Sunday, November 21, 2021

How to set priority or apply qos for voice and audio on cisco 3850 switch?

There will be an important meeting via zoom and I want to make sure everything works fine (audio, video, no delays etc). I was gonna create a policy map and set police to 10 mb. Is there something else that I should do? If so, please share. The switch the laptops will connect to is 3850 and ios 16.3.



Looking for recommendations regarding low-power high thread-count server for small ISP

I believe I'm looking for suggestions for low-power high thread-count servers (a pair) for a small ISP's DNS servers.

Low-power because one has to sit on a smaller amp circuit, high thread-count because that's what i currently believe is more suited for the application (powerdns or unbound, linux).

But if your experience says my assumptions are not so good, i'd love to hear what i should be looking for instead. This is entirely caching/forwarding DNS servers, not authoritative. For less than 10k customers.

Thank you for your time!



Dell Vs Cisco Small Bis Vs Netgear

I know many wouldn't want to select one of these three, but I am interested. Back story, we are going out to look at new campus edge switching and dell are very eager to push their power switch n series kit, I know I've heard horror stories of dell kit but it's cheap and that's obviously getting attention.

So back to the question, if you had to play snog, marry, avoid on the following three what would your gut say for a 300 user site:

Dell power switch n series

Cisco small business 350

Netgear M4300

Or other dell priced competition??

Thanks



Anyone want an extra Extreme AP?

I have an extra Extreme AP305C that I got from a training that I took at my old job. It’s literally been sitting in a box for almost a year and I have no use for it. Before I recycle it I figured I’d ask if anyone could use it. If you pay the shipping it’s yours I just feel bad throwing it out. Pm me for pictures.



Anyone use Astaro Gateway / Sophos at the workplace?

I have a humbling question.

If my employer uses Astaro/Sophos to filter their Wifi. I'm curious as to how much of my browsing history/activity is visible to my employer as I use the reddit app throughout the day. Can they see the subreddits I visit, every meme, every image, all my posts, all my upvotes, everything I search for?

I've spent more time browsing in the reddit app recently, sometimes for hours a day. My feeds are full of a variety of content some work appropriate some not. One subreddit in particular is a private support group I'd rather my employer not know about. Every once in a while I forget to disconnect from the wifi if I intend to browse social media or reddit thus leaving open a spot for my employer to see my history.

If they are using Astaro/Sophos to filter Wifi, can they see everything to the very fine detail? Please note that searching has been done on the IOS Reddit app. Also, there is no MIIM software on my phone.

I've taken advice from other forums to always be under assumption that employers can see everything you can do when connected to their wifi.



Is the second edition of TCP/IP Illustrated Vol. 1 that bad? The reviews are bad, yet I keep seeing it hailed. To those who’ve read it, what are your thoughts?

I know the praise is for the first edition, but I’m interested in something newer. I don’t have the expertise to sift the wrong from the right in networking books, so I’d prefer a professional opinion. So, to those that read the second edition, I’m interested in your opinion. Thank you!



Anonymizing MAC addresses in a pcap file

I was wondering if anyone knows what is the best toolkit for anonymizing the mac addresses in a pcap file?

I need something which is fast enough. I am aware of Cryptopant but the documentation is not well-written and my initial tests revealed that it is not quite fast.



Strong Encryption License on FPR-1010-ASAv-K9 w/o Internet

Had a 5505 ASA blow up last night (Saturday). Configuring a new FPR-1010-ASA-K9 for the first time (just ran out of 5506 stock), and seeing I cannot use 3DES or above without registering the 1010 with the Smart Portal / getting a token, which appears to only be able to be done with internet connectivity.

Are you #$%k!ng kidding me Cisco? You DO know that many of us work with locations outside of our timezones and like to configure the firewall in it's entirety so the site can just plug in the cables and go without needing to wake us up at 2am because we can't pre-provision the VPN tunnels now right?!

This is going to create an epidemic of DES tunnels everywhere, with the intention of changing them to AES once the firewall is installed. But let's be honest, we know that's not going to happen quickly because, uptime and whatnot.

Christ. Does anyone have a workaround for this?



Internet question

There is a question stucking in my mind for a long time i want to know the type of the internet cable that resides between the isp and the demarcation i have adsl connection copper not fiber



OSFP options for "Virtuallink" or "Shamelink" over area 0

Hi

Illustration of system

I am currently in the process of reviewing our design OSFP for our OT network.

We like to use areas to summaries the route to sites. We have above 100 sits. But I have notice a design issue.

If we only enable the area 1 on R1 and R8, and we use summaries. then at some time its the fiber (a single point of failure) between R12 and R13 gets damages so any links that uses that fiber is broken.

The distance between R1 and R8 is 40km.

The distance between R1 and R15 is 50km.

At the R1 and R8 the route to the site is summeries to "10.1.0.0/16". Before being distributed.

When the fiber is broken network 10.1.1.0/27 and 10.1.2.0/27, can not reach 10.1.3.0/27 and traffic from other areas will depend on what router they take.

So I figure my options are:

  1. Don't use summaries
  2. Include all routers in area 0, to all my other areas.
  3. Make Physical Link between all ABR, for the different combinations of ABR.

Don't use summaries

This will flood the system with a lot of small routes. this will make managing OSPF harder, and we need to use hardware that support a lot of routes.

Include all routers in area 0, to all my other areas

This will also flood the system, but will be limited to the backbone. It would mean we need to change config of all backbone routers everytime we make changes to areas. That will make managing OSPF harder.

Make Physical Link between all ABR, for the different combinations of ABR.

We do have a lot of fiber and link distance are manageable, but do to the number of sits, this will eat up the all the shared capacity. C/DWDM is possible but even harder to manageable, when different sits are involved, and the knowledge floor for C/DWDM is high.

Other options

There are related functionalities in OSPF, that would fit my need but they have limitations:

  • OSPF support virtual links over non-backbone areas, but not the other way around.
  • Juniper and Cisco support "Shame links over MPLS", but can't be enable without MPLS.

Am I missing something?