TechHub

Ashlan ChidesterHere is my router & switch networking configuration collection. Included are Enterprise scripts for Cisco 2911, ASR1k, 1900, 3560, ASA, Sg200, 2960x <a href="https://github.com/RedWinterDawn/NetEng/tree/master/sg200" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/RedWinterDawn/NetEng/tree/master/sg200</a> <a href="https://mastodon.social/tags/NetworkEngineer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkEngineer</a> <a href="https://mastodon.social/tags/neteng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neteng</a> <a href="https://mastodon.social/tags/automation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#automation</a> <a href="https://mastodon.social/tags/ITSupport" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSupport</a> <a href="https://mastodon.social/tags/devops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devops</a> <a href="https://mastodon.social/tags/python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#python</a> <a href="https://mastodon.social/tags/scripts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scripts</a> <a href="https://mastodon.social/tags/sre" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sre</a> <a href="https://mastodon.social/tags/infra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infra</a> Buy a Book amazon.com/author/ashlan

Johan<a href="https://www.atomic.co.za/network/purist-open-networking-at-asic-speeds" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.atomic.co.za/network/purist-open-networking-at-asic-speeds</a><a href="https://ublog.tech/tags/neteng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neteng</a> <a href="https://ublog.tech/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a>

Jody Lemoine 🇨🇦When troubleshooting, asking what changed since everything last worked is an important step. It’s also important to not fixate on this step because we don’t always •know• what changed. If it’s obvious, great. If it’s not, stay focused on what’s happening now rather than going down the rabbit hole of what might have happened. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://hachyderm.io/tags/Troubleshooting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Troubleshooting</a>

MarkI don't think <a href="https://noc.social/tags/NetworkEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkEngineering</a> is that popular on Mastodon, but I'm posting here anyway. I'm starting a local meetup here in <a href="https://noc.social/tags/Toronto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Toronto</a> for Network Operators. A small NOG, in the vein of <a href="https://noc.social/tags/NANOG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NANOG</a> Feel free to join us -- for FREE -- in April <a href="https://tornog.ca" rel="nofollow noopener noreferrer" target="_blank">https://tornog.ca</a> <a href="https://noc.social/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://noc.social/tags/Networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Networking</a> <a href="https://noc.social/tags/Community" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Community</a> <a href="https://noc.social/tags/Meetup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Meetup</a> <a href="https://noc.social/tags/Local" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Local</a>

Jody Lemoine 🇨🇦“Switches switch and routers route.” That’s a statement that isn’t as true as it used to be… or at least not without carefully defining context.It’s time to go old school and stop using the word “switch” in this context. The first switches were hardware-accelerated bridges and have since evolved past bridging. If we switch to “bridges bridge and routers route” we’ll be more correct in our thinking, but we have to think of bridging and routing as functions rather than devices.These days, most switches can accelerate both bridging and routing (L2 and L3) on their backplanes. Most routers have similar functions and are built on switching chips too. The whole line between switches and routers is becoming a very grey and fuzzy one.Bridges bridge and routers route, and switches do either or both •very• quickly. Most of the other considerations are about product placement.<a href="https://hachyderm.io/tags/Bridges" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bridges</a> <a href="https://hachyderm.io/tags/Routers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Routers</a> <a href="https://hachyderm.io/tags/Switches" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Switches</a> <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

Jody Lemoine 🇨🇦Tip: If you’re using Cisco for switches in a multivendor switching setup, just turn CDP off. (At least on the interfaces facing the non-Cisco gear.) Non-Cisco switches are as likely to pass CDP as not. Better to receive no discovery information than invalid discovery information. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

Jody Lemoine 🇨🇦<a href="https://masto.ai/@BotFodder" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@BotFodder</a> Labs, ideally, lead to documentation. With that in mind: 2001:db8::/32 or 3fff::/20 works best. If your lab involves dual IPv4/IPv6 stacks, avoiding the fc00::/7 space is a good plan due to source address selection problems. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

💓~eva~💓3am casual enumeration.. who's on my /21 ?03:34,00 internet not working, debug path 03:39,00 inspect router gateway rtt, link-up 03:40,40 check WAN DHCP assignment 03:40,48 uh, home WAN on a public /21 😲 03:42,00 nmap -sT -F -f --data-string 0x2bad45ec -g 16384 --mtu 1024 x.y.72.0/21Sometimes it's the little things that make the otherwise mundanity of daily life quite pleasant 😊 <a href="https://mastodon.bsd.cafe/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a> <a href="https://mastodon.bsd.cafe/tags/neteng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neteng</a> <a href="https://mastodon.bsd.cafe/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://mastodon.bsd.cafe/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Jody Lemoine 🇨🇦Today's lesson: No matter what the experts say, test it in the lab if you can. The experts may be wrong and, even if they're not, the lab process will ensure a more complete understanding of what's happening. The devices' behaviour (and the associated PCAPs that go with them) do not lie. They're the final arbiter of what is right and what is wrong. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

Jody Lemoine 🇨🇦IPoE (IP over Ethernet) has got to be the most •useless• name for a technology that I’ve ever heard. I get that the name is a play on PPPoE where we’re running straight point-to-point IP directly on Ethernet rather than using a PPP transport. That makes sense. But… almost •all• IP, whether point to point or not, is over Ethernet. The name is meaningless and doesn’t describe what it does at all. </rant> <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

