IPv6 Proxies

Monday, July 5, 2021

I've just put in a new C9500-48Y-4C which has a new IOS version than another I put in last year.

New one has IOS17.3

Two things I've noticed is Cisco have now removed the limit of only being able to assign MTU via the system MTU and you can now increase it per interface which is great!

The second is that they've increased the 'qos queue-softmax-multiplier' from a maximum of 1200 to 4800.

That seems like a huge increase in the amount of buffers a port can request from the shared pool. I'm assuming this isn't a mistake in the config but I can't find anything detailing the increase in this.

Could anyone else confirm if this is correct and has anyone had to utilize this without hopefully any issues?

I might increase mine to 2400 and see how that goes as we have a few 1Gb ports (can't increase to 10Gb) which could do with the extra buffers for microburts.

Thanks

Sunday, July 4, 2021

Cisco nexus 3048 openflow support

I have bunch of cisco nexus 3048 switch in stock (unused). I was reading about openflow and found cisco nexus 3048 switch support openflow. Now question is how do i turn this switch to talk to SDN controller using openflow. Cisco document saying you need to Install openflow plugin. These switches isn't in support so not sure if i can download software or not and do i need license to activate openflow?

Does anyone has any experience or knowledge around this subject?

Moronic Monday!

It's Monday, you've not yet had coffee and the week ahead is gonna suck. Let's open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarrassed to ask!

Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.

Note: This post is created at 01:00 UTC. It may not be Monday where you are in the world, no need to comment on it.

Firepower Management Center (FMC) Email Health Alerts

Hello I'm currently running Firepower Management Center (FMC) v 6.6.4 with a couple of FTD. I've configured the health alerts within the FMC correctly to the point where I'm able to receive the email notifications for the Health Alerts.

The current problem is that the Health Policy I've created is set to run in 5 minutes intervals. This ends up sending email health alerts every 5 minutes. Basically I get the same repeated email alert every 5 minutes.

Is there a simple way to suppress the repeated health alerts? My goal is to avoid receiving email health alerts for the same thing every 5 minutes but still be aware in real time if any issues occur.

Anyone have any idea what could be causing this?

Ran Wireshark to capture some broadcast traffic, seeing this constantly, anyone have any idea what could be causing this?

Broadcast ARP 60 who has 169.254.169.254 ? tell xxx.xxx.xx.xx

Seems to be repeating every 1-2 seconds seems to be coming from the same subset of interfaces?

Screwed up, paranoid that i uploaded personal diaries into my work computer via Remote Desktop. (Dragged and dropped from my pc to my work pc)is there anywhere i fan look for these files besides the recycle bin? I wanna make sure i didnt upload anything.

can I check for these files?

I checked the desktop and recycle bin and theyre not there. Im not entirely sure if they were transferred.

Is there a place I can find this? Ive had a dark year and let out some personal stuff so I wouldn't want my boss to find it.

I did a kind:video and kind:movie on my user profile and went through my recycle bin. Is there anything else I should look through

Screwed up, paranoid that i uploaded personal diaries into my work computer via Remote Desktop. (Dragged and dropped from my pc to my work pc)is there anywhere i fan look for these files besides the recycle bin? I wanna make sure i didnt upload anything

can I check for these files?

I checked the desktop and recycle bin and theyre not there. Im not entirely sure if they were transferred.

Is there a place I can find this? Ive had a dark year and let out some personal stuff so I wouldn't want my boss to find it.

I did a kind:video and kind:movie on my user profile and went through my recycle bin. Is there anything else I should look through

Complete noob here: how do I create time limits for using my wifi network?

Hey everyone, I am a complete noob and I apologize if the question is super straightforward. I am trying to take my pomodoro sessions to the next level by generating time-boxed password access to my network. Any idea how I would go about doing that? Please be as thorough or brief as you’d like.

IPTables question regarding POSTROUTING / PREROUTING.

Hopefully someone can help.

I was trying to add a rule in the iptables firewall, so that a certain private ip, let's say 192.168.0.15 to be allow to acces the 6991, 8991 and 80 ports, and the public ip 86.10.1.101 considering the gateway is 86.10.1.10.

Is this command correct?

IPTABLES -t nat -A POSTROUTING -p tcp -s 192.168.0.15 -d 86.10.1.101 -m multiport --dports 6991, 8991, 80 -j SNAT --to-source 86.10.1.10