I need to do (sometimes) wifi-surveys. Can you give me a hint on cheap solutions to do this?
Currently, I am using the following way:
- Placing some APs based on my former projects.
- Walking around with a notebook with "Ekahau Heatmapper" and inSSIDER to check the placement
I am trying to monitor the spanning-tree status of my arista switches via SNMP. With other brands, that was quite easy:
184.108.40.206.220.127.116.11.5.0 --> Current root bridge
18.104.22.168.22.214.171.124.7.0 --> Port to root bridge
126.96.36.199.188.8.131.52.2.0 --> Priority
184.108.40.206.220.127.116.11.3.0 --> Last Change...
I am using Arista 7050s in MLAG-config. On my firewall, there is one LACP-bond configured with one link to each of the two Aristas.
Now, I need to setup a monitor-port/port-mirror with an IDS-system attached to it.
Is there any possibility to mirror a MLAG?
I did not find anything about...
I need to mirror the traffic of a device, that is connected to two Arista 7050QX which are building an "MLAG-Cluster".
Do you know, if this is possible?
How can this be done?
- Mirror the Ethernet-Interface on each switch?
- Mirror with one port?
Thank you for your help!!
I decided to use different kinds of disks in Raid1/10 systems, as I have just hit a firmware-bug, where all my drives failed (and HPE has another one, today).
My "standard-disk" is currently the Intel D3-S4510 series.
Can you recommend me any other disk, that offers comparable performance...
I did an upgrade of two linux-systems. Since the update, I have exactly the same problem on both systems:
The first port of the cards shows:
The systems to not have a lot of load.
As its 'eth3' that is affected in both systems and...
I am just a bit confused on how to configure STP on a port facing to my ISP.
My fear is, that the ISP could send BPDUs and so, he could change my STP-topology.
Disable STP on that port
--> In that case: What happens, if BPDUs are received? Will they be dropped or forwarded in...
For hours now, I am trying to really understand how to configure:
- a central Linux DHCPd-server
- satellite DHCP-relays
...but I still did not reach my goal...
The main problem is:
- How does DHCPd "assign" the right subnet-zone to the relay-agent?
If the DHCPd-server owns an interface...
I need to setup a server as veeam-backup-storage. It will have 38 10TB drives, but I am not sure about the layout, as I did not use a ZFS system without anything else than striped mirrors.
What would you recommend?
It would be good to have a sequential read-performance of >4-5 Gbit/s
What are you using to backup your VMWare infrastructure?
Currently, I am veering between Veeam and Nakivo.
Veeam is great as Enterprise or Enterprise Plus, but WAY too expensive for me, so I have to compare Veeam Standard with Nakivo Enterprise (currently 6 hosts with 1 socket each)...
I want to use a client firewall on my network with active directory.
The Windows firewall is working, but too limited. It does not offer "first rule matching", so out is very hard to configure simething like:
Incoming connections denied, but not from network 10.10.10.0/24 except...
I am using a ZFS-system without deduplication but with LZ4-compression.
The system is running fine, but there is one VERY strange thing:
The size of my volume WITH snapshots is:
NAME USED AVAIL REFER MOUNTPOINT
zpool1/volume 8.07T 138T 1.33T /zpool1/volume...
As 99% of the German technicians, I am only using shielded copper-cables - everywhere in the network-area.
Now, I see, most international installations are using unshielded cables. FS.com is primary selling UTP-cables, etc.
How do you handle this for shord cables inside a rack?
I am using squid 3.5 with ssl_bump and icap to scan https traffic.
My main problem are untrusted certificates.
At the moment, squid does two things:
- If I open https-sites with trusted certificates, ssl_bump intercepts the connections with a dynamically generated certificate, signed with...
I need a new firewall that can do REAL 10 GbE firewalling between internal networks on single-streams. Instead of buying a hardware-firewall, I am thinking about a virtual one...
Sophos and Fortinet are offering quite cheap virtual licenses. Fortinet demands SR-IOV, Sophos doesn't.
I read some different things and I am not sure about the best way to setup iSCSI targets for VMWare:
ZFS-storage is serving zvols as LUNs but: How many LUNs per Target?
- 1 LUN per target?
- many LUNs and only one target?
Its one big storage, but I read multiple things about not to put...
I'm looking for a good firewall with extended features to handle large sets of rules:
- Objects for Systems, FQDNs, networks, etc
- Object in object for groups
- Possibility to have multiple rule groups or possibility to jump between policy sets
In the past, I was using fwbuilder, but...
I need some new switches - exclusively for iSCSI-traffic.
Arista seems to support cut-through, but I am not aware of how important this is:
- Do you think, I have any better iSCSI performance in cut-through-mode because of its lower latency?
- Cut-through seems to be only available, if...