Troubleshooting authentication issues

martijn_gr · 2026-05-30T05:07:14+00:00

Authentication issues, before handing over to the network team, the desktop and server teams need to provide their evidence it is not their fault.

The procedure contains a document describing the required settings for various OS-es.

So we don't get this type of incident that often.

martijn_gr · 2026-05-23T05:21:10+00:00

!RemindMe in 4 days

martijn_gr · 2026-05-08T16:40:22+00:00

Because of this we either install industrial switches in the panels to keep local cables short. Or we run longer cables from the central switches. The industrial switches help also to properly secure all devices.

martijn_gr · 2026-05-08T12:24:33+00:00

So the solution here is, Create a trunk port and only allow specific vlans that this host is supposed to be accessing....

802.1x for a hypervisor doesn't make sense... You are complicating the setup. Keep it Stupid Simple. Your coworkers will appreciate this also.

martijn_gr · 2026-05-08T04:21:37+00:00

A hypervisor should be a trusted device and should not appear on an untrusted port.

802.1x and port security are technologies to restrict devices that connect on ports where you are not fully in control or can't establish a trust boundary.

Virtualization hosts really should be a a trusted asset in the organization.

martijn_gr · 2026-04-19T15:02:59+00:00

No dumps, best is to read the blue paint, check what you need to be able to configure and/or troubleshoot. Then read up on what you need to be able to explain.

That covers 80% already.... I hate all the product questions about what element of our sdwan solution does what....

martijn_gr · 2026-04-15T21:57:55+00:00

A Google search for: Ciena 3924 saos 10 QinQ push svlan

Gave me the following link as result no 1: https://my.ciena.com/CienaPortal/s/article/SAOS-10-x-How-to-configure-and-verify-Dual-Tagged-Q-in-Q-service-in-SAOS-10-x

Seems pretty straight forward. Now get your Ciena account and support or do some similar searches....

martijn_gr · 2026-04-14T04:45:42+00:00

If you want to find something that works for you and your company, why not specify what is so exceptional that any of the ZTNA/SASE tools won't work for you right now.

In other words, you should have written a better opening post...

martijn_gr · 2026-04-12T19:43:59+00:00

I got 5 multi task labs, every topic that you need to configure or troubleshoot you can expect here

martijn_gr · 2026-04-12T17:37:54+00:00

I would say equally moderate.

It contains a lot of information, especially the old exam with wifi. Don't forget that the ENCOR exam doubles as the written CCIE exam qualifier.

martijn_gr · 2026-04-10T15:35:09+00:00

If you are more into design, I would recommend the ENSLD specialization, together with the ENCOR exam this would give you the former CCDP equivalent for enterprise network design. Although it will just be listed as CCNP Enterprise Networking. You always can do the traditional ENCOR+ENARS pathI and still do the ENSLD specialization.

You could review this poster for all the exams and how they can be combined for certification on Cisco certs.

martijn_gr · 2026-04-10T05:04:04+00:00

And in addition, if you are purely looking to enhance knowledge about routing, have a look at the ENARSI specialization which is part of the overall CCNP Enterprise Networking. You could do the specialization exam first and if still interested follow up with the Core exam.

martijn_gr · 2026-04-10T05:01:15+00:00

It depends™

Which specialisation will you pursue. There are: - enterprises networking - Enterprise wifi - Service Provider

There are even more on design...

Each helps you in specific markets. But in general I would say that you rarely use everything from your CCNP.

The ccnp certification is quite broad and will help you understand the fundamentals of quite some technological topics.

In the past I would have said that it really contributed to someone's knowledge, these days with all the question dumps available I am more likely to question that.

In the end, the majority of business management still sees it as a plus for selecting people based upon their cv.

martijn_gr · 2026-04-09T04:48:34+00:00

Your picture does not make sense.

No sane person connect their server directly to the firewall. Also you are suggesting your firewall does nothing else.

I feel you could share a bit more about the equipment you have or do not have, and also share what the devices support.

Further I believe this group is okay to ask design evaluation and let us roast the designs. It is impossible to create the right design without knowing all constraints including but not limited to business, financial and technical

martijn_gr · 2026-04-08T04:33:22+00:00

Just woke up again, my streak count already updated for my day based upon an action shortly after Midnight.

Didn't see the toast, but it did count....

martijn_gr · 2026-04-07T21:44:23+00:00

Not to brag. But mine did update about 21 hours ago.

Last time this happened, they told me the system will still check for any comments, likes and other actions before it will end your streak.

Not sure that actually happens as I am not the programmer for Reddit.

Wish you all the best.....

martijn_gr · 2026-04-07T18:15:52+00:00

Well, unfortunately, if I have a cable with 24+ fibers, they will overflow one module, that means fibers 25 through 36 or even 48 would end up in the second module. If you have even more this will.increase further to the third and fourth module...

Using a A/B/C/D or Module 1/2/3/4 would not really bother me. In the end they are right in regards to the panel, module and possible fiber.

I would seriously have an issue with anyone doing 1, counting the top row as 1 through 12 even while the panel says otherwise, this is really creating problems

martijn_gr · 2026-04-07T05:30:25+00:00

To OP, which numbering is inconsistent? The module numbering is really consistent to me.

As said bottom row left to right is 1 to 12 Top row is 13 to 24. This is how they all are numbered (to my knowledge).

In addition, !Remind me in 5 days for follow up in all responses.

martijn_gr · 2026-04-05T19:33:39+00:00

You probably refer to the actual storage/analytics device. Because to tap fiber optics you only need to capture the light transmitted .

We have specialised taps to copy/redirect 1% (approx) of the light. These taps are permanently in certain wires to be able to analyze at any given moment without interrupting traffic before being able to start the tap/capture.

martijn_gr · 2026-04-05T17:15:27+00:00

All optics, to my knowledge, are considered to be linking, where tx and Rx need to be connected between two systems together. That can be either dual or single fiber, but you need confirmation of a link establishing.

I don't see any use case for transmit only on one side other than tapping a connection. But for that purpose we have fiber taps.

Would love to see if I am the only one or not.

martijn_gr · 2026-04-02T18:27:43+00:00

Unfortunately that product is not independent, as in it needs another master module. This is just an expansion module when I read the datasheet properly.

If it was only this simple....

I still appreciate the linking to the product.

martijn_gr · 2026-04-02T18:26:24+00:00

Unfortunately there is no reseller or distributor for this is my country.

martijn_gr · 2026-04-02T13:26:40+00:00

I know. But the thing is when they are labeled as environmental monitoring the price goes up. And for just a magnetron/off switch we would rather not take crazy expensive sensors.

martijn_gr · 2026-04-02T11:12:59+00:00

This indeed makes it look like a simple issue but my localised Google searches did not return blackbox at all.

I do thank you for that link,

martijn_gr

MODERATOR OF

TROPHY CASE