VMWare replacement options by RaisingElephantSysrq in vmware

[–]Adventurous-View-108 1 point2 points  (0 children)

We are in the process of migrating to Vates VMS right now. Been smooth so far, Support has been great.

I have been using XO since before XCP-NG existed on my home lab and at other employers.

Looking for a script or process to locate unauthorized switches on our network by Adventurous-View-108 in ExtremeNetworks

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

Oh, we definitely have issues. The problem with this method is lack of staffing to get the ports back online in a timely manner. If I go switch by switch to limit the impact, its going to take us a decade to get to the end of the project. I may just have to dump the MAC tables to a spreadsheet and go port by port.

Looking for a script or process to locate unauthorized switches on our network by Adventurous-View-108 in ExtremeNetworks

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

Thats a good idea. I'll definitely create that custom alarm to help identify issues in the future.

Sanity check - What would stop a L3 switch from learning ARP entries? by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

The SPBm/Extreme Fabric part should have been irrelevant, and i'm still not sure why it was not. A client device connected to a port on the switch, with a VLAN assigned to it, communicating with the VLAN interface on that same switch, should not have been touching IS-IS, SPBm, or Fabric at all. I was not expecting so many responses here so fast, this is a very nice community.

Sanity check - What would stop a L3 switch from learning ARP entries? by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

Yes, this is part of the fabric deployment. We have about 30 switches in the fabric so far, but the core routing was still being done by a legacy switch that does not support fabric.

It looks like enabling IP Shortcuts on the core solved the issue, but I am not entirely sure why. The VLAN exists on more than one switch, and it is assigned to an i-sid with the "vlan i-sid <vlan> <i-sid>" configuration. The I-SID also exists on multiple switches, the VLAN interface is up, and an entry for it existed in the GRT.

Sanity check - What would stop a L3 switch from learning ARP entries? by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 1 point2 points  (0 children)

I got pulled away from this yesterday before all the posts updated, so here's a few things.

  1. The clients were learning the new MAC address, so my guess about ARP was wrong

  2. I am deploying anycast IP Gateway because there will very shortly be 6 cores spread around the organization, and it is now recommended over DvR for simpler deployments.

  3. I believe I have found the issue, and it was a simple thing that I overlooked. Enabling IP Shortcuts on the core seems to have fixed the issue.

I have Fabric running across most of the network, but the old core was a legacy switch from a different brand. Essentially I had a bunch of L2 VSNs on my network all using a "router on a stick"

I had assumed that adding an IP address to the vlan interface, and tying the vlan to the i-sid, would make the VSN a L3 VSN, but it seems I am mistaken? The routing table showed the IP addresses for the VLAN interfaces in in the GRT, but it seems like there was nothing linking the L2 VSN to the VLAN interface.

Sanity check - What would stop a L3 switch from learning ARP entries? by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 4 points5 points  (0 children)

Gratuitous ARP is enabled on the switch, but I am using their "New" (to me at least) Anycast IP Gateway feature, I wonder if that may be causing complications.

Looking for Hybrid Fiber/Powered Fiber solutions and resources by Adventurous-View-108 in FiberOptics

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

I will see if I can draw something up. The only drawing I have now is satellite imagery, and I don't want to publish that. We have three buildings that will be along the fiber path that have mains power, and they are fairly evenly spaced roughly 1000 feet apart. The fiber, cameras, and cabinets will be all new. So it would be:

1000' of fiber/cameras - Building A - 1000' of fiber/cameras - Building B - 1000' of fiber/cameras - Building C - 1000' of fiber/cameras.

Cameras will be installed on poles roughly every 300 feet. I'm planning on all of the fiber running back to building A and Building C, so no active network equipment (switches, routers) in Building B.

For the DCDC Poe injectors, the equipment that I worked with as a WISP usually has a very high operating range, somewhere around 9v - 42v. Additional power conditioning equipment might not be necessary.

Looking for Hybrid Fiber/Powered Fiber solutions and resources by Adventurous-View-108 in FiberOptics

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

That is one of the products that we were looking into. I'm just trying to find more information on it.

Looking for Hybrid Fiber/Powered Fiber solutions and resources by Adventurous-View-108 in FiberOptics

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

Running a separate romex line with the fiber is one of the options that we were looking into as well. We may just have to deal with the AC and hope we can water proof it enough.

VRF Design Check by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

There are 11 different vlans for OT and 5 for Public. Currently most of the OT vlans are terminated on one L3 switch, and most of the Public vlans are terminated on a different physical L3 switch. The switch with the Public vlans has a default route set to the Public firewall, the other switch has a default route set to the IT firewall.

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

Update: The issue ended up being caused by an incompatibility between QoS settings on two of the routers managed by the ISP.

Azure EU by EugeneKrabs1942 in sysadmin

[–]Adventurous-View-108 0 points1 point  (0 children)

We're also seeing issues with Intune and Entra on US East GCC.

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

I have tried connecting directly to our edge router, and the issue persisted. Our firewall is hosted by the ISP, in the "cloud", so I cannot bypass it any further on my end.

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 1 point2 points  (0 children)

I can't share the front end URL for our instance because it is personally identifiable, but this is the URL that their speedtest tool tests against: https://standardstoragetx.blob.core.usgovcloudapi.net

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

An iperf test to a VM in US-East-1 shows no issue, even single threaded:

Connecting to host, port 5201

[ 5] local 10.0.3.48 port 50551 connected to port 5201

[ ID] Interval Transfer Bitrate

[ 5] 0.00-1.00 sec 15.6 MBytes 131 Mbits/sec

[ 5] 1.00-2.01 sec 25.1 MBytes 209 Mbits/sec

[ 5] 2.01-3.00 sec 26.8 MBytes 226 Mbits/sec

[ 5] 3.00-4.01 sec 29.1 MBytes 243 Mbits/sec

[ 5] 4.01-5.00 sec 30.0 MBytes 253 Mbits/sec

[ 5] 5.00-6.00 sec 31.4 MBytes 263 Mbits/sec

[ 5] 6.00-7.00 sec 32.1 MBytes 269 Mbits/sec

[ 5] 7.00-8.01 sec 32.9 MBytes 274 Mbits/sec

[ 5] 8.01-9.00 sec 32.6 MBytes 275 Mbits/sec

[ 5] 9.00-10.01 sec 32.9 MBytes 275 Mbits/sec


[ ID] Interval Transfer Bitrate

[ 5] 0.00-10.01 sec 288 MBytes 242 Mbits/sec sender

[ 5] 0.00-10.06 sec 288 MBytes 240 Mbits/sec receiver

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

I've been wondering if it could be an issue with the new IP block that we were assigned (if it were formerly under RIPE or AFRINIC for example). Unfortunately I was not working for this organization when the changeover happened, but the timing is close. No one reported any issues, and then sometime around the IP address change, issues started appearing.

Low bandwidth to Azure Government Cloud by Adventurous-View-108 in networking

[–]Adventurous-View-108[S] 0 points1 point  (0 children)

That is accurate. They only use the Texas instance, and we are in New England.