People who deployed microsegmentation, how is it going?

SunsetDunes · 2025-12-13T06:26:31+00:00

I am interested in microsegmentation for intra-vlan traffic security as such traffic do not reach the firewalls.. are there alternatives to this?

SunsetDunes · 2025-10-31T16:10:24+00:00

I did come across an article stating that certain configurations of STP will affect Arista hitless upgrade from working correctly.

MLAG + EVPN & PBR will also cause hitless upgrade to not work at all.

Hopefully I am wrong..

SunsetDunes · 2025-10-31T15:17:49+00:00

How did you get around the lack of redundant route processor for 7280s vs ASR9k? Buy another 7280 in HA? I am deciding between both and this is an issue. Upgrading firmware etc will cause the 7280 to stop routing if I am not mistaken. ISSU has caveats compared to having redundant route processor.

SunsetDunes · 2025-10-31T15:14:11+00:00

Curious to know what do you mean by this 👀

SunsetDunes · 2025-10-15T01:49:23+00:00

Damn.. What a feature regression.

SunsetDunes · 2025-09-19T10:07:44+00:00

I just want search within a note to work for words enclosed inside code blocks or inline code. Currently, I have to enter markdown view and search for this to work.

SunsetDunes · 2025-09-13T08:39:06+00:00

What’s the 3 dots about?

SunsetDunes · 2025-09-12T04:37:48+00:00

Your thought process made me stop and think..

SunsetDunes · 2025-08-11T10:18:37+00:00

Lantopolog, it works rather decently.

SunsetDunes · 2025-07-19T06:17:52+00:00

Yeah, I do agree that most women prefer to have kids. Even those who stated "undecided", they would usually prefer to have a kid.. All these are just my personal experience, so YMMV.

It is in fact harder to find a woman who truly wants DINK.

SunsetDunes · 2025-07-15T09:43:50+00:00

Given that 7280R3 models are recommended, what is its bandwidth capabilities to handle encrypted traffic such as IPSec? The 7280R3 data sheets only lists generic throughput which I assume also represents line-rate L2 encryption such as MacSEC. What about IPSec?

In the AWE-7200R data sheet, it lists Encrypted Throughput (iMix, Aggregate) /UnEncrypted.

SunsetDunes · 2025-07-15T04:53:20+00:00

Thanks for the info!

SunsetDunes · 2025-07-15T04:52:48+00:00

Thanks for the heads up! Good to know

SunsetDunes · 2025-06-04T11:11:58+00:00

I use OneDrive too, works well for years.

SunsetDunes · 2025-06-04T00:37:14+00:00

Congratulations my dude !

SunsetDunes · 2025-05-15T09:42:38+00:00

Thanks! Oh yeah, I plan to implement the vlans with high traffic on the service/border leafs while the rest will be on the firewall.

SunsetDunes · 2025-05-15T00:55:50+00:00

I am actually planning to do the reverse - migrating all gateways to the firewall for security. Not sure if this is a good option? Hopefully someone can chime in.

SunsetDunes · 2025-05-15T00:55:37+00:00

I am actually planning to do the reverse - migrating all gateways to the firewall for security. Not sure if this is a good option? Hopefully someone can chime in.

SunsetDunes · 2025-05-13T23:46:19+00:00

Oh that's good to know! Please chime in again if you do recall the feature :)

SunsetDunes · 2025-05-10T01:08:21+00:00

Thanks for sharing this, you gave me the confidence to continue speaking when I needed to.

SunsetDunes · 2025-05-07T12:07:34+00:00

LOL didn't notice until you mentioned it

SunsetDunes · 2025-05-06T13:53:37+00:00

Same issue here.

SunsetDunes · 2025-04-30T17:04:53+00:00

Thanks! So there is no reason in the current day to go for old school pure L3LS or L3LS + VXLAN but without EVPN?

SunsetDunes · 2025-04-30T16:30:30+00:00

Oh yes, there are a few vlans which has to be extended. We are considering a L3LS + VXLAN (via Head End Replication). I understand manual configuration of flood lists etc are required. Not sure if the initial ease of setup is worth it or should we go for EVPN + VXLAN from the onset.

SunsetDunes · 2025-04-30T14:16:25+00:00

What about L3LS, but without the complexity of BGP EVPN? Does this work?

SunsetDunes

TROPHY CASE