103.77.103/24 no shutdown interface loopback0 description ** RID/Underlay ** ip address 192.168.0.103/32 ip router ospf UNDERLAY-NET area 0.0.0.0 ip pim sparse-mode interface loopback77 description ** BGP peering ** ip address 192.168.77.103/32 ip router ospf UNDERLAY-NET area 0.0.0.0 interface loopback100 description ** VTEP/Overlay ** ip address 192.168.100.103/32 ip router ospf UNDERLAY-NET area 0.0.0.0 ip pim sparse-mode line console line vty no feature signature-verification router ospf UNDERLAY-NET router-id 192.168.0.103 name-lookup router bgp 65000 router-id 192.168.77.103 timers bgp 3 9 address-family ipv4 unicast address-family l2vpn evpn neighbor 192.168.77.11 remote-as 65000 description ** Spine-11 BGP-RR ** update-source loopback77 address-family l2vpn evpn send-community extended vrf TENANT77 address-family ipv4 unicast advertise l2vpn evpn aggregate-address 192.168.11.0/24 summary-only neighbor 10.103.77.2 remote-as 64577 description ** External Network - Ext-Ro02 ** update-source Ethernet1/7 address-family ipv4 unicast send-community send-community extended evpn vni 10000 l2 rd auto route-target import auto route-target export auto vni 20000 l2 rd auto route-target import auto route-target export auto 

Neighbor config:

! ip vrf TENANT77 rd 65077:1 route-target export 65077:1 route-target import 65077:1 ! interface Loopback77 description ** BGP-RID ** ip address 172.16.77.77 255.255.255.255 ! interface Loopback161 description ** This Interface simulates external net 172.16.1.0/24 ** ip vrf forwarding TENANT77 ip address 172.16.1.3 255.255.255.0 ! interface Ethernet0/0 ip vrf forwarding TENANT77 ip address 10.255.4.165 255.255.0.0 ! interface Ethernet0/1 mac-address 2000.0020.babe ip address 10.103.77.2 255.255.255.0 ! router bgp 64577 bgp router-id 10.103.77.3 network 172.16.77.0 mask 255.255.255.0 timers bgp 3 9 neighbor 10.103.77.103 remote-as 65000 ! address-family ipv4 vrf TENANT77 network 172.16.1.0 mask 255.255.255.0 network 172.16.3.0 mask 255.255.255.0 neighbor 10.103.77.103 remote-as 65000 neighbor 10.103.77.103 description ** VXLAN Fabric Border Leaf-103 ** neighbor 10.103.77.103 update-source Ethernet0/0 neighbor 10.103.77.103 activate exit-address-family ! ip route 172.16.77.0 255.255.255.0 Null0 

Ex Talari SD-WAN POC kit

Hi everyone,

We have 2 X E100 and 1 X E500 Talari / Oracle SD-WAN devices for sale. These were used for a single 2 week POC. We have now standardised all of our SD-WAN vendors on our own uCPE kit and have no need for these. Great condition with all original packaging. Price neg but far less than buying from oracle direct. Based in UK but will ship worldwide. Grab yourself a bargain. info@sdwansolutions.co.uk

Can two Root Bridges in a Network Cause Issues with Vlans

Hi guys,

We have 3 switch stacks across 3 floors in our building. I have created a vlan 240 SVI on 3rd switch stack 10.100.240.1 and then created the 240 vlan on the 1st and 2nd stack. For this purpose I have extended the Vvan via connecting the switches via a 240 access port. Switch stack 1 and 2 both connect to the 3rd switch stack.

When I add a machine to the 240 vlan on the 3rd stack and on the 2nd stack the machines are able to communicate. However when I add a machine on the 1st floor stack it is unable to communicate with other machines on the vlan and vice versa.

I have checked the status of the vlan which is up and the link from the 1st to 3rd switch stack is up as I am able to ping the vlan 240 SVI from the 1st switch stack.

I have checked STP on all three switches stacks and I have noticed that there are two root bridge switches. The first is a root and so is the 3rd. All switches have default priorities so based on MAC address the 1st stack should really be the root bridge.

Anyhow besides all that my question is if this can be causing the issue I am having with vlan 240 on the 1st switch stack and what is the best way to resolve this? Thanks.

Cisco WLC 2504 / software

Hi,

Have had a cisco wlc 2504 and 4 aps sitting for years, bought second hand and just starting having a look at it now. Is it only possible to connect to these and set up with the cisco software? I cannot connect via port 1 or 2, think default port 2 and use 192.168.1.1 for gui, tried connecting laptop; its showing connected to network and ports flashing, but cannot get to the GUI, tried various default ips and the one from network properties.

Can't download the software from cisco as it requires license or subscription, and the software i do have is encrypted .aes but has no password with it so cant decrypt.

Was going to use it in a garage that has a few areas with no wifi coverage.

Does anyone have experience with this set up and point me in the right direction or even tell me if this will or wont work without subscriptions?

As you can tell i have very little knowledge about this set up, i thought it would be plug and play with some set up but obviously not. Any help or advice appreciated

Thanks

Aggregating 2 completely separate networks?!?

Stupid idea but possible, I just can't figure it out. I have 2 locations with Ubiquiti Routing and Windows Servers on each side. However one location has 1gbps copper and the other has 50mbps fiber. I would like to aggregate these networks, but I don't know how. Is it possible to use port forwarding? Any other option?