Hey all,
We have improved the WiFi a ton just from proper surveys, using the right channels and settings, etc - and roaming always works and video calls always look good. But there's situations where 10 people in a room need to download a large file, and it takes forever. Channel utilization immediately goes way too high (75%+) and performance is poor. Anyone ever work around this? It's an Apple environment with Cisco WiFi
I have some Xirrus APs that I can tag a VLAN on for a guest network. I have a port on my firewall that is set up for internet only. I'd like to tag ports on my HP Aruba switch to route traffic directly to that guest port on the firewall.
First off, is this the right approach?
Secondly, I can't get it working. Current Setup:
Aruba Port 1 <-> Xirrus AP
Aruba Port 2 <-> Xirrus AP
Aruba Port 47 <-> SonicWall guest port (X4)
Aruba Port 48 <-> Core Switch
SonicWall X0 <-> Core Switch
SonicWall X4 Config - IP: 192.168.100.1/255.255.255.0
VLAN2 Config - IP: 192.168.100.2, Default Gateway: 10.1.0.1, Subnet Mask: 255.255.255.0
It works without VLANS, but all traffic can see internal stuff. If I tag Port 1 and Port 47 with VLAN2, and then tag the SSID with VLAN2, there is no connectivity on the SSID. I don't have much experience with HP switches. I have it working on an old Cisco switch though. What am I missing here???
First time noticing something like this in a Cisco product. Anyone seen this or something similar?
SWITCH uptime is 5 years, 25 weeks, 1 day, 15 hours, 25 minutes Uptime for this control processor is 3 years, 23 weeks, 4 days, 19 minutes System returned to ROM by SSO Switchover System restarted at 09:50:06 MDT Mon Apr 11 2016 System image file is "bootflash:cat4500e-universalk9.SPA.03.05.02.E.152-1.E2.bin " Jawa Revision 7, Snowtrooper Revision 0x0.0x1C Last reload reason: power-on
Does anyone know if there are big differences between the Firepower user agent and using ISE-PIC? Does ISE-PIC offer anything that FP doesn't? I'm having trouble finding anything but configuration guides for both of these.
I am setting up a simulation environment using docker containers. I am able to send traffic across a client container to a server container via a WAN emulator.
Simulation setup
From the client container, I am able to ping the server container (10.202.0.1) and even do an iperf test. I am trying to something similar but from the clientTraffic container instead.
I am trying to send traffic from the clientTraffic container to eth3 in the client container, forward that traffic to tun0 (10.202.0.2).
I tried changing the iptable rules and able to send ping requests from clientTraffic (10.0.2.2) to server container (10.202.0.1)but don't get back any replies.
These are the rules I am adding
iptables -t nat -A PREROUTING -i eth3 -j DNAT --to-destination 10.202.0.1
iptables -t nat -A POSTROUTING -d 10.202.0.1 -j SNAT --to-source 10.0.2.2
Hi all,
Let me explain the topology first, all of this is managed by a 3rd party WAN provider.
We have a lot of sites with 2 private MPLS connections, each with their own Cisco router and VRRP/HSRP running between those.
They have BGP running so our LAN IP range is re-announced from the backup router in case something goes wrong with the primary.
I would like to get an alert when the primary connection goes down, but my problem is when WAN connection 1 goes down we can still ping router 1's LAN IP through the secondary router.
I could monitor interface status or maybe even the BGP neighbor information, but this would require me to do a lot of manual work setting up correct monitoring for each site.
I already have each router's LAN IP and would like to just use that (unless there's no other way).
How would you tackle this scenario, ask the provider to put some ACL? Monitor an SNMP object and if so which one?
Hey guys,
are the books...: „Routing TCP/IP Vol 1&2 (2nd editions)“ by Jeff Doyle
...still up to date and worth reading?
Hey guys,
I'm using FRRouting 7.1 on Debian with kernel 5.2.2 and have a question about using vrrp with ospf.
I have 2 routers (R1 and R2) which connected to isp (ISP1) with BGP and internal to a third-party router (R3).
BPG and the external connections works well. Both Routers (R1 and R2) connected through OSPF on the internal interfaces (eno2) and a configured loopback (lo). This will work also well without VRRP. Check the interface config below.
Router 1 Interface Status VRF Addresses --------- ------ --- --------- eno1 up default xxx.xxx.xxx.xxx/29 eno2 up default 198.18.0.2/28 eno3 up default 172.16.198.21/24 eno4 down default lo up default 10.0.0.1/32 Router 2 Interface Status VRF Addresses --------- ------ --- --------- eno1 up default 172.16.198.22/24 eno2 down default enp4s0f0 up default xxx.xxx.xxx.xxx/29 enp4s0f1 up default 198.18.0.3/28 lo up default 10.0.0.2/32
Router 3 has a configured interface with the IP 198.18.0.10/28 and is directly connected through a switch to router 1 and 2. Router 3 should not be a part of the OSPF area.
Then I wanted to configure VRRP on R1 and R2, that R3 can reach one of both (the master) router through HA.
In reason of this, I installed keepalived and configured vrrp. This works also from the vrrp perspective.
But the OSPF will fails if VRRP is running. After shutddown, OSPF comes back.
VRRP will add the virtual IP as additional IP on en2 Interface with 198.18.0.1/32 for R1.
In the log I got the notification, that the NetworkMask mismatch on enp4s0f1:198.18.0.3 (configured prefix length is 28, but hello packet indicates 32)
.
And in the OSPF data package, I have seen that the VRRP IP is redistribute as a new Stub Network with 198.18.0.1/32
I have already tried to deny the redistribution or block through a access-list filter, but does not helped.
The vrrp IP is not for interessting for my OSPF config, only for the backend router R3.
Any thoughts how I can fix this in my OSPF config?
Thanks Henry
Would like to share with you guys a tool that I developed - Template Text Parser.
Background.
Have to work in diverse networking environment with lots of legacy devices and various vendors, as a result came to conclusion that it would be nice to have a tool that can:
1 - Parse configuration and show commands outputs, including nested/indented text data
2 - Produce python native structures - dictionaries/lists, with any level of hierarchy
2 - Use templates that are easy to create, read and share
3 - Capable of processing and transforming data during and after parsing
4 - Able to output results in common formats such as json, yaml, csv, excel tables or render it with Jinja2
The goal was, to implement this workflow - write template, parse data with it and get desired results straight away, without the need to write lengthy scripts to process it further if use case was simple.
Simple example.
Source data:
interface Vlan778 ip address 2002::fd37:0091/124 ! interface Loopback991 ip address 192.168.0.1/32 !
TTP template:
interface ip address /
To parse using CLI tool:
ttp --data "/path/to/data.txt" --template "/path/to/template.txt" -o json
And this will be the result:
[ [ { "interface": "Vlan778", "ip": "2002::fd37:0091", "mask": "124" }, { "interface": "Loopback991", "ip": "192.168.0.1", "mask": "32" } ] ]
Have two juniper switches ex-2300 and I need to cable then with fiber optic cable and they should see each other.How do I make the interfaces see each other on show lldp neighbours?