Multi-Chassis-Link Aggregation (MC-LAG)

In my earlier blog (Junos High Availability Design Guide) it was discussed how to make use of redundant routing engines by configuring features like (GRES, NSR, NSB)  for reduction of downtime to minimum possible level.

The real problem is that one RE is active at one time and all PFEs must be connected with active RE . In case of failure of primary Routing Engine (RE) the backup RE will take over  and all PFEs now, needs to connect to new primary RE. This scenario can cause momentary disruption of services.

MC-LAG (Active-Active) is correct solution to above described problem as it offers 2 active REs in 2 different devices/ chassis. Important concepts for MC-LAG proper configuration / functionality  are as under:-

  • Inter Chassis Control Protocol. The MC-LAG peers use the Inter-Chassis Control Protocol (ICCP) to exchange control information and coordinate with each other to ensure that data traffic is forwarded properly. ICCP replicates control traffic and forwarding states across the MC-LAG peers and communicates the operational state of the MC-LAG members. It uses TCP as a transport protocol and requires Bidirectional Forwarding Detection (BFD) for fast convergence. Because ICCP uses TCP/IP to communicate between the peers, the two peers must be connected to Continue reading

Time to move away from HPE Software

If you are still using HPE Software, you should actively plan to migrate away. The recent divestiture does not look good to me – I think existing customers are going to get soaked. Plan your migration now.

I’ve said it before, that I retain a soft spot for Hewlett-Packard. They gave me my first professional job out of university. I served my sentence doing HP OpenView consulting, and HP-UX Administration, but still: it got me started. Once you have some professional experience, it’s much easier to move to the next role.

It saddens me to watch HP’s ongoing struggles. It’s sad to watch a big ship get broken up for parts. But things had to change. They need to do something to adapt to the realities of modern IT demands.

There was one line in the recent announcement about divesting HPE’s software assets that stood out to me:

Micro Focus expects to improve the margin on HPE’s software assets by approximately 20 percentage points by the end of the third full financial year following the closing of the transaction

(Emphasis added).

It has been clear for a while that HP Software was no longer a core asset for HPE. It Continue reading

U.S. consumer agency issues official Samsung Galaxy Note 7 recall

The U.S. Consumer Product Safety Commission (CSPC) late Thursday issued an official recall of 1 million Samsung Galaxy Note 7 smartphones. Samsung had issued its own recall Sept. 2, but there was no formal recall in cooperation with the CPSC until now. The recall is necessary because the Note 7 "presents such a fire hazard," Elliot Kaye, the CPSC chairman, said in a news conference. Kaye said customers subject to the recall have two options: either to seek a replacement or a refund, "which is the choice of the customer and the customer alone."To read this article in full or to leave a comment, please click here

Junos High Availability Design Guide

High availability is one of the important consideration during network design and deployment stage and all most all the network vendors support various high availability features.

The objective of this article is to describe Junos best practices required to achieve minimum downtime in case of fail-over scenarios.

The Routing Engine or Control Plan is the brain in Junos based devices to run and execute all the management functions. Most of the  Junos based devices offers redundant routing engines (either through default configuration or through explicit configuration virtual chassis ). At one time only one Routing engine can be active (exception of Active-Active MC-LAG which is beyond the scope of this blog).  The mere presence of 2nd routing engine in the Junos device will not add any advantage with respect to high availability until certain features are not configured.

  •  Grace-full Routing Engine Switch Over  (GRES). GRES enables synchronization of kernel and chassis demon between mater routing engine and backup routing engines and in case of failure of master routing Packet Forwarding Engine (PFE) will simply join to new master routing engine (which was backup routing before fail-over).

