ACE Management

Was knocking my head against a brick wall trying to configure an ACE for management for a couple of days. Turns out, it does not permit ICMP to it by default.

This is a good place to start:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/admin/guide/access.html#wp1054979

So you need to configure a class map classifying ICMP traffic from specific sources as being interesting, a policy map referencing the class map, an action for matching traffic and then apply that using the “service-policy” command to the interface you want to permit traffic to.

Everything is well as long as it’s only management traffic you want to permit to this address.


Thinking About SDN Packet Processing: You’re the One Talking to a Fish

Barbie films (yes, I really am talking about Barbie in a network blog post) are a big hit with my kids, and surprisingly with me too. I’ll possibly regret telling the world that, but anyway, there’s an exchange in one film* that always make me laugh. It goes like this. Human (Australian accent): “You’re bonkers!” […]

Author information

Steven Iveson

Steven Iveson

Steven Iveson, the last of four children of the seventies, was born in London and has never been too far from a shooting, bombing or riot. He's now grateful to live in a small town in East Yorkshire in the north east of England with his wife Sam and their four children.

He's worked in the IT industry for over 15 years in a variety of roles, predominantly in data centre environments. Working with switches and routers pretty much from the start he now also has a thirst for application delivery, SDN, virtualisation and related products and technologies. He's published a number of F5 Networks related books and is a regular contributor at DevCentral.

TwitterLinkedIn

The post Thinking About SDN Packet Processing: You’re the One Talking to a Fish appeared first on Packet Pushers Podcast and was written Continue reading

Don’t use 192.168.1.0/24 on work LAN

How does the internet work - We know what is networking

This story will be a turning point for my blog future starting with a change in writing methods and changing those methods to a more causal fashion. INTRO For now all my text here where somehow depersonalized and tech oriented in a way that it was all written like in some book. User manual to me concise. Maybe this […]

Don’t use 192.168.1.0/24 on work LAN

The Attributes of a Great CLI

So, there I was, innocently browsing the OpenDaylight wiki after listening to Show 148 – Talking With OpenDaylight Leadership when I came across the OpenDaylight Command Line Interface page. I’ve not gone through the entire 118 pages (if I were to print it) worth of content, but I’ve scanned through a fair chunk and read the CLI Concepts section in […]

Author information

Steven Iveson

Steven Iveson

Steven Iveson, the last of four children of the seventies, was born in London and has never been too far from a shooting, bombing or riot. He's now grateful to live in a small town in East Yorkshire in the north east of England with his wife Sam and their four children.

He's worked in the IT industry for over 15 years in a variety of roles, predominantly in data centre environments. Working with switches and routers pretty much from the start he now also has a thirst for application delivery, SDN, virtualisation and related products and technologies. He's published a number of F5 Networks related books and is a regular contributor at DevCentral.

TwitterLinkedIn

The post The Attributes of a Great CLI appeared first on Packet Pushers Podcast and was written by Steven Iveson.

Networking at Cisco Live for Your Technical Career

Cisco Live is a wonderful opportunity to meet people and have in-depth technical discussions. For me, I find this event to be a great venue to finally see those that I have had numerous online interactions with. It serves as a way to elevate these relationships to a new level. In John’s article entitled “Build […]

Author information

Paul Stewart

Paul is a Network and Security Engineer, Trainer and Blogger who enjoys understanding how things really work. With nearly 15 years of experience in the technology industry, Paul has helped many organizations build, maintain and secure their networks and systems. Paul also writes technical content at PacketU.

The post Networking at Cisco Live for Your Technical Career appeared first on Packet Pushers Podcast and was written by Paul Stewart.

Fun With Unmanaged Switches + Port Security

I’ve just passed a year of my job working at a smallish non-profit, and one part that I really am enjoying is passing on knowledge to the front-line staff. This week, there was an interesting case, and I had to explain to my colleagues what was happening and why. So, I did a little demo, and […]

Author information

Matthew Mengel

Matthew was a Senior Network Engineer for a regional educational institution in Australia for over 15 years, working with Cisco equipment across many different product areas. However, in April 2011 he resigned, took seven months of long service leave to de-stress and re-boot before becoming a network engineer for a medium sized non-profit organisation. At the end of 2013, he left full-time networking behind after winning a scholarship to study for a PhD in astrophysics. He is on twitter infrequently as @mengelm.

