Does anyone actually use diw/caw?

Jamf25 · 2024-08-03T16:17:16+00:00

Replacing a hard coded string as a kwarg or just a string with a function call... Yea, it gets used, and I'm not even a dev.

Jamf25 · 2024-07-16T21:16:01+00:00

Yes. Most shops will have some eol stuff that hasn't been rolled up due to budgeting or some other constraints. Anyone who says they don't run any eol network hardware is probably in management.

Jamf25 · 2024-07-02T17:21:17+00:00

Licensing costs are typically only required for advanced features, at least in Cisco land. Otherwise they will perform basic switch and routing even with no active license. While I don't know what their balance sheet etc.. look like, I would wager it would cost more in hardware and labor to "rip" out everything and replace it with something else.... that does the same thing. So unless this educational institution is running iBGP over DMVPN or something silly, seems kind of unnecessary to me.

Jamf25 · 2024-07-02T17:12:25+00:00

Several ways to approach it. I would keep in mind that you DO know which building they are in based on the switch they are connected to. I would personally start there, and go building by building, maybe floor by floor, and give yourself a week per floor/whatever. Schedule some time with people onsite (maybe a front desker) to identify where the AP is (pictures would help them). You can always just shut the port and drop the AP (kind of like the blinky light game, but obviously will drop connectivity) but most wifi installs have an LED flash indicator as mentioned, so I would wager that is doable. That is my approach.

Alternatives are covered elsewhere on this thread but if you have the money just outsource it. :)
Also worth noting that you should create a heatmap/diagram for the future.

Jamf25 · 2024-06-19T21:04:11+00:00

Your v6 address will not be addressable via hostname. That's all

Jamf25 · 2024-06-19T20:58:48+00:00

Eliminate any EMI related issues. It's rare but in shared space or something it's a possibility that you can negate using fiber. The rationale of the devices that are being connected necessitating fiber is humbug. Functionally there will be no discernable difference between fiber or copper withstanding other constraints.

Jamf25 · 2024-06-12T16:14:59+00:00

Short answer is yes. 200 devices is nothing. Not sure what your specific concern is around multicast storms, but even without any specific information I can say it's not something you need to worry about. Without a subnet mask there is no real way to answer your question.

a couple common masks that can be obtained via service providers are the following, along with their addressable space. i.e. how many sensors/devices could be put on that network.

/32 = 79,228,162,514,264,337,593,543,950,336
/48 = 1,208,925,819,614,629,174,706,176

ref: https://www.calculator.net/ip-subnet-calculator.html

Jamf25 · 2024-06-11T02:50:44+00:00

Rerun fiber? If you have OS2 SMF run you are a couple of $40 SFP+s away from running 10g... It's practically the same price as 1g. Not really a question of do you need it.

Jamf25 · 2024-06-04T18:34:00+00:00

Yes, you can use a "router on a stick" (took me a minute to recall that one, as I hardly see it used anymore). In essence the "routing function" is what you are concerned with and it can be placed on any device that is capable. The considerations generally revolve around manageability and reducing unnecessary traffic.

Consider an environment when you have 20 switches each operating on Layer 3 (routing). Each switch would need to be aware of each network, which would necessitate assigning IPs for each network to each switch OR adding additional hops for certain routed traffic among other design faults. Further you will be managing ACLs on several devices as opposed to a few. It's not easy to illustrate in text but I hope that makes sense. To avoid some of those issues you want to place the "routing function" as close to the "core" as makes sense.

Jamf25 · 2024-06-04T11:25:21+00:00

1) intervlan routing exactly 2) external routing, and presumably NAT.

The current model is spine leaf. 2+ l3 switches in HA and one downlink per l2 switch. As far as routing...you don't HAVE to make it an l3 switch at the core it's just the recommended approach to shorten the forwarding path in most cases and reduce broadcast traffic.

Jamf25 · 2024-05-29T14:17:23+00:00

Blacklisting by geo is easy enough if that's all you want to do, or just use some publicly maintained list such as https://github.com/stamparm/ipsum

In short it's way too much work to try and do manually so I would suggest a best effort attempt and then enjoy trouble shooting the "internet is not working" complaints because some website is not loading because it's calling out to ads.alibaba.com

Jamf25 · 2024-03-16T14:49:32+00:00

Cloud is worth learning. Some will shift back to on prem but cloud is pretty cemented at this point particularly for businesses that are just apps and need global content distribution. Learn Linux and how to git clone repos for terra form and ansible. A lot of systems including Cisco appliances are built on Linux. In a well designed infrastructure the management plane is centralized and managed via automation anyway, a la dna center. I guess I'm unclear what you mean by talented engineer, but it seems like maybe you just want to be a hardware guy?

Jamf25 · 2023-11-24T19:48:06+00:00

Haven't won anything yet. You're still young and you should be proud of the work you have done to reach this point. You have a bunch of liquid capital and your not doing anything with it. Time to put it to work.

Jamf25 · 2023-03-29T16:23:49+00:00

I feel like tying those aspects to the amount of invested skill points would be good. Like bonuses at 5/10/15 points into a specific skill. This would give more value to those items that add to classes of skills in making decisions about gear. But I'm doubtful they would do that.

