A Poster for your desk on building a "single pane of glass" network management system.
The post Poster: How To Make a Single Pane of Glass appeared first on EtherealMind.
During my all too brief visit to Interop in New York last year, I did a quick tour of the expo hall to see if there were any interesting products around. I followed Greg Ferro’s suggestion which, to paraphrase, is to seek out the booths around the edge of the show in preference to the huge booths in the middle of the floor, because the small booths around the outside are more likely to be the startups with interesting products.
Towards the end of my “small booth” tour, I bumped into some familiar faces at the Opengear booth. I first heard of OpenGear at Networking Field Day 4 where they impressed me with the flexibility of their console server products, though to call the products “console servers” rather understates some of the product capabilities which can include RPS control, TTL I/O, GPS and 3G cellular capabilities. If you haven’t seen these products before I would encourage you to look at some of my other posts about OpenGear.
New for OpenGear at Interop was their CM7100 Console Server.
There’s not a lot going on on the front panel of the device, but as you’d probably expect, the back panel Continue reading
It’s time to look in depth at one of the SDN certs in the market: Cisco’s Network Programmability certs. I’ve written about the emerging SDN certifications before, and will continue to update those certs as news appears. However, I’ve not yet blogged to any depth about any one certification here at SDNSkills.com. This post begins a new series that does exactly that with a deeper dive into one branch of SDN certifications: those currently offered by Cisco Systems.
The plan for this series is as follows: Work through some details about at least half of the 8 Cisco exams related to SDN (billed as network programmability by Cisco). I think half of them should be enough to get a sense for the whole, even if I don’t look at every single one of the eight exams. For each exam, I’ll look at the associated courses, the exam topics, take the exams, and write a summary of impressions. I’ll probably weave in and out of this topic over the coming months, hitting the first exam here in January.
Some of you might already be thinking: Cisco and SDN? Isn’t SDN what Continue reading
In case you are planning on attending Interop in Las Vegas this year, I’d like to let you know about my two sessions, both centered around emerging methodologies and technologies in the networking space.
This is going to be a 3 hour workshop, aiming to be a practical look into network automation. I picked the two tools that I have been working with most heavily in this space, and I think this workshop will be a great way to get up to speed with some down-to-earth network automation methodologies.
I am going to separate this workshop into three main parts:
In case you are planning on attending Interop in Las Vegas this year, I’d like to let you know about my two sessions, both centered around emerging methodologies and technologies in the networking space.
This is going to be a 3 hour workshop, aiming to be a practical look into network automation. I picked the topics that I have been working with most heavily in this space, and I think this workshop will be a great way to get up to speed with some down-to-earth network automation methodologies.
I am going to separate this workshop into three main parts. I’m going to start with some of the basics, and move up in “difficulty” from there.
YAML and Jinja2 - These are text-based specifications that allows tools like Ansible to do what they need to do. I will be making the assumption that attendees have little to no experience with either of these things, so I will spend some time exploring how these work. There’s not enough time in the workshop to be totally exhaustive, so I will only be covering the portions of either specification that are totally relevant for use with Ansible.
Ansible - These Continue reading
It is possible to configure Highly-Available IPSec VPN tunnel on IOS so that the SA information is replicated between the routers. This ensures that a potential failover will be transparent to users and it will not require adjustments or reconfiguration of any remote peers.
There are two protocols used to deploy this feature, HSRP and Stateful Switchover (SSO). HSRP is one of the First Hop Redundancy Protocols that provide network redundancy for IP networks, ensuring that user traffic immediately and transparently recovers from failures in network edge devices. The protocol monitors the interfaces so that if either interface goes down, the whole router is deemed to be down and the ownership of IKE and IPSec SAs is passed to the standby router (which now transitions to the HSRP active state). SSO allows the active and standby routers to share IKE and IPSec state information so both routers have enough information to become the active router at any time.
Before we take a look at the configuration, let’s have few words about our topology. The internal network (VLAN 146 below) configuration is outside the scope of this post, but it would be normally configured with a separate HSRP instance, tracking not Continue reading
It’s time to look in depth at one of the SDN certs in the market: Cisco’s Network Programmability certs. I’ve written about the emerging SDN certifications before, and will continue to update those certs as news appears. However, I’ve not yet blogged to any depth about any one certification here at SDNSkills.com. This post begins a new series that does exactly that with a deeper dive into one branch of SDN certifications: those currently offered by Cisco Systems.
The plan for this series is as follows: Work through some details about at least half of the 8 Cisco exams related to SDN (billed as network programmability by Cisco). I think half of them should be enough to get a sense for the whole, even if I don’t look at every single one of the eight exams. For each exam, I’ll look at the associated courses, the exam topics, take the exams, and write a summary of impressions. I’ll probably weave in and out of this topic over the coming months, hitting the first exam here in January.
