For those of you implementing Syslog triggers and such the following list will be helpful in filtering and classifying Syslog entries.
0 – Emergency
1 – Alert
2 – Critical
3 – Error
4 – Warning
5 – Notice
6 – Informational
7 – Debug
Video: ISP Design Pain Points and redundancy
Don’t try this at home kids. Automated BGP Optimization
https://radar.qrator.net/blog/as10990-routing-optimization-tale
Conclusion? Do not try to optimize the routes with automated software – BGP is a distance-vector routing protocol that has proved, throughout the years, its ability to handle the traffic. Software, wanting to “optimize” the system involving thousands of members would never be smart enough to compute all the possible outcomes of such manipulation.
Thursday Funny
New Undersea Cable – Grace Hopper
…We’re excited to announce a new subsea cable—Grace Hopper—which will run between the United States, the United Kingdom and Spain, providing better resilience for the network that underpins Google’s consumer and enterprise products.
WPS: Cyber Security & Online Privacy
John Lovell interviews professional hacker on cyber security, privacy on the internet, cyber terrorism, penetration testing, information / data security, confidentiality, phishing, the dark / deep web, and hacking in Hollywood movies such as James Bond Skyfall, Hackers, Swordfish, the Net, Mr. Robot, and other movies.
Preseem and Switches in switch centric design
Anyone who follows me knows I am a big fan of switch centric designs. This usually involves a router on a stick paired with a high port count switch. Recently I had a client that installed a Preseem appliance in their network.
Equipment used in this setup
-Dell R710 with a 4 Port SFP+ card running Preseem
-Cisco 3064-X 48 Port switch
-Maxxwave Vengeance router with dual QSF+ card and 4 Port SFP+ card
A visio diagram of how this looks
We have two transport links coming into the switch on the left. These are dumped into VLANs 506 and 507. We then come out of the switch into the Preseem box via 2 SFP+ ports, one for each VLAN. In this case, we just used DAC cables In the future, we can turn these into trunk ports to pass more VLANS through.
The data then leaves the Preseem box over dual SFP fibers directly into the router’s SFP+ ports. If the Preseem appliance fails we have a secondary OSPF/IBGP path from the router’s 40 GIG QSFP down to the switch. This is a bypass in case the Preseem appliance hardware fails.
If you start flowing more than 10 Gigs through a single link you can upgrade to more SFP+ ports into your appliance and a 40 Gig QSFP+ card. You then link the appliance to the spare QSFP port on your router.
Patreon Posts
Thank you to all of you who have become Patreon members!!! I appreciate it I have started going back through all of my Patreon posts and tagging them with “patreon” so you can easily look at content you have access to. Sometimes this content is just a visio diagram or a photo. My goal is to give you enough content to keep you coming back.
Siklu Case study 80 GHZ Indianapolis Indiana
Some photos from a Siklu 80GHZ deployment in Downtown Indianapolis, Indiana. This was deployed by On-Ramp Indiana (https://www.ori.net). The problem being solved is moving video files around a network in order to get it to smart screens and projectors. This is a very urban area and wireless was pretty much the only option to get from building to building.
Siklu 80GHZ was on the shortlist due to the distances involved. Another consideration was the footprint of the equipment. The equipment had to be as low profile as possible.
Another needed aspect of this network was the ability to move traffic around at layer 2. Not all traffic is IP based in this type of network.
Equipment used
Ether Haul 1200FX
https://www.siklu.com/product/etherhaul-kilo-series/
Some technical Details
As you can see traffic is reasonably consistent in the 80-100 meg range. We needed a solution that did not slow down due to interference. A possible 10’s of thousands of visitors to this attraction in a weekend, reliability and performance were critical. When this was installed we did not know about COVID, but this is an attraction people can enjoy from their cars and social distancing. This use added to the visibility of this attraction, thus making the reliability even more crucial.
Articles about the finished product
https://www.wthr.com/article/news/local/monument-circle-get-new-light-show-time-holidays/531-ef1819ca-5f27-4886-9283-17e481c33f39
On-Ramp Indiana Contacts www.ori.net 317.774.2100
Wireless ISP Network IP Scheme
For those of you starting out in the WISP field here is a good overview of a scalable Ip scheme for your WISP network. There are some caveats to this, which we will discuss later. This does not address IPV6, I have done some articles on IPv6 in the past that addresses IPV6.
Some benefits of this scheme
1.Logically separates equipment into groups.
2.Cookie-Cutter design. Fast time to depoyment
3.Easy to train on for techs and office
4.Scriptable
This following scheme uses private IP space for infrastructure. This scheme does not address end-user addressing. More on this in a later guide.
For each tower I route a /16 out of the 10.0.0.0/8 IP space. For example my first tower is
10.1.0.0/16 . Your first thought is that is alot of IP space. Yes it. However, it is private IP space and you can use as much as you want. The second thought is you can only use this scheme 255 times. Yes this is true. How many WISPs are growing beyond 255 towers. Most of the wisps I know are in the 100 tower sweet spot. There are larger and smaller wisps.
So lets break this down. We are using tower 1 as an example.
Wired Infrastrudture
1-Not used due to default being VLAN 1 on most devices. Quarantine vlan
10.1.2.0/24
2- Power and UPSes
10.1.2.0/24
3- Switches and routers
10.1.3.0/24
5-9 reserved for future uses
Backhaul Management VLANS
10-19
10.1.10.0/24 – Backhaul 1
10.1.11.0/24 – BackHaul 2
etc.
Infrastructure Radio VLANS (tagged management)
20-29 – 2GHZ equipment
10.1.20.0/24 – First 2.4GHZ AP
10.1.21.0/24 – Send 2.4GHZ AP
10.1.22.0/24 – Third 2.4 GHZ AP Management
30-39 – 3GHZ Equipment
10.1.30.0/24 – First 3GHZ AP
40-49 – RESERVED
50-59 -5GHZ equipment
60-69 – 60GHZ equipment
70-79 – RESERVED
80-89 – 80 GHZ
90-99 – RESERVED possible IOT
Customer VLANS (untagged)
120-129 – 2GHZ equipment
10.1.120.0/24 – Customer CPE on first 2.4GHZ AP
etc.
130-139 – 3GHZ Equipment
140-149 – RESERVED
150-159 -5GHZ equipment
160-169 – 60GHZ equipment
170-179 – RESERVED
180-189 – 80 GHZ
Point to Point customers
200-299
So why so much IP space? It helps keep your routing table small.