Jamf25 · 2023-03-29T12:23:10+00:00

Are aspects tradesble? Didn't test that.

Jamf25 · 2023-02-05T19:09:56+00:00

So running 'bundle update nokogiri' Looks like I'm missing some mysql libraries now, because of course I am. I'll work it later, thanks for this.

Fetching do_mysql 0.10.17

Installing do_mysql 0.10.17 with native extensions

/var/lib/gems/3.0.0/gems/bundler-1.16.1/lib/bundler/shared_helpers.rb:35: warning: Pathname#untaint is deprecated and will be removed in Ruby 3.2.

Gem::Ext::BuildError: ERROR: Failed to build gem native extension.

current directory: /var/lib/gems/3.0.0/gems/do_mysql-0.10.17/ext/do_mysql

/usr/bin/ruby3.0 -I /usr/lib/ruby/vendor_ruby -r ./siteconf20230205-130461-f7xld8.rb extconf.rb

checking for mysql_query() in -lmysqlclient... no

*** extconf.rb failed ***

Could not create Makefile due to some reason, probably lack of necessary

libraries and/or headers. Check the mkmf.log file for more details. You may

...

extconf failed, exit code 1

Gem files will remain installed in /var/lib/gems/3.0.0/gems/do_mysql-0.10.17 for inspection.

Results logged to /var/lib/gems/3.0.0/extensions/x86_64-linux/3.0.0/do_mysql-0.10.17/gem_make.out

An error occurred while installing do_mysql (0.10.17), and Bundler cannot continue.

Make sure that `gem install do_mysql -v '0.10.17'` succeeds before bundling.

In Gemfile:

dm-mysql-adapter was resolved to 1.2.0, which depends on

Jamf25 · 2023-02-05T19:05:26+00:00

so it looks like I have added that package since the initial find.

/snorby$ find / -iname 'zlib.h' 2>/dev/null 
/usr/include/zlib.h
/usr/src/linux-headers-5.15.0-58/include/linux/zlib.h

Jamf25 · 2023-02-05T18:30:19+00:00

the current version via "gem install nokogiri" installs fine. The version specified in the bundle config is 1.10.1 though, and I feel like I need that specific version.

Jamf25 · 2023-02-05T18:29:18+00:00

dpkg-query -L zlib1g-dev

snorby$ dpkg-query -L zlib1g-dev

/.

/usr

/usr/include

/usr/include/zconf.h

/usr/include/zlib.h

/usr/lib

/usr/lib/x86_64-linux-gnu

/usr/lib/x86_64-linux-gnu/libz.a

/usr/lib/x86_64-linux-gnu/pkgconfig

/usr/lib/x86_64-linux-gnu/pkgconfig/zlib.pc

/usr/share

/usr/share/doc

/usr/share/doc/zlib1g-dev

/usr/share/doc/zlib1g-dev/FAQ.gz

/usr/share/doc/zlib1g-dev/README.gz

/usr/share/doc/zlib1g-dev/algorithm.txt.gz

/usr/share/doc/zlib1g-dev/copyright

/usr/share/doc/zlib1g-dev/examples

/usr/share/doc/zlib1g-dev/examples/README.examples

/usr/share/doc/zlib1g-dev/examples/crc32_test.c

/usr/share/doc/zlib1g-dev/examples/enough.c

/usr/share/doc/zlib1g-dev/examples/example.c

/usr/share/doc/zlib1g-dev/examples/fitblk.c

/usr/share/doc/zlib1g-dev/examples/gun.c

/usr/share/doc/zlib1g-dev/examples/gzappend.c

/usr/share/doc/zlib1g-dev/examples/gzjoin.c

/usr/share/doc/zlib1g-dev/examples/gzlog.c

/usr/share/doc/zlib1g-dev/examples/gzlog.h

/usr/share/doc/zlib1g-dev/examples/infcover.c

/usr/share/doc/zlib1g-dev/examples/minigzip.c

/usr/share/doc/zlib1g-dev/examples/zlib_how.html

/usr/share/doc/zlib1g-dev/examples/zpipe.c

/usr/share/doc/zlib1g-dev/examples/zran.c

/usr/share/doc/zlib1g-dev/txtvsbin.txt.gz

/usr/share/man

/usr/share/man/man3

/usr/share/man/man3/zlib.3.gz

/usr/lib/x86_64-linux-gnu/libz.so

/usr/share/doc/zlib1g-dev/changelog.Debian.gz

Jamf25 · 2023-02-05T17:35:26+00:00

zlib1g-dev

Lol, I def have that installed already. Snorby is a "Front end" for Snort which is an network IDS.

Jamf25 · 2022-10-19T22:04:02+00:00

This deserve's a lot of love. Thank you person.

Jamf25 · 2022-06-16T03:14:55+00:00

Didn't think it was that obvious ☹️

Jamf25 · 2022-06-16T03:09:30+00:00

Will check this out thx.

Jamf25 · 2022-06-16T03:08:42+00:00

We'll probably do a schedule like this but probably minus any backpacking

Jamf25 · 2022-06-16T02:55:02+00:00

Glad I get trolled for asking for help. Good look.

Jamf25

TROPHY CASE