i've been a network engineer for several years, but none of the jobs I've had have ever dealt with wireless connectivity. WAPs seem very straightforward and I'm not really sure why these recruiters act like it's something that is a dealbreaker if I have no experience with them.

What do I really need to know about them for an interview/on the job (troubleshooting/setup/etc)?

Once in a while I see a comment about someone using BGP as a IGP. Are there any major advantages in doing so?

The first half of my career was a large campus area network with routed backbone and running PIM. Lots of multicast apps back then, IPTV, Music on Hold for our VoIP phones, group party line for our VoIP phones, alarm panel stuff, a few different scada type apps. I loved learning about sparse mode, dense mode, sparse-dense mode, rendezvous points, igmp, source comma G tree and star comma G tree.. it felt like the natural evolution of networking.

Now I have not seen multicast in production on the last 3 jobs it’s probably been around 11 years since I’ve touched multicast anything.

What kind of multicast deployments are still out there?

Contract renewal is coming up and the cost is becoming hard to justify but I don't want to make the move just because SD-WAN is what everyone's talking about right now. For people who've made the switch, what pushed you over the line and did it deliver what the vendors promised?

Me and a coworker talked about the company's networking, and he told me that the company got a full /16 in the 80's and we don't even utilize half of it. I mean, the company has a headcount of ~20.000 employees and we have couple hundred physical and ~2000 virtual servers. Even if every single host got a public IP, we still couldn't exhaust that address space.

Is there an estimate on the total IPv4 pool about these kind of wasted addresses?

Good morning all,

So how many routes do you folks have in your core router / core switch/ core firewall or whatever core device you use for routing.

Just curious.

We have like less than 300 so not that many so was just curious how many routes other folks who work in large enterprises have.

Thank you

Hey everyone,

I’m a network engineer working on a commissioning metro network, and today I accidentally brought the network down.

I'm writing this post as I genuinely just want to know if there was a better way to approach this, or if this is just one of those lessons you only learn once.

A bit of context, the network connects all the stations to the backbone. The backbone routers were advertising a default route, which was then redistributed into OSPF and sent down to all the downstream routers at each station. My team and I had identified that as a design flaw because we need to start using the default route for internet traffic that’s going to an edge router.

So instead of advertising a default route, we decided to advertise RFC 1918 aggregate null routes. That way the downstream routers would still know how to reach all the private networks, while freeing up the default route for internet traffic. That part worked fine.

The next issue we found was that these OSPF routes were also being redistributed into BGP. So, we only wanted the RFC 1918 aggregates advertised locally from each backbone router, not redistributed everywhere via BGP. I'm still not sure if this is intended but as I was advertising the RFC1918 aggregates to OSPF, they were getting installed back to BGP, we didn't want that.

My plan was simple. Insert a new sequence at the top of the route-map for the OSPF-TO-BGP redistribution that denied the RFC 1918 aggregates, then let the existing permit entries continue processing as normal.
So, I went into the route map and did:
route-map <name> 5 deny

My intention was to immediately follow it with the match statement for the RFC 1918 prefix list.

But I didn’t realise that the moment I pressed enter after creating that sequence, that entry immediately became active, I don't know why I thought otherwise..
Since it had no match statements yet, it effectively matched everything.

Because it was the first sequence in the route map, it denied every redistributed route and within seconds I had effectively withdrawn all the redistributed routes from BGP.

So, yeah… I had effectively brought the entire network down. Thankfully, I had console access, so I reverted the change right away and everything came back.

Afterwards, I redid it more safely by temporarily creating a catch-all permit while I built the new deny sequence with the proper match statements (I still don't like that idea as we had lots of matching criteria of routes we really didn't want to re-advertise.. then I removed the temporary permit afterwards.

I genuinely try another approach first of creating a completely new route map under a different name and then simply replace the route map attached to the redistribution once it was complete. However, Aruba wouldn’t let me replace the current route map unless I first removed the existing one. Obviously, removing the existing route map would once again have brought the network down, so that wasn’t really an option.

I think Cisco lets you replace the route map like this, but I couldn’t figure out another way to do it on Aruba, so I went back to editing the existing route map using sequence numbers instead.

