Recommendations for 25G SFP28 NICs

Hey folks, this might a bit more for /sysadmin, but we're looking at running 25G between our ToR switches (most likely FlexFabric 5950's) and servers and was hoping to get some input from some of you early adopters.

We haven't touched a lot of 25G yet and our VARs aren't very technical so I was looking for some advice or recommendations on which brand of NICs to use. Thinking mostly about reliability, driver support and performance. Servers will be running Linux (Ubuntu) and won't be doing anything crazy so most cards cover our required feature sets.

We're looking at:

• Broadcom (BCM57414)
• Mellanox (ConnectX-4 Lx EN)
• QLogic (41262)

Sonicwall VPN to PAN Firewall via Tunnel Interface

Hey guys,

Has anyone had success configuring a Tunnel Interface VPN from a Sonicwall to a PAN FW?

All the documentation I come across states that the VPN must be Site to Site. However, Sonicwall states that in order to use the redundant interfaces (two separate ISP), we must use the Tunnel Interface "policy type."

I know I'll need to add NAT and Routing entries in the Sonicwall. Before I schedule downtime, I want to make sure this will actually be successful.

For clarity, there are two interfaces on the Sonicwall and just one on the PAN.

Thanks!

Cisco Live - Downloading Videos

Anyone know how to download for offline playback? My Chrome extension used to work, but no longer.

What are the challenges of monitoring at higher speeds?

For those monitoring their networks, I want to know what are the biggest challenges you have monitoring at higher speeds, especially 100G?

Need to setup a solution with a mounted network drive which can be accessed worldwide

I need to setup a network drive for my work which can be accessed anywhere in the world through an IP, ive not really done a huge amount of networking recently so im not exactly sure how i should go about this - ANyone got any ideas?

Thanks in advance

[QUESTION] SNMP to monitor interfaces on Cisco 3850

All,

​

Have a Cisco 3850 network switch with interfaces that I need to monitor over SNMP. I was able to do this on an existing 3750 network switch by using the IF-MIB. When I try to use the same method on the 3850 it does not work. I believe that I may need to use a different MIB file but have no idea which one and any help would be greatly appreciated.

​

Working Switch Version:

Cisco IOS 3750E-UNIVERSALK9-M 15.0(2)SE6

​

Working Switch SNMP Configuration:

snmp-server community <redacted> RO

snmp-server location <redacted>

snmp-server enable traps snmp linkdown linkup coldstart warmstart

​

New Switch Version:

Cisco IOS-XE CAT3K_CAA-UNIVERSALK9-M 16.3.6

​

New Switch SNMP Configuration:

snmp-server community <redacted> RO

snmp-server location <redacted>

snmp-server enable traps snmp linkdown linkup coldstart warmstart

​

Example SNMP Address (Gi1/0/1 Status):

if-MIB::ifOperStatus.10101

​

Thanks again.

​

Default Security Options on Meraki MX devices?

Hi all,

So I'm in the process of rebuilding the network to work with our new hardware, and the main thing I'm wondering(from a security standpoint) is if there is any security really seen from an MX security appliance right out of the box? Looking at the firewall settings it seems everything is allowed in and out of the network by default, which leads me to believe that it's not; but I was wondering if anyone might be able to share any tips to tighten up security easily? My main concern is locking everything down by only allowing certain traffic out/in, but we have a few unique vendors/items at some locations that will probably need to traverse the network that I don't have full knowledge of and cannot test in our lab environment. Any ideas on how to make this process easier? If the end result needs to be me only allowing certain traffic through, that's fine, however I was hoping there was an easier way to block most incoming traffic, and allow all outgoing traffic.

​

Thanks!

transparent proxy with content filter(e2guardian) not in the GW

im using unifi, let say that computer-lab vlan is using 10.0.20.0/24 and have a vlan for a server(10.0.5.0/24). Installed e2guardian(v5), it says that can work as a transparent proxy, currently have to configure every computer to use the proxy server(10.0.5.5).

what can do to have every computer in computer-lab to use the content filter transparent located in 10.0.5.5 while the GW is in 10.0.20.1(unifi)?.

also was thinking about puting the server in 10.0.20.5(vlan20) and using it as the GW, and then redirect all the traffic to 10.0.20.1 in unifi.

Need help with networking question for my homework

First time here! I don't know if this is the right place to post but the question is :

​

Jimmy is given the IPv4 network address of 172.16.99.0/25 from his HQ. He has equally subnet the given address block to support the following departments:

Finance = 20 hosts

Human resource = 16 hosts

Procurement = 14 hosts

​

Q: Determine the maximum number of subnets :

The answer for it is 4 according to my answer sheet but i can't seem to find the reason why as i have 5 host bits so 2^5-2 = 30 subnets. shouldn't the maximum number of subnets be 30 and not 4? I can't seem to get 4 no matter what.

Follow Up to previous post on BGP Failover

Hello /networking

Thanks for taking the time to read this. I recently posted before about some BGP failover that I would need to implement at work: https://www.reddit.com/r/networking/comments/98wlx8/need_help_creating_bgp_failover/.

​

After contacting my ISP, they stated that since we have a basic support plan, meaning we handle the configurations on our routers, that the BGP failover will need to be handled by us i.e. me. So what I would like to ask is this:

​

What is the best (easiest) way to configure BGP failover? Current setup is 2 2951's, each has their own circuit (1 100M and the other 20M). Currently, our public IPs are being advertised to our primary router. If that circuit goes down or if that router takes a crap, we would need our secondary to handle the BGP over the 20M. Either way, the main requirement is that our public IP space is reachable at all times.

​

Again, thanks for reading and I look forward to reading your suggestions and comments.