Wednesday, October 10, 2018

What 1U/2U rackmount UPS vendor do you recommend?

We were an APC shop, and mostly still are. Had a few units die outright (not just battery failure), taking everything offline.

Deployed a few Eaton units which look super clean, and have worked well. The webgui isn't as polished as Schneider/APC but that's cosmetic AFAICT.

I'm most interested in reliability and tunable SNMP/SMTP traps/alerts. Cost is not as much a concern.



Juniper SRX1500 to terminate a 10Gbps Internet Circuit?

We are to terminate a 10Gbps Internet Circuit at a data center with an SRX1500. (No NGFW features licensed, just typical flow-based security.)

It will be acting basically as an edge router, with security policies.

A member of our team brought up an interesting point. According to the data sheet, the 1500 can only get “up to” 10Gbps throughput.

After some digging, we realized for Internet Mix traffic it says it can only get around 5Gbps. For smaller packets even less, down to 1.5 Gbps.

Basically, how screwed are we? Are these throughput limits just throttling, or are we going to see maxed out spu utilization and dropped packets/crashed boxes.

There will be data center to data center replication (encapsulated in SD-WAN tunnels) going across the 10Gbps link. In addition there will be more SD-WAN tunnels, and browsing traffic too.



Outages subreddit/hubs?

Been having lots of outages all over east coast today, various ISPs. What outage hubs/resources do you guys use to talk about/read about news on current outages?



On ISP networks, when do you start to need GPS timing?

In a wired service provider network consisting of mostly DOCSIS and FTTH via GPON / NG-PON2, when (if ever) do I need to start worrying about supplying precision timing to my gear?



Apple devices not talking with DHCP server?

Hey guys I have an issue that's been popping up a lot recently the past couple of weeks at work.

I'm a little stuck on where to even begin trouble shooting. First to lay out our setup:

We have a feed coming from our ISP that is being fed into Netgear SRX5308 router.

This is then feeding into my UNBT wireless system. For my management range: 192.168.6.x /24.

I have a HP desktop running Server 2012 acting as my DHCP server for the wireless network. It is hardwired directly into a UBNT switch in my core closet. IP for DHCP is 192.168.6.2 that is literally all the HP is running is the DHCP scope.

The DHCP scope is 192.168.200.x /16 - 192.168.254.x /16, I know. The subnet range is absolutely huge and can be unnecessary. However, there is literally nothing else on this network than wireless devices and the core switches and AP's for the wireless network. Our LAN network for our desktops and main servers are on a completely different network. Our wireless end user base averages about 800 connections a day. But I can easily reach up to about 4000 connections depending on if there is a special even going on that day.

Now the issue that I am having is that several Iphones and Macbooks will connect to the wireless network but not receive an IP address. Any Androids have not had this issue at all. They will sit with an 169.x.x.x address or 172.x.x.x address. Two of the iphones seem to have this issue regularly and I have even given them a static address on the DHCP server. Sometimes they will not receive the static IP address and they will stay stuck with the 169 address. Occasionally I can attempt to reconnect the iphones on the UBNT controller or restart the AP's and that will fix the issue but then a few days later I will have the exact same issue again with the exact same devices. Up until today it was only Iphones that I was having this issue but today and yesterday I've had the same issue with two Macbooks. Seems to be an Apple thing.

Any idea on what to try or where to start?



Residential client lives 2 miles from the nearest DSLAM and wants to contract me to increase his down rate by 5mbps...

A residential client reached out to me desperate for options to improve his internet situation. He lives in unincorporated King County Washington, in the rural area of Duvall. I did a bit of due-diligence and the only ISP servicing the area is the one he's already using (Frontier Communications) with the copper being leased by Verizon. They (Frontier) have him on an ADSL line. I was able to get a hold of the copper team and talk to the tech in the area. The client is currently provisioned for 3mbps at the DSLAM, but his account is provisioned for up to 20. The tech said he originally had the client at 6, but the noise in the signal caused him to drop frequently so they limited him to 3 at the DSLAM. The client is willing to pay $3-4k if I can get him up to 8 or 10 and $8-10k if I can get him up to 15-20. There's no utility poles in the area, all service is provided underground across multiple plats and easements under a shared private road. I discussed the problem with the tech and he seemed pretty confident that the client is SOL, but to let him know if I came up with anything.

Does anyone have any clever ideas on how I could potentially squeeze another 5mbps on his line? I've used extenders for VDSL in the past with some luck. Anyone have any success with extenders for ADSL? Any other ideas?



New Home: Questions on Networking, Hardware, & Setup

Hello all,

Recently purchased a new home, and I'm needing some guidance on setting my network up in the best way possible. So much has changed in the last few years that I am lost on what's best and what's not, so here I am, to have the internet tell me what to do. I'll give you a rundown on what I'm working with and what I'm trying to accomplish, so you can better understand my goals.

I've included a sketch I've made of the home's layout, so you can visualize what I'm working with here. Image: IMG_2362.jpg

The home is 3 beds & 2 baths that is about 2000 sq. ft. on a flat lot with a slab foundation, consisting of one level with an attic space above. There is a large living area to the left of entry, attached to the back of it is an additional room that serves as a poolhouse/bar area that leads to the backyard and the in-ground pool. Descending from the pool is a concrete fire-pit area. The three bedrooms are off to the right of entry, down a hall with a bathroom in between. The kitchen separates the living and sleeping spaces. On the sketch, I have the rooms labeled, and I have highlighted the main connections as well as where the modem currently sits.