Some of you might already be thinking: Cisco and SDN? Isn’t SDN what Continue reading
I’m going to start out by telling you something you probably already know. Every vendor has their own way of doing things. Sometimes it makes perfect sense, and other times you end up scratching your head wondering why that particular vendor implemented this feature or product. Since I have been spending a lot more time on wireless these days, I came across an issue that forced me to reconsider how transmit power control(TPC) actually works in a Cisco wireless deployment. I thought I would impart some of this information to you, dear reader, in the hopes that it may help you. If you spend a lot of time inside Cisco wireless LAN controllers, this may not be anything new to you.
The Need For TPC
If you have been around wireless long enough, you have probably dealt with wireless installs where all of the access points(AP) were functioning autonomously. While this isn’t a big deal in smaller environments, consider how much design work goes into a network with autonomous access points that number into the hundreds. It isn’t as simple as just deciding on channels and spinning all the access Continue reading
Just a quick note to say that Big Switch have updated their demo lab system. This is an entirely virtual lab environment that simulates a Big Switch network. You can try out both Big Cloud Fabric and Big Tap Monitoring Fabric.
The lab gives you full CLI & GUI access to a sandboxed environment, with controllers, leaf/spine switches, and endpoints. Big Switch have written a sample lab you can work through, to show off the features, but you’re not limited there. You’re free to try out whatever features you like.
If you’re interested in what they’re doing, I recommend signing up.
Load sharing in MPLS networks is always an interesting topic, and we couldn’t possibly avoid it during our MPLS-focused Tech Talks – watch the video.
After discussing the load sharing intricacies we briefly dabbled with the concept of entropy labels.
In our last post we covered what docker does with container networking in a default configuration. In this post, I’d like to start covering the remaining non-default network configuration modes. There are really 4 docker ‘provided’ network modes in which you can run containers…
Bridge mode – This is the default, we saw how this worked in the last post with the containers being attached to the docker0 bridge.
Host mode – The docker documentation claims that this mode does ‘not containerize the containers networking!’. That being said, what this really does is just put the container in the hosts network stack. That is, all of the network interfaces defined on the host will be accessible to the container. This one is sort of interesting and has some caveats but we’ll talk about those in greater detail below.
Mapped Container mode – This mode essentially maps a new container into an existing containers network stack. This means that while other resources (processes, filesystem, etc) will be kept separate, the network resources such as port mappings and IP addresses of the first container will be shared by the second container.
None – This one Continue reading
This is the last in a series of podcasts sponsored by HP, all recorded at HP’s Discover conference in Barcelona, Spain in early December 2014. The series is made up of interviews and technical discussions with HP engineers and lab geeks about products in HP’s networking portfolio. Ken Gott, Product Line Manager, joins Chris Young, Senior Solutions […]
The post PQ Show 43 – HP Networking – Beyond Traditional Network Management appeared first on Packet Pushers Podcast and was written by Ethan Banks.
The “consumerisation of IT” has an interesting side-effect. Historically people mainly used computers for work. But now that many people have smartphones, tablets and laptops at home, their perception and understanding of technology has shifted. Old assumptions about training required when upgrading applications or client operating systems may no longer apply.
This comment at The Register aligns with what I’m seeing:
…We’re at the point now where users are using Windows 8 at home and wondering why the work computer is so dated. It’s the perception of IT people that users can’t handle change holding up that change, not the ability of the users. At home that same set of users has managed quite well with updated versions of Office, updated Windows, iPads, Android tablets, Facebook, video messaging and various other completely new things. Somehow they coped without extensive training and therapy. From what I’ve seen, it’s actually IT staff who don’t like Windows 8 and are trying to keep users away from it…
I can recall being involved in Office upgrades just a few years ago, and being nervous about how that would be perceived. We were concerned that there would be major push-back, because the exact locations of the buttons Continue reading
As many are aware, CloudFlare launched Universal SSL several months ago. We saw lots of customers sign up and start using these new, free SSL certificates. For many customers that didn’t already have an SSL certificate, they were able to use “Flexible SSL”.
Flexible SSL creates a secure (HTTPS) connection between the website visitor and CloudFlare and then an in-secure (HTTP) connection between CloudFlare and the origin server. For any site using absolute links to assets (i.e. javascript, css, and image files), this can lead to a “Mixed Content” error.
What is “Mixed Content”? This can be understood as mixed protocol. When the webpage is loaded over SSL (HTTPS protocol), most browsers expect all of the assets to be loaded over the same protocol. Some browsers will display an error about loading “insecure content” while others will just block the insecure content outright.
This error only applies to pages loaded over SSL, since the browser is working to make sure that secure pages only load equally secure assets.
The latest version of the CloudFlare plugin for Wordpress works to resolve a lot of these errors by altering the protocol within the Continue reading