Saturday, December 22, 2018

Need some IT Help

Sup yall!

I was recently blessed with a job as an IT at a school. so far its all been pretty easy but i need some help understanding Port Forwarding. The A/C System at the school i work at is one of those systems which run over the network and controlled over a touch screen panel. The principal of the place would like to have access to the A/C from outside the building (from her phone/pc). How could i configure this?

Very sorry if this is a noob question.



5 Things you need ask yourself before enter the CCIE Idustry

a) Do I understand this industry? If not, please give up. If you venture into an industry that you don't understand, you must take a lot of detours. It’s not that someone else says it’s good for you. 

b) Do I love this industry? If not, please give up. Only by loving your own work will you bring more passion and will spontaneously stimulate your potential. Every time I look at ICS's Faking It(a file that trains a completely unrelated industry into a master in 4 weeks, let the industry's masters find Faker's programs from 3 professionals and 1 Faker, such as cleaning The work became a 16-person sailing captain, a punk singer became a classical music conductor, a classical cellist became a House DJ, etc.), basically every teacher would warn that he would love this job, only love, you will be in 4 weeks. I grasp the things that I don’t understand at all through the stimulation of my potential.

c) Will I do it as a lifelong industry? (At least 10 years) If not, please give up, the long-term planning of any industry is very important.

d) Is it the first purpose of making money in this industry? If yes, please give up because there are many ways to make money.

e) Will I enter the industry with a belief in starting from scratch? If not, please give up. Even if you are a prestigious undergraduate, masters or doctoral degree, you may still be a professional counterpart. There will be a completely different concept when you enter society.

At last, you can take the exam by ccnp rs 300-115 dumps that will help you pass successfully. Another thing you have you pay attention about ccie rs preparation).



HughesNet streaming.

My dad recently purchased HughesNet for our new house and I was just wondering if I’ll be able to stream SlingTV and Netflix. From the reviews I’ve seen things aren’t looking too good...



Cisco 2960S stack upgrade broke stacking ability

Has anyone ever had this happen? I upgraded a stack of WS-C2960S-48FPS-L from 12.2(55)SE5 to 15.0(2)SE12 (Cisco's recommended version) and it broke the stack. Both stacking ports on bothe switches showed Down/Down. I swapped out the cables and reseated the stacking modules and they still wouldn't stack. I reverted to the old IOS and they immediately stacked with each other again. It's as if the new IOS broke the ability to stack. I would like to have this stack on a newer IOS but I can't justify losing the ability to stack.



What may have caused this BGP-EIGRP loop to form?

Issue: during the day, suddenly all field offices lost connection to site A. Traceroute showed the following loop:

​

  1. A_RTR1 VPLS interface
  2. B_RTR2 MPLS interface
  3. B_RTR1
  4. A_RTR1 VPLS interface

​

Diagram

​

  • A_RTRs learn the 10.1.0.0/16 subnet via EIGRP AS 1 from switches
  • RTRs run EIGRP AS 1 over VPLS
  • RTRs run BGP over MPLS
  • RTRs were mutually distributing EIGRP into BGP and vice versa.

​

What broke the loop: removed EIGRP redistribution into BGP.

​

Question: How did this just happen in the middle of the day? My thinking is that site A RTRs lost EIGRP routes to 10.1.0.0/16, then learned the route via BGP from B_RTR2. However, EIGRP neighbors between Site A RTRs and SWs was up the entire time.



[ Cisco 2960G Switch ] - Static route between vlan is not working

Hello,

​

We have this 2960G switch that I am trying to get up and running, it's a gigabit switch with a weird config. It is a L3 switch, but is very different from many other L3 switches. I am creating several VLANS on this switch, I want ports 9-18 to be on one VLAN just to test. I assigned it the subnet 172.31.200.0/24. However, when trying to add a static route from this vlan doing this command:

ip route 172.31.200.0 255.255.255.0 10.0.0.1

The route doesn't show up in the routing table, and it inevitably fails to ping anything outside of that subnet. The default gateway on the switch is 10.0.0.1, which is the IP of the router interface connected on port 1. I figure it's doing this because it cannot reach 10.0.0.1 for whatever reason, not sure why.

I don't want to spend too much time on such an easy task. Assistance por favor

​

​

!

! Last configuration change at 00:27:21 UTC Mon Mar 1 1993 by admin

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname 2960G

!

boot-start-marker

boot-end-marker

!

enable secret 5 $1$.ebn$VOBRwQlgDRCc.7HPnaBXW0

!

username admin privilege 15 secret 5 $1$9YUi$dUxXa7ncApMbI3uaHSr0y/

username root privilege 15 password 7 0519090035

username oswaldoadmin password 7 00071A1507544B

aaa new-model

!