I am an avid online gamer, and my wife frequently uses services like Netflix & Hulu while doing her work at the same time that I am online. We also frequently entertain and host guests for sporting events or other TV/internet/media related things like gaming together online. Not only that, I also have smart-home-connected devices such as door locks and security cameras that are connected to the network; and while these aren't using much data, they are still a draw on data/bandwidth. My goal is to ensure that I have the infrastructure in place to handle multiple users on different devices all doing something a little different, without experiencing any lag, buffering, slow speeds, or connection drops - no matter where they are on the property.

Comcast is my ISP, and I currently pay for their 250mbps plan. The modem, which is theirs that I pay monthly to use, is located in the first bedroom down the hallway. I plan to use this room as a multimedia/gaming room, so I had the technician install the modem here, so that I will be able to hard-wire my gaming PC and several gaming consoles directly to the modem/router for the fastest connections. As stated I pay for the 250/s plan currently, but only get about 150/s when hard-wired directly to the modem. The wi-fi signal when standing next to the modem is only 50-75/s on a good day. That speed drops significantly when you leave the room, dropping to about 30/s in the living area, and eventually dropping the connection altogether when near the corners of the house or outside near the pool. This is entirely unacceptable to me to pay for such high speeds only to receive 20-50% of what I pay for/what is provided, and only get it in one room of the house. I will be upgrading to Comcast's 1000mbps plan shortly, and I still expect to only actually get about half that in reality. However, I am here to learn what I can do to actually get the speeds & connections that I expect & pay for!

So, here we are, and let's move on to the questions I have and what this community can do to help. What is the best way to ensure I have whole-home coverage that delivers the most reliable and fastest speeds I can achieve? Do I move the modem to the living room where there is another Co-Ax cable to connect it to, since that's where most people will be? What about my media/gaming room connections if I move it? Do I just plug in a bunch of range extenders into random outlets in various areas? Won't that affect my speeds? Do I leave the modem where it is, and run 50 feet worth of ethernet cable through my walls & ceiling in order to hard-wire a router in another room? If so, won't I see speed losses due to the length of cabling? Do I replace the modem with an aftermarket modem and leave it where it is? Replace and move? Still add another router, with range extenders on top of that? I'm sure you get my point by now, I just need to be able to get the upload & download speeds I expect to game flawlessly while my wife watches netflix in the living room, and a friend of ours is outside by the pool watching a youtube video on his phone - without any of us having a connection issue. I also need to ensure that whatever I do, it's capable of handling gigabit speeds! Last time I wired a network, gigabit speeds was a ways away in the future, now it's here and I don't know if the hardware infrastructure is different. Do I need to ensure that my ethernet cables can handle that speed? I know the current outlets in the walls cannot. So whether it's a modem, router, cables, extenders, etc. they all need to be able to handle that type of speed.

The surface-level research I've done has me thinking that I should get an aftermarket modem that can handle more than what I need, then another high-end router or two that I hard-wire into the modem by running cabling through my walls and ceiling, and risk speeds/connection since that will require a long distance for the data to travel. Then if necessary have range extenders in various places to pick up the slack. But this is why I am here, asking you, as new tech is beyond me. So when it comes to tri-band, 802.11a/c/n , QoS priorities, MU-MIMO, multiple ports, upload/download channels, etc. - I am lost and don't want to end up wasting time & money for things that won't accomplish what I need to accomplish. I've been looking into Netgear's Nighthawk series of products which look promising, but even that lineup is confusing as a lot of the products seem to do the same thing, so it's hard to know what's right for me - again I am clearly just a slightly-above-average consumer that needs consulting.

Thanks for taking the time to read this, and I look forward to hearing what you have to say. If there is any additional information I can provide to help you in helping me, don't hesitate to ask!



WIIF parameter peak antenna gain

I am kinda confused with this parameter. If the number is higher is better or worst? Example with peak antenna gain of 4.0dBi in 2.4 GHz and 4.7dBi in 5 GHz. Built-in antennas

Since the number is in dBI I understand that if the number is lower is better. Example

with peak antenna gain of 3.5dBi in 2.4 GHz and 4.2dBi in 5 GHz. Built-in

But not sure if I am mixing concepts here.



Cisco 5508 WLC Upgrade - 8.0 --> 8.5

Hello i need to upgrade some Cisco 5508 WLCs (HA SSO) from SW 8.0 to 8.5

normaly i would: FUS Upgrade, Upgrade from 8.0 --> 8.3 - wait till everything is working again --> Upgrade from 8.3 --> 8.5

but this brings a huge downtime.

so my question is, if it would be possible to:

1 .break HA

  1. config all AP for WLC-1

  2. upgrade WLC-2

  3. then config all aps for the upgraded WLC-2 - APs will donwload SW

  4. upgrade the WLC-1

  5. establish HA SSO between WLC-1 & WLC-2

  6. Done

this would reduce the Downtime.



Suggestions for packet indexing

I'm looking for a (somewhat low-cost) solution to capture and index packets that are mirrored from core switching/routing infrastructure. Ideally, I just want to be able to search for source/destination IP and timeframe, and pull a pcap. I'd appreciate any suggestions, thanks!