Preparing for a Graceful Routing Engine Switchover

 

Graceful Routing Engine Switchover Process

GRES can be configured by following configuration command:-

set chassis redundancy graceful-switchover

Effects of Continue reading

Windows 10 haters: Try Linux on Kaby Lake chips with Dell’s new XPS 13

Rejoice Linux fans; the OS will work on laptops with Intel's Kaby Lake chips.Three new models of Dell's slick XPS 13 Developer Edition will be available with Ubuntu OS and 7th Generation Core processors in the U.S. and Canada starting on Oct. 10.Prices for XPS 13 DE will start at US $949. Dell also announced the XPS 13 model with Kaby Lake and Windows 10, which will ship on Oct. 4 starting at $799.Dell didn't share details on what version of Ubuntu desktop OS will be preloaded. It officially supports Ubuntu 14.04 in existing laptops, but could pre-load version 16.04 on the new XPS 13 DE.Dell has remained committed to Linux while major PC vendors shift to Windows 10 on PCs. Intel made a major commitment to supporting Windows 10 with its new Kaby Lake chips but hasn't talked much about Linux support.To read this article in full or to leave a comment, please click here

Infocyte HUNT sets out to answer the question, “Have we been hacked?”

This column is available in a weekly newsletter called IT Best Practices.  Click here to subscribe.  Your company's senior executives are discussing cyber security and the possibility of suffering a data breach. The CEO read that if a company has valuable data, then a breach is statistically inevitable. Thankfully your company hasn't discovered a breach, but that means very little. FireEye says that a breach can go undetected for as long as 200 days. The worried CEO picks up the phone, calls you and asks, "Has our enterprise network been hacked?" He wants a definitive yes or no answer, right then and there. What do you tell him?To read this article in full or to leave a comment, please click here

Infocyte HUNT sets out to answer the question, “Have we been hacked?”

This column is available in a weekly newsletter called IT Best Practices.  Click here to subscribe.  Your company's senior executives are discussing cyber security and the possibility of suffering a data breach. The CEO read that if a company has valuable data, then a breach is statistically inevitable. Thankfully your company hasn't discovered a breach, but that means very little. FireEye says that a breach can go undetected for as long as 200 days. The worried CEO picks up the phone, calls you and asks, "Has our enterprise network been hacked?" He wants a definitive yes or no answer, right then and there. What do you tell him?To read this article in full or to leave a comment, please click here

The FBI could have saved money with this iPhone 5c hack

The FBI may have paid a small fortune to unlock an iPhone 5c used by the San Bernardino shooter. But a security researcher has demonstrated a way to do it for less than US $100. Sergei Skorobogatov at the University of Cambridge used a technique known as NAND mirroring to bypass the passcode retry limit on an iPhone 5c. Using store-bought equipment, he created copies of the phone’s flash memory to generate more tries to guess the passcode.   Skorobogatov detailed the whole process in a new paper that disputes the FBI’s assertion that the San Bernardino shooter’s iPhone couldn’t be accessed with the NAND mirroring technique.  To read this article in full or to leave a comment, please click here

The FBI could have saved money with this iPhone 5c hack

The FBI may have paid a small fortune to unlock an iPhone 5c used by the San Bernardino shooter. But a security researcher has demonstrated a way to do it for less than US $100. Sergei Skorobogatov at the University of Cambridge used a technique known as NAND mirroring to bypass the passcode retry limit on an iPhone 5c. Using store-bought equipment, he created copies of the phone’s flash memory to generate more tries to guess the passcode.   Skorobogatov detailed the whole process in a new paper that disputes the FBI’s assertion that the San Bernardino shooter’s iPhone couldn’t be accessed with the NAND mirroring technique.  To read this article in full or to leave a comment, please click here

As Dell and HPE revamp, Lenovo sets sights on enterprise cloud servers

The cloud -- both on-premise and off-premise -- is transforming servers and data centers, and many companies are getting vendors to customize hardware for specific cloud-based workloads.Lenovo wants a bigger chunk of that market and is working toward offering custom-built converged servers targeted at specific tasks. The company is also looking for a larger opportunity with custom hardware for large-scale customers.Companies like Facebook, Google, and Amazon are designing their own servers for mega-data centers. These servers are designed to handle workloads specific to the company's requirements, like responding to search requests, or recognizing people in uploaded images.To read this article in full or to leave a comment, please click here

Worth Reading: IPv6 versus v4 performance map

This is a world map showing the average value of the relative performance of observed connections in IPv6 compared to IPv4. The values are in units of milliseconds. For each observed dual stack end device, the TCP SYN exchange connection times are recorded and the best IPv6 and IPv4 Round Trip Times (RTT) are retained. …. Where IPv6 is faster, the IPv6 RTT is smaller than the IPv4 RTT and the result of the subtraction is a negative number, displayed as a shade of green in the above map. Where IPv4 is faster the result of the subtraction is a positive number, displayed as a shade of red in the map. —APNIC

LinkedInTwitterGoogle+Facebook

The post Worth Reading: IPv6 versus v4 performance map appeared first on 'net work.

