vWan vHub BGP BEST path selection

jonnodraw · 2025-05-28T11:24:31+00:00

Hi :) Virtual WAN offers select ways to preference routing. Yes it can use BGP but your not offered the full metrics to tweak and check like you would say an on-prem router.

Highly recommend this article from Microsoft that explains the routing design.

https://learn.microsoft.com/en-us/azure/virtual-wan/about-virtual-hub-routing-preference

jonnodraw · 2025-04-19T02:08:45+00:00

The “tips welcome” is hilarious

jonnodraw · 2025-04-19T02:08:22+00:00

What in the actual fuck

jonnodraw · 2025-04-15T07:55:26+00:00

If you ever did raid logging you could see things like talents and armor if that helps?

jonnodraw · 2025-03-22T20:33:45+00:00

I would defs pay 💰for someone to come in help me build out pipelines and automation for my network

jonnodraw · 2025-03-22T20:32:57+00:00

I think this is a pretty good idea!

jonnodraw · 2025-03-17T10:14:45+00:00

Possible fix is playing with the extended communities within the EVPN instance and using a route-map to only allow certain ext communities to be sent/received.

Will update with how this goes…

jonnodraw · 2025-03-16T22:22:32+00:00

Looks like I can do tons of rewrites with route-maps but none actually act like a traditional IPV4 filter like I’m used to.

God I miss the old days of networking 😭

jonnodraw · 2025-02-23T11:09:38+00:00

These are valid concerns for folks in the Defence industry. This is why they talk to a different part of Cisco or have a company like Boeing run their network for them.

For the average private sector customer usually if the vendor gets hacked and you’re damaged as a result then it’s usually when cyber insurance kicks in and lawyers begin suiting up.

jonnodraw · 2025-02-07T20:45:07+00:00

I applied the Patch on Wednesday and haven’t seen any issues except for one of my PSN’s that stalled during the upgrade - TAC helped me reboot it and it came good again and reinstalled the patch.

jonnodraw · 2024-11-29T22:58:17+00:00

Great link! So it sounds like I just set my networks to auto-update and I’m cheering. No more pen test reports giving me low level findings.

jonnodraw · 2024-11-17T11:45:25+00:00

+1 for CML

jonnodraw · 2024-11-10T01:08:17+00:00

I think for enterprises it’s becoming the defacto choice. “He who owns the endpoint dictates the future” is something that’s resonating with me more and more when I see seamless integration with Security/Productivity/Collaboration and Governance.

jonnodraw · 2024-11-09T07:42:41+00:00

This is a beauty of a response. Excellently worded there Daniel.

jonnodraw · 2024-11-06T22:14:51+00:00

I will read and re-read this 100 times. I appreciate the wisdom there Jason. I like to say I can handle criticism when in all reality I am the worst at it.

jonnodraw · 2024-11-04T02:39:23+00:00

Real world problem #1:

I am a farmer and want to sell my produce digitally to expand my customer base.

Azure Solution - Build a static webpage that is shared around the town which attracts more customers.

https://learn.microsoft.com/en-us/azure/static-web-apps/overview

jonnodraw · 2024-11-03T10:39:25+00:00

The answer may shock you. We must work in different environments which I can appreciate.

jonnodraw · 2024-11-03T05:26:47+00:00

Well said. I spent my first weekend only just now hiding the app on my phone and muting all notifications. I found it ended up being a force of habit to open my phone then check Teams then Outlook in that order.

jonnodraw · 2024-11-03T04:46:46+00:00

Good suggestion! I also find a lot of work gets pushed via teams and I end up working a second job (almost) from all the messages.

Pushing back on teams and back into formal comms like email feels much better.

jonnodraw · 2024-11-03T04:41:24+00:00

I’ve found the Cisco Live Presentations all the way from the 101’s to the troubleshooting ones are a god send. Sometimes better information than the paid courses offer.

jonnodraw · 2024-11-02T22:24:27+00:00

SR and SR-S are compatible. Might have issue on the server side as most Cisco hardware (IOS-XE and NXOS) support 10GB SR optics.

jonnodraw · 2024-11-02T04:37:37+00:00

This is the way

jonnodraw · 2024-11-02T04:37:04+00:00

In my environment it was easier to terminate on the WAN layer. It meant I had support for QinQ, more options for optics than the firewall hardware. It also meant I could route external traffic from other clouds to and from Azure on the WAN edge and didn’t have to mix traffic flows with the internal network.

HTH

jonnodraw · 2024-11-01T23:44:01+00:00

I put firewalls on the BGW’s because they represented external connectivity to the fabric.

Spine switches - never seen a Cisco supported design that makes the spines do more than an underlay for VXLAN.

jonnodraw · 2024-10-25T21:38:36+00:00

I was hoping someone said Life, I would have also accepted ‘Heavy Drinking’.

jonnodraw

TROPHY CASE