MarkMade a post about Network Automation's definition being a moving goalpost, as the industry's definition changes.<a href="https://noc.social/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://noc.social/tags/Automation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Automation</a> <a href="https://noc.social/tags/NetworkAutomation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkAutomation</a> <a href="https://noc.social/tags/Community" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Community</a> <a href="https://noc.social/tags/Conference" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Conference</a> <a href="https://zealnetworks.ca/idiomatic-confusion/" rel="nofollow noopener noreferrer" target="_blank">https://zealnetworks.ca/idiomatic-confusion/</a>

Hugo Slabbert ⚠️The NetEng team I was previously on at DW is hiring for a Senior Network Engineer for Vancouver.Job is up at <a href="https://careers.demonware.net/job/R024809/Senior-Network-Engineer-Demonware-Vancouver" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://careers.demonware.net/job/R024809/Senior-Network-Engineer-Demonware-Vancouver</a>More details in there, but scope is lots of DC + chunks of cloud, for Demonware services powering Activision games.Range is $91,770.00 - $194,120.00 CADCentred in Vancouver, but checking if there is room for remote support. The team itself is distributed across Vancouver, Dublin, and Shanghai (which imho is really helpful with splitting on-call rotas).<a href="https://social.treehouse.systems/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://social.treehouse.systems/tags/FediHire" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FediHire</a>

Jody Lemoine 🇨🇦Nothing triggers <a href="https://hachyderm.io/tags/ImpostorSyndrome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ImpostorSyndrome</a> quite like taking on a <a href="https://hachyderm.io/tags/Consulting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Consulting</a> project that I think •might• be at the edge of my capabilities and having the customer refer to the engagement as “bringing in the heavy cavalry.” I suppose I could look at “heavy” in reference to my weight, but that’s really not better. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

Jody Lemoine 🇨🇦Seems I was prescient to be switching many of my customers to equipment from non-US networking vendors. I suspect this will be accelerating. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a>

💓~eva~💓🎁 Happy New Juniper Switch Day 🎁tl;dr it's a Juniper EX4300-MP, with 24x 1G + 24x 1/2.5/5/10G + 4x 40G for redundant stacking, and quite a hefty PoE stat.the new homelab network needed a new switch. I've had my eyes on this specific sku for about two years now, so when a corporate decom hit the secondary market with twenty or so units I was ready with an offer 15% lower than asking. I'd love to have a few more than one, but having one at all is pretty great <a href="https://mastodon.bsd.cafe/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://mastodon.bsd.cafe/tags/juniper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#juniper</a> <a href="https://mastodon.bsd.cafe/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a> <a href="https://mastodon.bsd.cafe/tags/freebsd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freebsd</a> <a href="https://mastodon.bsd.cafe/tags/switch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#switch</a> <a href="https://mastodon.bsd.cafe/tags/neteng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neteng</a>

MarkBetter late then never. I posted my highlights / thoughts on my journey in 2024<a href="https://zealnetworks.ca/2024/" rel="nofollow noopener noreferrer" target="_blank">https://zealnetworks.ca/2024/</a><a href="https://noc.social/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://noc.social/tags/Blog" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Blog</a>

Jody Lemoine 🇨🇦Cisco FMC is sending invalid configurations to the FTD and is stuck in a deployment loop. Last time this nonsense happened, it took TAC two days to fix it. TAC has been at it for two hours so far this time and we need to build out a new IPSec policy before 6am tomorrow. This is going to be fun. /s <a href="https://hachyderm.io/tags/MayTheOddsBeEverInYourFavour" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MayTheOddsBeEverInYourFavour</a> <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://hachyderm.io/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

Jody Lemoine 🇨🇦With few exceptions (authentication, lifetimes, PFS and policies being the notable ones that come to mind) <a href="https://hachyderm.io/tags/IKE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IKE</a> and <a href="https://hachyderm.io/tags/IPSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPSec</a> don't require an exact match between peers. They only require something they can agree upon. Things get much less brittle (especially in dealing with extranet connections) when we use a standard configuration that includes everything we're willing to use. The other end can use whatever they like as long as there's a match somewhere. <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://hachyderm.io/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

Jody Lemoine 🇨🇦So... you're going to give me all of the IPSec tunnel details during our turn-up meeting tomorrow? No. The turn-up call is for activation and troubleshooting. The build happens •before• the meeting. I am •not• building out a new configuration and wasting everyone's time while I'm on-screen. <a href="https://hachyderm.io/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://hachyderm.io/tags/NetEng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetEng</a> <a href="https://hachyderm.io/tags/Meetings" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Meetings</a>

💓~eva~💓😬 Homelab Hardware Acquisition Dilemma 🧐Juniper neteng nerds, which 10GbE capable SKUs am I missing here?- purpose: firewall + routing, $1K soft limit on secondary market - requirements: hardware EOL ok if Junos not EOS - SRX1500 is nice but not very fun, not much to mod - ACX4000 is pretty great and totally silent (EOS 06/2029) - SRX1600 looks great but not on eBay, likely N>$ - SSR1200 looks great but not on eBay, likely N>$<a href="https://mastodon.bsd.cafe/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://mastodon.bsd.cafe/tags/juniper" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#juniper</a> <a href="https://mastodon.bsd.cafe/tags/junos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#junos</a> <a href="https://mastodon.bsd.cafe/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a> <a href="https://mastodon.bsd.cafe/tags/neteng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neteng</a> <a href="https://mastodon.bsd.cafe/tags/freebsd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freebsd</a>

Recent searches

Search options

Administered by:

Server stats:

#neteng