Microsoft sets dead date for Insider builds

Microsoft will soon pull the plug on older builds of its Windows 10 previews to again force testers to either abandon the program or update to the newest version.As the company released the latest beta of Windows 10 -- identified as build 14926 -- Microsoft's Insider spokeswoman reminded users that they would start to see on-screen expiration notices.Testers on the Fast "ring" of the Windows Insider program, who receive more builds at a faster clip than others, will begin seeing expiration notices today. "On October 1, these PCs will start rebooting every 3 hours and then on October 15, these PCs will stop booting all together [sic]," said software engineer Dona Sarkar in a post to a company blog.To read this article in full or to leave a comment, please click here

Microsoft’s the top open-source contributor on GitHub

The organization with the largest number of contributors to open-source projects over the past year on GitHub is, surprisingly, Microsoft, GitHub announced today.Fully 16,419 contributors affiliated with Microsoft worked on open-source GitHub projects during the past 12 months, GitHub said, ahead of 15,682 from Facebook, 14,059 from Docker and 12,841 from Angular.+ALSO ON NETWORK WORLD: LinuxCon: Q&A with inventor of, um, Microsoft PowerShell + Open source-happy Microsoft joins Eclipse FoundationTo read this article in full or to leave a comment, please click here

Nenshou Fire: Recoil

My daughter has started a new fiction series on her blog; I’ll just link to it here for anyone who’s interested.

A cold circular object is pressed to my head, a hand reaching around to cover my mouth before I can make a sound. My eyes squeeze shut reflexively. Is this it? Is this how I’m going to die? After so much time of hiding, running, escaping the war around me, am I finally reaching the end of my life? My heart explodes inside me, waiting for the explosion of powder, marking the final moments of my life…but nothing comes. I open my eyes, surprised. What is this? Why hasn’t he made that one little motion that would end my life? —Nenshou Fire

LinkedInTwitterGoogle+Facebook

The post Nenshou Fire: Recoil appeared first on 'net work.

IDG Contributor Network: Security talent management for the digitization era

Stiff competition for talent and a limited pool of security specialists make information security staffing a perennial challenge. Complicating this is the fact that security has not yet adapted to its changing role as organizations digitize. Now more than ever, information security leaders need to understand the new business environment and adapt how they hire, compete for and manage talent for the digital era.+ Also on Network World: High-demand cybersecurity skill sets +Digitization is transforming organizations’ products, channels and operations. While this change comes with the potential for higher profit margins through enhanced efficiency, it also brings an increase in the number and variety of advanced threats, board oversight and regulatory compliance issues.To read this article in full or to leave a comment, please click here

IDG Contributor Network: Security talent management for the digitization era

Stiff competition for talent and a limited pool of security specialists make information security staffing a perennial challenge. Complicating this is the fact that security has not yet adapted to its changing role as organizations digitize. Now more than ever, information security leaders need to understand the new business environment and adapt how they hire, compete for and manage talent for the digital era.+ Also on Network World: High-demand cybersecurity skill sets +Digitization is transforming organizations’ products, channels and operations. While this change comes with the potential for higher profit margins through enhanced efficiency, it also brings an increase in the number and variety of advanced threats, board oversight and regulatory compliance issues.To read this article in full or to leave a comment, please click here

28% off Western Digital 2TB My Passport Ultra Portable External Hard Drive – Deal Alert

If you're looking for a ton of portable storage at a rock bottom price, you may want to consider this deal currently available on Amazon. Rated 4.5 out of 5 stars from nearly 5,500 people (read reviews), this Western Digital external hard drive features fast USB 3.0 connectivity, is compatible with both PC and Mac, has optional 256-bit AES hardware encryption, automatic cloud backup, and comes with a 3-year warranty. List price is $119.99 but with the current 28% discount you can buy it now for $86.50 (See it on Amazon). To read this article in full or to leave a comment, please click here

1 … 2,665 2,666 2,667 2,668 2,669 … 3,840