The post Fun With Unmanaged Switches + Port Security appeared first on Packet Pushers Podcast and was written by Matthew Mengel.

Straight talk about the enterprise data center network.


Building a mission critical system requires the careful selection of constituent technologies and solutions based on their ability to support the goals of the overall system.   We do this regardless of whether we subscribe to one approach or another of building such a system.

It is well known that the network technologies commonly used today to build a data center network have not adequately met the needs of applications and operators.  However, what is being drowned out in the media storm around "SDN" is that many of the current day challenges in the data center network can be addressed within an existing and familiar toolkit.  The vision of SDN should be beyond where today’s data center networks could have been yesterday.

In this "treatise" I highlight what I believe has been lacking in todays data center core network toolkit as well as address certain misconceptions.  I'll begin by listing key aspects of a robust network, followed by perspectives on each.  

A robust network should be evolved in all of the following aspects:
  1. Modularity - freedom to choose component solutions based on factors, such as bandwidth, latency, ports, cost, serviceability, etc.,  This generally requires the network to Continue reading

Don’t Hate the Player, Hate the Tools

The other day I came across an article, “Industry execs: Network admins an endangered species,” and I have to say, the headline did its job. I had to read more.

Executives from HP and Juniper, in particular, contend that network virtualization, and specifically Software-Defined Networking (SDN), will bring new levels of automation to networks, which in turn will lower operational costs because network administrators will no longer be needed. Specifically, their argument is that administrative or “people” expense is much higher than equipment costs, so automating will eliminate significant expense.

That’s one way to look at it I suppose. However, I would suggest that automation presents new opportunities for the networking team.

It is true that achieving significant OPEX savings is a key part of our discussion with customers when we talk about Embrane’s network services automation solutions that are being implemented today in enterprise data centers. However, we don’t talk about it in the context of, “how many heads can I cut?” Instead,  our conversations center around how our customers can best use the people they have, and what tools are needed to enable the right level of talent to perform the right tasks.

The reason we’re having Continue reading

You’ve Changed – SDN’s Casualties

I’ve a few things to thank Ivan for this last week. First off, this post led me to some great career-related articles and really got me thinking on the subject. Also, should I ever feel the need, I can now don my smarty pants, slip on my clever clogs and impress those around me by somehow […]

Author information

Steven Iveson

Steven Iveson

Steven Iveson, the last of four children of the seventies, was born in London and has never been too far from a shooting, bombing or riot. He's now grateful to live in a small town in East Yorkshire in the north east of England with his wife Sam and their four children.

He's worked in the IT industry for over 15 years in a variety of roles, predominantly in data centre environments. Working with switches and routers pretty much from the start he now also has a thirst for application delivery, SDN, virtualisation and related products and technologies. He's published a number of F5 Networks related books and is a regular contributor at DevCentral.

TwitterLinkedIn

The post You’ve Changed – SDN’s Casualties appeared first on Packet Pushers Podcast and was written by Steven Iveson.

Healthy Paranoia Show 13: To CISSP, Or Not To CISSP

Welcome to another lofty episode of Healthy Paranoia where we take on the profound problem of security certifications, specifically the Certified Information Systems Security Professional (CISSP). Joining Mrs. Y and Greg Ferro is an illustrious cast of infosec luminaries, including; well-known security analyst Wendy Nather, Novainfosec.com founder Grecs, IPv6 fanatic Joe Klein, and the enigmatic […]

Author information

Mrs. Y

Snarkitecht at Island of Misfit Toys

Mrs. Y is a recovering Unix engineer working in network security. Also the host of Healthy Paranoia and official nerd hunter. She likes long walks in hubsites, traveling to security conferences and spending time in the Bat Cave. Sincerely believes that every problem can be solved with a "for" loop. When not blogging or podcasting, can be found using up her 15 minutes in the Twittersphere or Google+ as @MrsYisWhy.
TwitterLinkedIn

The post Healthy Paranoia Show 13: To CISSP, Or Not To CISSP appeared first on Packet Pushers Podcast and was written by Mrs. Y.

