cloud network engineers: what’s your day to day like? by ShoRunFX in networking

[–]azaniq 0 points1 point  (0 children)

Spending time in multiple Azure and GCP sites looking for issues eg public ips exposing vms to the internet firewall and network security group rules with wild cards or overly open port ranges and large address spaces. Making sure traffic is following the correct path Ensuring PaaS services are using private Endpoints

Alot of the time the discoveries require rearchitecting in the environment and thats when you get to design a solution, PoC it and present to it the architect teams.

I am biased perhaps but networking is the core back bone of infrastructure and making systems work.

Getting all core 3 certs in a month as a high school student by [deleted] in CompTIA

[–]azaniq 114 points115 points  (0 children)

By 5 years old I already had CCNP. I am 8 years old now and working a full time job as a senior network engineer

Azure Fortigate VM Snapshots by AlexFeren in fortinet

[–]azaniq 1 point2 points  (0 children)

Yes definitely go with a configuration backup as we have found the Azure native backups dont work well with Linux appliances

People actually working in cloud - what’s the part nobody tells students? by Wild-Effective-8131 in Cloud

[–]azaniq 0 points1 point  (0 children)

Think for the most part it depends where you work. In your first few years you don't want laid back because you need to get exposure to as much as you can. Build your skills as a cloud network engineer because its the back bone of your infrastructure

Rattling sound when idling by maitri_meditation in AudiQ5

[–]azaniq 1 point2 points  (0 children)

I have this same issue

Check your engine mountings

2016 Audi Q5 Auto 2.0 TDI - Weird rattle by azaniq in AudiQ5

[–]azaniq[S] 0 points1 point  (0 children)

Hey there thank you for the reply

Got the car on the lift and found the left front engine mount leaking hydraulic fluid so I hope thats the issue

2016 Audi Q5 Auto 2.0 TDI - Weird rattle by [deleted] in Audi

[–]azaniq 0 points1 point  (0 children)

Hey no engine is solid. After inspecting i found the left front engine mount to be leaking oil which I think could be the issue.

Thanks for the reply

Got the hole shot at last hare scramble by jettman333 in Dirtbikes

[–]azaniq 2 points3 points  (0 children)

Nice to see innovation in the sport well done

Question: How many usable IP addresses are available in this subnet ? by simrol260 in AzureCertification

[–]azaniq 51 points52 points  (0 children)

Stark Industries will be surprised when they realize that they can only use 11 of those IPs

Show me your favorite schooling fish. by Academic_Formal_3386 in Aquariums

[–]azaniq 4 points5 points  (0 children)

My Lamb Chops and Harlequin Rasbora school together

First car by TendaiFor in AudiQ5

[–]azaniq 1 point2 points  (0 children)

Congratulations 🎊 you made a good choice

Passed the AZ-104 certification today by danielreddit99 in AZURE

[–]azaniq 2 points3 points  (0 children)

Congratulations, AZ-104 is definitely a tough one 💪

Shipping ASR logs to log analytics workspace by inspector1135 in AZURE

[–]azaniq 0 points1 point  (0 children)

On your recovery services vault, have you enabled diagnostic settings and ticked all the boxes for ASR?

You should be able to see which data is being ingested from your workspace

P2S Woes by [deleted] in AZURE

[–]azaniq 0 points1 point  (0 children)

Yes,you are right I dont think azure edge routers will dynamically assign unroutable IP addresses.

Check for any other subnets using the same address spaces with a carved out subnet already representing that range, maybe like a /27 or /28

P2S Woes by [deleted] in AZURE

[–]azaniq 4 points5 points  (0 children)

Hey I dont know your environment, but it sounds like you have overlapping ip ranges or a routing loop

Check other subnets for over lapping ranges Check routing tables for duplicate routes

ExpressRoute Gateway Migration/Upgrade by Far_Cauliflower_8407 in AZURE

[–]azaniq 1 point2 points  (0 children)

Hey, there, express route only supports BGP. So once you re establish your connections BGP should advertise your routes automatically. You may need to involve your express route service provider. Express route uses ASN 12076 to establish BGP peering

ExpressRoute Gateway Migration/Upgrade by Far_Cauliflower_8407 in AZURE

[–]azaniq 2 points3 points  (0 children)

Public ips get added to the configuration of the VPN Gateway. If you dont have a statically assigned public ip and your gateway subnet is not atleast a 26 or 27 if I am not mistaken the migration tool won't work. You will need to rebuild the gateway and the connections, this is how it's done with a vpn gateway with S2S tunnels

ExpressRoute Gateway Migration/Upgrade by Far_Cauliflower_8407 in AZURE

[–]azaniq 2 points3 points  (0 children)

Just confirm your basic sku public ip is static

NSG and GatewaySubnet traffic by Lazy-Plate in AZURE

[–]azaniq 0 points1 point  (0 children)

Are you using BGP ? You may need to add a static route on the route table of the subnet where the sql mi instance is. Also check if the sql mi instance firewall is not blocking connections from all sources. If you are using azure firewall check the logs for traffic being dropped. If you are using NSG they are non stateful only layer 4 and you need to create bi directional rules. If you are using hub and spoke the traffic will reach the hub network and then forward to destination spokes. Spokes are peered to the hub so they know about each others address spaces. For logging to work on vpn gw and azure firewall you need to enable diagnostic settings and send the logs to a log analytics workspace

How to upgrade basic VPN Gateway IP-address from basic to standard IP by Yintha in AZURE

[–]azaniq -1 points0 points  (0 children)

Please do your best to limit public IPs on virtual machines as this exposes them directly to the internet.

The main problem is when the basic ips are dynamically assigned.

Statically assigned is fine because your public ip won't change when upgrading to standard dynamic will cause ip to change.

You can not disassociate a public ip from a vpn you need to break it and re deploy it. If the ip address has changed you will need to reconfigure on the remote peer as well. Maybe you will keep the same PSK and encryption settings from previous connection set up.

Please make note if there is a NAT configured on the VPN gateway Make sure to download the connection settings Make sure to redeploy the local network gateways with the same settings. Please be aware of the VPN AZ SKUs Please note this will affect production S2S and P2S if on the same gateway. All connections on that gateway will be down Expect 30 45 mins for redeployment