!

aaa authentication login default group radius local

!

!

!

!

!

aaa session-id common

system mtu routing 1500

ip routing

ip dhcp excluded-address 10.0.1.0 10.0.1.150

ip dhcp excluded-address 10.0.1.251 10.0.1.255

!

!

no ip domain-lookup

ip name-server 8.8.8.8

ip name-server 4.2.2.2

ip name-server 10.0.0.1

!

!

crypto pki trustpoint TP-self-signed-3245150976

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3245150976

revocation-check none

rsakeypair TP-self-signed-3245150976

!

!

crypto pki certificate chain TP-self-signed-3245150976

certificate self-signed 01

3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 33323435 31353039 3736301E 170D3933 30333031 30303032

31345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32343531

35303937 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

8100BF40 47F624CB 9B2F6CD7 9DFB2C6B 48AFB101 725B606B B18E24D4 8FD95BFA

DDC671F9 7182C0D0 1A1111D9 98919C1D 4307C30D 92194AE3 19D37499 6093E6E0

AD89CF58 6752896C AE666F92 4511D1A9 AD9E526A 6549A282 D383EC57 6C39B396

B084A048 B41B5BAE EDED07BA 6C5EA46B F926C713 7A0A4D2B BDE541BC 70628608

82DD0203 010001A3 65306330 0F060355 1D130101 FF040530 030101FF 30100603

551D1104 09300782 05323936 3047301F 0603551D 23041830 168014FA 2DA8651B

C53F740D 1756C12E 5D52DAE8 6324F530 1D060355 1D0E0416 0414FA2D A8651BC5

3F740D17 56C12E5D 52DAE863 24F5300D 06092A86 4886F70D 01010405 00038181

005B4C9F E13DE8AA A591B107 0F16CF35 3A1B9A8A A02DDC8E 8CD06942 EE733E07

50D06F61 13169941 D74FE56D 1C0D2093 A00BE1C6 A99E08B8 FB6D1A3A D02A5C37

6D539C38 6D99C1C7 5DFDEFD4 33A61158 FE27C9A9 817066FF D391B1D5 ED17333D

4B9224EB 269A6497 A43E3CCC B0BFE691 4383651D 11C2A2AE C16ABABA FF9BEDD2 E2

quit 

!

!

!

spanning-tree mode pvst

spanning-tree portfast bpduguard default

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

ip ssh version 2

!

!

!

!

!

interface Loopback1

ip address 1.1.1.1 255.255.255.255

!

interface GigabitEthernet0/1

switchport mode trunk

switchport port-security

ip dhcp snooping trust

!

interface GigabitEthernet0/2

switchport mode trunk

switchport port-security mac-address sticky

spanning-tree portfast

!

interface GigabitEthernet0/3

switchport mode trunk

!

interface GigabitEthernet0/4

switchport mode trunk

!

interface GigabitEthernet0/5

switchport mode trunk

!

interface GigabitEthernet0/6

switchport mode trunk

!

interface GigabitEthernet0/7

switchport mode trunk

shutdown

!

interface GigabitEthernet0/8

switchport mode trunk

!

interface GigabitEthernet0/9

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/10

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/11

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/12

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/13

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/14

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/15

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/16

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/17

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/18

switchport access vlan 100

switchport mode access

!

interface GigabitEthernet0/19

!

interface GigabitEthernet0/20

!

interface GigabitEthernet0/21

!

interface GigabitEthernet0/22

!

interface GigabitEthernet0/23

!

interface GigabitEthernet0/24

switchport access vlan 999

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/25

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

ip dhcp snooping trust

!

interface GigabitEthernet0/26

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/27

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/28

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/29

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/30

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/31

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/32

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/33

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/34

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/35

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/36

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/37

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/38

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/39

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/40

switchport mode access

spanning-tree portfast

spanning-tree bpduguard enable

!

interface GigabitEthernet0/41

!

interface GigabitEthernet0/42

!

interface GigabitEthernet0/43

!

interface GigabitEthernet0/44

!

interface GigabitEthernet0/45

!

interface GigabitEthernet0/46

!

interface GigabitEthernet0/47

!

interface GigabitEthernet0/48

!

interface Vlan1

ip address 10.0.0.3 255.255.255.0

!

interface Vlan10

no ip address

!

interface Vlan99

no ip address

!

interface Vlan100

ip address 172.31.200.1 255.255.255.0

!

interface Vlan499

no ip address

!

interface Vlan999

description MAIN VLAN

ip address 10.0.1.1 255.255.255.0

!

interface Vlan1000

description ROUTER

no ip address

!