Packet Pushers Show 149 – Discussion of Real World Problems with Entry Techs

When I refreshed my pod catcher today, I found that Packet Pushers had just released an episode that deals with career issues. This particular episode is a discussion between Greg Ferro and two less experienced technicians. Of these two gentleman, one has two years of experience and the other has only about one year of […]

Author information

Paul Stewart

Paul is a Network and Security Engineer, Trainer and Blogger who enjoys understanding how things really work. With nearly 15 years of experience in the technology industry, Paul has helped many organizations build, maintain and secure their networks and systems. Paul also writes technical content at PacketU.

The post Packet Pushers Show 149 – Discussion of Real World Problems with Entry Techs appeared first on Packet Pushers Podcast and was written by Paul Stewart.

The Software Defined Datacenter Symposium 2013 – Tech Field Day

About a year and a half ago, arguably well before the biggest of all the SDN hype that we’ve come to know and love, Stephen Foskett and company organized a fantastic OpenFlow Symposium aimed at getting deep into the state of the protocol at that time and what was being done with it at some of the leading tech companies like Google, Yahoo, Cisco, Brocade, and others. For those keeping track, Dave Meyer was on the panel at the time representing Cisco but is now CTO and Chief Scientist with Brocade and getting to do some really cool stuff with OpenDaylight.

When The World Runs As Software

I have heard so many sweeping statements in the past few weeks like “network engineers’ jobs are in danger” or “will my CCIE have any value when networking is run in the hypervisor”? Clearly the social media community is preaching “software or bust” these days, clearly leaving those that are not used to this kind of talk, or have been doing infrastructure the same way for years, quite alienated. I want to make one thing extremely clear - It’s okay to be an infrastructure person.

The Software Defined Datacenter Symposium 2013 – Tech Field Day

About a year and a half ago, arguably well before the biggest of all the SDN hype that we’ve come to know and love, Stephen Foskett and company organized a fantastic OpenFlow Symposium aimed at getting deep into the state of the protocol at that time and what was being done with it at some of the leading tech companies like Google, Yahoo, Cisco, Brocade, and others. For those keeping track, Dave Meyer was on the panel at the time representing Cisco but is now CTO and Chief Scientist with Brocade and getting to do some really cool stuff with OpenDaylight.

When The World Runs As Software

I have heard so many sweeping statements in the past few weeks like “network engineers’ jobs are in danger” or “will my CCIE have any value when networking is run in the hypervisor”? Clearly the social media community is preaching “software or bust” these days, clearly leaving those that are not used to this kind of talk, or have been doing infrastructure the same way for years, quite alienated. I want to make one thing extremely clear - It’s okay to be an infrastructure person.

The Software Defined Datacenter Symposium 2013 – Tech Field Day

About a year and a half ago, arguably well before the biggest of all the SDN hype that we’ve come to know and love, Stephen Foskett and company organized a fantastic OpenFlow Symposium aimed at getting deep into the state of the protocol at that time and what was being done with it at some of the leading tech companies like Google, Yahoo, Cisco, Brocade, and others. For those keeping track, Dave Meyer was on the panel at the time representing Cisco but is now CTO and Chief Scientist with Brocade and getting to do some really cool stuff with OpenDaylight.

Show 149 – Questions on the Sweet Spot for the Network Engineer Career

A common discussion in the Packet Pushers Forums and on the #packetpushers IRC channel is questions about career development, focus and doing a good job. These are always good discussions so Greg invited Giulio Chiappini - @its_gcand Jon Garrison – @jpwgarrison to bring their questions & Greg’s does his best to give a perspective, opinions and ideas on worklife as a […]

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

TwitterFacebookGoogle+LinkedIn

The post Show 149 – Questions on the Sweet Spot for the Network Engineer Career appeared first on Packet Pushers Podcast and was written by Greg Ferro.

MAC address tracking with NMS

Let’s assume that I have a port open in my Cisco switch for guest users and I would like to keep track of the new mac-addresses that are added or existing mac-addresses that are removed from that port. I have a NMS (Network Management System), capable of receiving SNMP, traps that will send me an […]

Let’s 6rd!

6rd mechanism belongs to the same family as automatic 6to4, in which IPv6 traffic is encapsulated inside IPv4. The key difference is that with 6rd, Service Providers use their own 6rd prefix and control the transition of their access-aggregation IPv4-only part of their networks to native IPv6. In the same time, SPs transparently provide IPv6 availability service […]
1 … 3,793 3,794 3,795 3,796 3,797 … 3,841