Sunday, September 12, 2021

POE Camera is drawing power - but interface is showing as down?

I have a POE camera, connected to a switch (EdgeCore AS4610-54P) running Cumulus Linux 4.3.0. Cable length is approximately 60m from the switch to the camera.

If I check the POE stats in Cumulus, that device does seem to be drawing power on port 3 (only 5W though):

cumulus@cumulus:mgmt:~$ sudo poectl -i swp1-swp48 Port Status Allocated Priority PD type PD class Voltage Current Power ----- -------------------- --------- -------- -------------- -------- ------- ------- --------- swp1 searching 0.0 W low none none 0.0 V 0 mA 0.0 W swp2 searching 0.0 W low none none 0.0 V 0 mA 0.0 W swp3 connected 31.2 W low IEEE802.3af/at 4 84.4 V 109 mA 5.9 W 

However, if I check the port status - it shows as down (it's connected to port 3)

cumulus@cumulus:mgmt:~$ net show interface all State Name Spd MTU Mode LLDP Summary ----- ------ --- ----- --------- ---------------------- -------------------------- UP lo N/A 65536 Loopback IP: 127.0.0.1/8 lo IP: ::1/128 UP eth0 1G 1500 Mgmt Master: mgmt(UP) eth0 IP: 192.168.75.60/24(DHCP) UP swp1 1G 9216 Access/L2 localhost (Ethernet28) Master: bridge(UP) DN swp2 0M 9216 Access/L2 Master: bridge(UP) DN swp3 0M 9216 Access/L2 Master: bridge(UP) DN swp4 0M 9216 Access/L2 Master: bridge(UP) DN swp5 0M 9216 Access/L2 Master: bridge(UP) DN swp6 0M 9216 Access/L2 Master: bridge(UP) DN swp7 0M 9216 Access/L2 Master: bridge(UP) 

I also checked this with a second switch (Ruckus 7150-C10ZP) - and it's similar - POE shows it as drawing power (port 3):

ICX7150-C10ZP Switch>show poe Power Capacity: Total is 240000 mWatts. Current Free is 210000 mWatts. Power Allocations: Requests Honored 11 times Port Admin Oper ---Power(mWatts)--- PD Type PD Class Pri Fault/ State State Consumed Allocated Error -------------------------------------------------------------------------- 1/1/1 On Non-PD 0 0 n/a n/a 3 n/a 1/1/2 On Off 0 0 n/a n/a 3 n/a 1/1/3 On On 6100 30000 802.3at Class 4 3 n/a 1/1/4 On Off 0 0 n/a n/a 3 n/a 1/1/5 On Non-PD 0 0 n/a n/a 3 n/a 1/1/6 On Off 0 0 n/a n/a 3 n/a 1/1/7 On Off 0 0 n/a n/a 3 n/a 1/1/8 On Off 0 0 n/a n/a 3 n/a 1/2/1 On Off 0 0 n/a n/a 3 n/a 1/2/2 On Off 0 0 n/a n/a 3 n/a -------------------------------------------------------------------------- Total 6100 30000 

But interface status shows as down (port 3):

ICX7150-C10ZP Switch>show interfaces briefTFTP session timed out Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/1/1 Up Forward Full 1G None No 1 0 d4c1.9e9c.0532 1/1/2 Down None None None None No 1 0 d4c1.9e9c.0533 1/1/3 Down None None None None No 1 0 d4c1.9e9c.0534 1/1/4 Down None None None None No 1 0 d4c1.9e9c.0535 1/1/5 Up Forward Full 1G None No 1 0 d4c1.9e9c.0536 1/1/6 Down None None None None No 1 0 d4c1.9e9c.0537 1/1/7 Down None None None None No 1 0 d4c1.9e9c.0538 1/1/8 Down None None None None No 1 0 d4c1.9e9c.0539 1/2/1 Down None None None None No 1 0 d4c1.9e9c.053b 1/2/2 Down None None None None No 1 0 d4c1.9e9c.053c 1/3/1 Down None None None None No 1 0 d4c1.9e9c.053d 1/3/2 Down None None None None No 1 0 d4c1.9e9c.053e mgmt1 Down None None None None No None 0 d4c1.9e9c.0532 

I tested this previously using just a patch lead to the switch, and I could have sworn it was working fine.

Any ideas what's going on? (I believe I'm still under distance limits for POE and CAT6)

UPDATE: I did do a cable test earlier - and from what I can tell it passed (image link). However, let me know if there's something I missed.



bridge/forwarder IP for FTP

Hi, First let me explain the network 

Site A

IP - 192.168.0.1 - 192.168.0.100

Subnet - 255.255.255.0

Site B

IP - 192.168.1.1 - 192.168.1.100

Subnet - 255.255.255.0

Connection: IPSec LAN-LAN 

Device : TL-ER6120

Works fine I can ping devices across subnet without any issues. Can ping/transfer files from PC-PC

https://i.imgur.com/oZzH0jB.jpg

The actual issue is that there are few legacy IP cameras that only scans for storage FTP locations in the current subnet to store the recordings. In my case Site, A has an FTP server that can store the recordings. Site B has a couple of those cameras. But when the scan runs there are no such FTP servers running in that subnet. Ideally, the camera scans from 192.168.1.1 - 192.168.1.100. then gives up stating no storage server

Is there any way this could be solved by sacrificing an IP such as 192.168.1.100 and make a static route to my FTP server. So that device, when it scans, shows FTP in 192.168.1.100 but the actual FTP server is running in Site A with some IP.

or is there a way to solve this issue by adding some sort of bridge/forwarder in FTP. 



