Looking for a netflow monitoring solution

Hi all,

I am looking for a netflow monitoring solution possible open source, Linux based. Do you have any suggests for it?

Thanks

How to remove CAT6 Dust Cover?

I accidentally put the dust cover on before any cables, and now I can’t get it off? https://imgur.com/a/0PYYkqw

VPLS

Hi All,

This is more just a curiosity question.. have you guys encountered many VPLS setups.. surely stretching L2 connectivity over the WAN creating one big broadcast domain is not ideal?

​

thanks

Some question about SDWAN?

Hi All.

I'm currently reviewing SDWAN and I have question regarding how the technology works & design especially on Underlay and Overlay.

Question:

a. We have a centralize monitoring server and remote server which is connected to MPLS (traditional way).

• Does all remote and monitoring of vedge/controller should be on its VPN 512?
• Since from traditionally we just announce the mgmt to MPLS network or if internet router we build a secure connection to HUB or headend device or directly accessing the RTR using it WAN public IP.

b. How interconnection/communication between the traditional infrastructure and sdwan infra.

c. Common design in data center for underlay and overlay. How default routing being implemented.

d. If Multiple default route being use, does it means it being load balance? If Yes, How can we verify the actual exit interface of the traffix (ex. in traditional we have show ip cef) ?

e. If we need to forward Customer Internet traffic directly to internet of the site. We can achieve this by route leaking right ? If yes, another question is that .. If we have multiple default route on transport vpn how can we ensure that all data traffic will be forwarded only to internet circuit not on MPLS?

Let me know your inputs. Thank you so much.

EVE-NG export of Linux hosts not working

it just says: "Linux: Export not supported (19)."

exporting cisco images is fine.

I want to upgrade the ready to use ubuntu image, and have it updated for future labs. Is there any way I can achive this goal?

thanks in advance

Ways to quickly make a logical map?

I was hoping to see if anyone had a technique they use to get basic/logical network topology when remotely troubleshooting network issues? I work for a small MSP with several small to medium sized clients (not soho networks though). Sadly network maps aren't a thing for basically all of them and when they call in for a network issue I have basically nothing to go off of. I was looking at nmap and other utilities but it doesn't seem like it would be able to make a logical map. I don't need to see all online hosts just the core network (switches and APs)and servers.

​

• Which server/s are DNS and DHCP?
• What switches are there and what APs are tied to those switches?

Wondering if this makes any sense? Port security as a workaround for not having a AAA server.

I work for a DoD agency and per the STIGs, we are to have a AAA server. Duh right? Why wouldn't you have one? Well we don't. It's coming in the next year or so, but for now we do zero AAA.

Our current workaround to use port security on all access ports. We set the max numbers of mac addresses to 3 and also use sticky mac. When one of those trips, the port goes err-disabled.

This gets to be a pain because there have been numerous times that we get called in on days off because someone switched ports on the switch and now they caused their port to go disabled. Even on days when we are in the office, 9 times out of 10 when our help desk calls on the network team for help, its because port security was tripped and needs reset.

I was talking to my supervisor and asked why we can't just take it off since no where in the STIGs does it say anything about port security or sticky mac. He says because its our workaround since we have no AAA server.

I can't seem to grasp how this makes any sense. Using a AAA server authenticates clients who are authorized to be on our network, and blocks anyone else, among other things. Port security and sticky mac do nothing to keep unauthorized users off the network. It basically just doesn't allow the same mac to be on different ports and only allows so many mac addresses on one port. We still manually check all users on the network and reference a list of approved clients that gets updated every so often. So I am having a hard time understanding how port security and sticky mac is a temporary alternative for a AAA server. When we do our STIGs, we still mark the these ones as open, even though this is our workaround.

Does this also not make sense to you guys, or am I just crazy? The funniest part about the whole thing is when it trips, we just reset it, no questions asked. We actually have automated scripts running to clear port security and sticky mac once a day so its less we have to worry about it.

SNMP Wrong VALUS

hello guys

i have ASR-1002X and run different QOS on it to police users traffic, i use PRTG to monitor
each QOS service total traffic but the issue is when the traffic exceed 4.3G the router start send wrong value i see it in SNMP tester but inside the router itself i can see the right values

Spirent Equivalent product of Ixia IxANVL

Hi,
Does Spirent have any product like the Ixia IxANVL which tests DUTs against standard and RFCs?
I have searched and seen some "conformance test bundle" documents for Spirent TestCenter virtual. But they seemed old to me and I couldn't find them on the website by browsing.

Why can I access shared wifi with only 1 device ?

So my setup is kinda weird. I have a router that has internet and another router that doesn't. I connected both routers with a Lan cable. Now when I connect with my phone I cannot connect a second device. My plan was to extend the range of the main router