ip default-gateway 10.0.0.1

ip http server

ip http authentication local

ip http secure-server

ip route profile

ip route 172.31.200.0 255.255.255.0 10.0.0.1

ip route 172.31.200.0 255.255.255.0 Vlan1

logging esm config

radius-server host 10.0.0.254 test username ofernandez key 7 00071A1507544B

radius-server host 10.0.0.3

radius-server key 7 045802150C2E

!

radius server RADIUS

key 7 060506324F41

​



Network Design and Topology Questions

This is my first larger network I'm designing and I want to make sure that I am doing this right. Up until this point most of my experience has been with smaller networks where the customers were not as interested in budgeting for security. Because ideally my customer wants this to be under warranty for at least 3 years, I decided to go with Juniper over Ubiquiti for the switches. For the firewall we are going with Fortinet to stay under budget and to meet their requirements for UTM. As far as access points go I plan on going with Ubiquiti due to how easily they are managed. Some of my questions will be more Juniper related as I am cross posting to r/Juniper, however I figure some other people may have similar questions and it seems appropriate to post here as well.

As far as the network goes it is going to be fairly complex as far as inter-vlan routing goes, and due the budget the edge firewall will also handle internal security. Right now they only have around 10-15 core users, but over time this network may be expanded to provide internet access for up to 600 people. Thats why for now I think it makes sense to invest more into good switches and to have a solid backbone for future expansion. In the event it needs to be massively expanded it would be as simple as replacing the firewall and buying more access switches and access points. Do you think a FortiGate 80E would be a good choice if they only need 75Mb down and 10Mb up for their WAN connection? It would also help secure traffic going from internal corporate devices going to internal servers.

Some Juniper specific questions I have are on virtual chassis and connecting the two switches that will be in a virtual chassis to the core switch. I'm not sure if it would be a loop or if it would be possible for it to be considered part of a LAG. I know that it manages the two switches as one logical device, so I think it would be possible to set that up as a LAG. Here is an overview of the planned topology and how everything will be connected. I understand the copper SFP+ is not officially supported, but it will be needed to take advantage of existing infrastructure. For a setup like this would any of the switches need an Enhanced Feature License, or would it work with the base features?

For security features I planning on segmenting the network into different vlans and providing devices only access to what they need. All corporate devices will need to be authenticated against active directory with Radius, including wired devices. I'm wondering if it would be possible to set some sort of snmp trap that will detect if an unauthorized device tries to connect to a port?

I would really appreciate feedback on this and to get some additional ideas.



Forward an ISDN call over wifi

I have one house and two warehouses a few meters apart (different landline connections and different numbers )

Now I pay 3 different phone bills for my three different numbers.

But since I dont use the phones on the warehouses that much what I want to do is

Create an ISDN subscription on my house with 3 numbers (one main and the others as MSN ) and forward as VoIP over wifi the calls from the other two MSN numbers to the warehouses that I keep nearby my house.

Is it possible ?

What kind of gear do i need to accomplish that ?



Switch performance - Cisco vs Mikrotik

Hi guys,

​

we are currently reviewing new switches, and are considering Mikrotik switches for the first time. Until now we are almost only using Cisco and some old 3Com gear.

​

How do Mikrotik-switches keep up with their cisco counterparts?

We are mainly looking to use them as access-switches, so how are the Mikrotik CRS328-24P-4S+RM vs Ciscos Catalyst 3650-24PD?

​

I am primarily looking for a comparison of features and handling of switchOS vs IOS. I don't think we need any L3 functionality, at least not for access level.

Please tell me if you need any additional info. Thanks for your help and happy holidays :)



Best way to monitor Home Wifi data usage?

Hey I am noticing an uptick in my home data usage over the course of 3 months, and would like to obtain data usage by MAC address or IP address over time to understand which device is the culprit. My router is the Asus RT-N66U and the monitoring features are only for real time, last 24hrs, and last 7 days (which only gives me total numbers). So far the only good option is the last 24hrs as I can see what network (wired, 2.4GHz, and 5GHz) is using data and by how much and it even integrates the data over the 24hrs which is nice, but i want to know more i want to know at least 7 days of data and by MAC address.

​

I have researched and found out that DD-WRT is a good firmware for my router that has some level of built in analytics, however this, to me, would be the last resort (I fear it may be my only option for now given all the research i have done) as i have to flash my router and to flash my router for just this feature is a bit much so far. I haven't decided how much i am willing to do to get this data.

​

I am currently under the microscope by AT&T in that they are threatning to charge me an additional $10 month per 50GB i go over. Right now this month i am at 1024 GB so far and counting as i have another 7 days left in my cycle.

​

TL;DR

Using too much data, any suggestions on software to monitor my data usage by MAC Address for my whole network? (Roku, Apple TV, phones, Sonos, etc.)