Cumulus Linux - Unable to run apt-get update - HTTP 500 on repository?

I've just installed Cumulus Linux 4.3.0 on an EdgeCore AS4610-54P switch. (4.3 is the last supported version on Broadcom-based switches - 4.4+ are for Mellanox switches only).

Upon logging in, I'm trying to run apt-get update to upgrade any packages.

However, I'm getting a HTTP 500 on the apt repo:

cumulus@cumulus:mgmt:~$ sudo apt update [sudo] password for cumulus: Ign:1 copy:/var/lib/cumulus/cumulus-local-apt-archive cumulus-local-apt-archive InRelease Get:2 copy:/var/lib/cumulus/cumulus-local-apt-archive cumulus-local-apt-archive Release [1,115 B] Ign:3 copy:/var/lib/cumulus/cumulus-local-apt-archive cumulus-local-apt-archive Release.gpg Get:4 copy:/var/lib/cumulus/cumulus-local-apt-archive cumulus-local-apt-archive/main armel Packages [18.2 kB] Err:5 http://apt.cumulusnetworks.com/repo CumulusLinux-4-latest InRelease 500 Internal Server Error [IP: 13.35.142.70 80] Fetched 19.3 kB in 1s (21.6 kB/s) Reading package lists... Done Building dependency tree Reading state information... Done All packages are up to date. W: Failed to fetch http://apt.cumulusnetworks.com/repo/dists/CumulusLinux-4-latest/InRelease 500 Internal Server Error [IP: 13.35.142.70 80] W: Some index files failed to download. They have been ignored, or old ones used instead. 

Does anybody know if there is something going on with Cumulus (NVidia/Mellanoxes) update repositories, or if there's some way of working around this?

Does it work for anybody else?



Before I damage the optics....

Putting a mix of new and old G.652 OSP into service

Measuring the power using a low-end meter: What is the optimum power at the receiver for Cisco X2-10GB-LR ?

I ask as some of my runs are under 100 meters.



Cisco 9500-16X power question

Hi all,

Would anyone happen to have real-world power draw of the Catalyst 9500-16X? Mine would be very lightly loaded but values for any environment would be fine.

Spec sheet suggests sub-300W based on BTU details in Table 8, I'm interested to see if that matches others' experience.



Moronic Monday!

It's Monday, you've not yet had coffee and the week ahead is gonna suck. Let's open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarrassed to ask!

Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.

Note: This post is created at 01:00 UTC. It may not be Monday where you are in the world, no need to comment on it.



What do you consider to be the "fundamentals" of a good network management that one should strive to get right before moving onto more advanced things?

Looking for a list of BCP or just rules of thumb for Network management that one should have ironed out before considering moving onto more advanced things.

I'll start with:

  • Authentication: You should be using AAA on all devices, it should consistent, with a well documented "fallback" or "lastresort" password on the devices.

  • Login protocol: All devices should be using SSH only at this point, Telnet should be disabled

Anyone have more, I can edit/add them to the OP.



EnGenius vs UI for residential use

I'm looking at setting up a more advanced network for someone; they are more of a prosumer. I have an interest in this project and am looking for some answers.

They will be using a Netgate 2100 for their router/firewall and have a few different VLANs set up. They will have some PoE devices, cameras and other equipment.

We've looked at and used Ubiquit's product line and like them for the most part. We came across the Engenius brand while browsing here and am wondering, what the major differences are?

We plan on deploying 1 AP and having 2 VLANs on it. We'd also like to have a 24 port switch that we can manage VLANs and has PoE.

To Recap:

  1. Netgate 2100 Router/Firewall
  2. 1 AP - 2 VLANs
  3. 24 Port Switch that has VLAN support and PoE

It looks like Engenius has a good switch that fits the needs. They do not care not want to use the "cloud" aspect of the technology and would like for that to be blocked/disabled.



New Job, what are the best tools to get?

So I recently started a new job, where part of my responsibilities are going out to job sites and verifying cables runs, to see whats going on and where they go.

My job supplied me with this set of tools:

https://www.amazon.com/InstallerParts-Piece-Network-Installation-Tool/dp/B074Y5LQZY/ref=sr_1_6?dchild=1&keywords=Network+Tools&qid=1631465615&sr=8-6

I wanted to ask what other tools should I be looking at getting? What tools would make my life super easy in the long run?



Cisco ASA IPV6 RA DNS announcements?

Hi

I use a Cisco ASA Firewall as gateway.

I'm trying to set up IPv6, but since Android phones does not support DHCP IPv6, it is my understanding that they need to get their DNS servers via IPv6 ND RA messages.

The problem is, I cannot see that option on my Cisco ASA.

On my Catalyst 9300 switch, the option is there, but not on the ASA.

So how is this supposed to work? How do other people with ASA as firewalls solve this?

Thanks.