Sunday, April 19, 2020

Moronic Monday!

It's Monday, you've not yet had coffee and the week ahead is gonna suck. Lets open the floor for a weekly Stupid Questions Thread, so we can all ask those questions we're too embarrassed to ask!

Post your question - stupid or otherwise - here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer. Serious answers are not expected.

Note: This post is created at 01:00 UTC. It may not be Monday where you are in the world, no need to comment on it.



2911 + ISM-VPN-29 + HSEC

Ok so yes this is an old piece of hardware, just trying to keep things running here. I've been gently encouraging this customer to move to a modern SSLVPN platform, but like many customers right now they're just trying to do the bare minimum.

So they've managed to find some source for an ISM-VPN-29 module to fit in their 2911 router. Probably eBay.

The module was installed, and the router boots without losing ANY of the magic smoke inside, which is a lovely blessing really.

However it won't activate.

I was adamant that we didn't need the L-FL-29-HSEC-K9 license, because of course that license is only for the 2921 and up routers. The HSEC license doesn't apply to the 2901 or 2911 because they're too shitty to even apply for HSEC.

Was I wrong? I get this error:

#sh logging | i ISM *Apr 20 01:34:59.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface ISM VPN Accelerator, changed state to up *Apr 19 18:35:13.935 PST: %VPN_HW-1-INITFAIL: Slot 0: ISM-VPN module is disabled as hseck9 is not activated.Please install/activate the hseck9 license 

I think I've done everything I can to activate HSEC without an actual license, but it doesn't seem to have an eval mode or a RTU that I can activate. Maybe my brain really is covid-19 addled.

Any advice for a Sunday night idiot?



Move modem to closet activate all wall Jack's?

Hi I have a network panel in my closet. I would like to move my modem there so I can have all my wallports activated.

I have a QCBIX 1A in the panel box and would like to know how to configure it for my purpose. I have punch/clamp tools to make it washer.

this one that looks not so great



I would like some clarification

Hi all. I enjoy technology and networking but I am still a relative noob. I purchased a new router and hooked it up today. All devices connected to the WiFi just fine but none of the hard wired devices were listed on the Linksys app (Linksys router obviously). I was trouble shooting for a good little while by changing DHCP set to manual on one of my computers and assigning an IP and also using auto DHCP. All of my devices were connected through a dumb switch was was connected to the router. I finally decided to turn off everything that was connected and it now seems that everything is working just fine. I was hoping someone can clarify why that was the solution. I thought everything I had was “plug and play”. I appreciate any helpful responses. Thanks!



Buying a new modem/router for gigabit internet and I do not know which one to buy.

I need a lot of upload speed so I am upgrading to gigabit internet. But with that, I need a new modem and router. The thing is, the descriptions of different gigabit router-modem combos say "best for up to 300mbs" or "best for up to 600mbs." But if they are gigabit modem/routers why are they only recommended for up to speeds lower than 1000mbs? Basically I am trying to find the least expensive router/modem that will still allow for the full potential use of my internet plan. Any help would be graciously appreciated.



Can 192.168.0.0/8 be used as a public IP Address?

I understand that IP range 192.168.0.0 – 192.168.255.255 is reserved for private networks using a 16 bit subnet mask and its subnets. However the network 192.168.0.0/8 is outside of the mentioned range and I wonder if it can be used as a public IP network.

I know 192.168.0.0/8 is a usable network because I already configured a couple of computers in packet tracer in the range and they can communicate with each other just fine.

My theory is that public use of 192.168.0.0/8 even if it is not reserved for private use could produce routing issues (not reachable) from 192.168.0.0/16 private networks. I have been googling but haven't found any specifics about 192.168.0.0/8.

DISCLAIM: This is an educational question and not a class homework or exam question.



How do you remove ping spikes when using WiFi?

I can use a Ethernet cable, but it can only reach to my WiFi extender. How can you remove ping spikes while using WiFi?



Hello r/networking, I need your help resolving unbalanced LACP links, sysadmin in a small team

Hello everyone,

Due to the coronavirus pandemic, most of my team is working from home, and many went to their far away homes, and don't have a great internet connection. My internet connection its good, and I live very close to the company, which means I can always go to the infrastructure.

I work in a small datacenter, providing simple Cloud services to companies. I don't have a ton of experience with networking, I am more of a systems person, and yet, I am still learning for the CCNA.

I discovered a core link (LACP, on 2 10GB SFPs) that is not properly balanced. What I mean is that, the LACP is balanced (11Gb comes in, 11Gb comes out), but on the links one link has much more than the other.

This is what I see, and the problem comes when the "Trunk 1" interface reaches max capacity, it starts dropping packets and I have not noticed that it increases on "Trunk 2". Theoretically, it should.

Am I missing something? I have tried adding load-balance commands, none of which changed much. All of the commands are on the Eth-Trunk interface, none in the Xgigabit interfaces.

I am connecting a Huawei S5720 to a Cisco 2960X if it helps, so mixing brands. I have tried other commands of load balacing (one of which removed my "mode lacp" command, and had to go fix it)



Preferred NCM Platform

Just looking to garner some input from the sub in regards to network configuration management platforms.

We're going to be migrating to Cisco Nexus switchgear for everything that isn't user access layer. Currently have HP 3COM stuff that is being phased out. I'm mostly familiar with the Solarwinds Orion NCM, and it's worked well, but I hate dealing with Solarwinds sales/support, so I'm open to alternative suggestions.



TLS Handshake Failure

Hey r/networking I am looking for some guidance on an issue. I am investigating why TLS1.2 is failing after the TLS negotiation.

The session appears to complete the TLS session , resuming previous session and the client and server TLS hellos are sent . The session id is agreed upon and the cipher suite method is also agreed upon between the client and server ssl hello messages.

The Server hello includes the "Change Cipher Specification Encrypted Handshake" . The next message is a Client Handshake message and the the client sends a TCP FIN and shuts down the session.

I have done a packet capture from a source and destination side but I am not learning any new information. I imagine the next step would be investigating the application on the client to determine why is does not send the application data. Any advise would be appreciated.

One thing to keep in mind is the server is actively serving other session to other clients. This is isolated to one site.