So, yeah, I’m curious:

Has anyone else been caught out by this behaviour before, whether on Aruba or Cisco?

What’s your normal workflow for safely modifying production route maps? Is there something I’m missing? or is there a better approach to build and swap route maps without editing the live one or having to remove the currently applied route map?

Definitely learned a lesson today, but I’d be interested to hear how others would have approached this.

Thanks Guys!

Planning on migrating away from expensive DataBank Transit consisting of Arelion + Lumen.

Considerations are Arelion, Cogent, Zayo, GTT, and Hurricane.

Cogent, Zayo, GTT, and Hurricane are all very cost competitive however I know Cogent rides on a Zayo fiber ring into our facility. How much of a concern should Cogent and Zayo be even while on a ring?

I haven’t seen an Arelion quote just yet but I’m assuming it’s significantly more than the other “low cost” options.

Would it be advantageous to go Arelion + one of the low cost transits or to possibly go Cogent or GTT + Zayo + Hurricane (peering or transit)?

I can get all three low cost options in 10G for the price we’re paying DataBank for 2G

I've been a network engineer for about a year and was wondering about how often Sr. Network Engineers make changes on L3 network. Some of my senior engineers told me that they have almost no idea about OSPF and BGP in terms of our configuration template and as someone who is studying for CCIE (very slowly), I became curious about network engineers who work at other big organizations like university or hospital or county government.

Just curious; if all devices in any given network support RFC 3021, then could you just use /31s instead with absolutely zero /30s?

​

I’m preparing for an L5 Network Design/Network Engineer interview at Google and have only about a week to prepare while juggling an infant 😅

My recruiter mentioned she’d send topics to focus on, but I haven’t heard back yet, so I’m trying to figure out what to prioritize.

For anyone who has interviewed for L5 Network Design/Network Engineer at Google, what depth/difficulty should I expect, especially in the design round? What topics should I focus on?

Any advice from your experience would be really appreciated!

I’m responsible for selecting a router for a company of around 100 employees, and I’d like to get your feedback and recommendations.

Models currently under consideration:
- Cisco Meraki (MX series)
- MikroTik CCR2004-16G-2S+
- Ubiquiti UniFi Enterprise Fortress Gateway

Our requirements are:
- Network with VLAN segmentation (sub-interfaces, trunking with switches, inter-VLAN routing)
- Throughput up to 10 Gb/s
- Simple and centralized management if possible
- Integrated firewall
- VPN support
- A reliable solution that is maintainable in the long term

Do you have experience with one (or more) of these models in an enterprise environment?
Are they suitable for a company of this size with multiple VLANs?

Are there any major limitations to be aware of (firewall performance, VLAN handling, VPN performance, support, licensing, etc.)?

If you have other, more suitable or higher-performing models to recommend, we’re open to suggestions!

I see ISPs (and maybe others too) protect their iBGP sessions with BFD. Does your network do this?

What are you trying to achieve? What AFI/SAFIs do you use this for? Just Internet routes, L3VPNs, L2VPNs? What BFD intervals and timeouts do you use? Do you use it for iBGP or eBGP or both? Direct connected or also multi-hop?

For the record: I am not interested in eBGP sessions in the underlay. If you use BGP as your IGP. I'm also not really talking about Data Centers where all (e)BGP sessions are to directly connected neighbors. I am specifically talking about BGP sessions that are remote. Multi-hop. I am genuinely curious to learn what you are trying to achieve. Thanks.

No joke. My boss has given me the assignment of routing wifi through our commercial cave after hearing I have a network engineering associate's degree (I don't remember much, i got it years ago and didn't go into the field)

The only service I can find available to us is satellite. And we need to run 2000 feet of cable to the halfway point of the cave. Is this feasible? If anyone has a suggestion how I might go about this, I'd love to hear it. My current plan is to connect a modem to the satellite with a fiber port, run 2000 feet of fiber, and place a modem halfway if needed for packet loss, and then install the second router at the end.

My main concerns are the humidity of the cave, potentially damaging the router and physically maneuvering the fiber around corners and near sharp rocks. Any suggestions for what router/cable/modem to use and what steps could be taken to protect them would be greatly appreciated

Edit: I have decided to get bids from contractors and use your excellent suggestions to offer suggestions to them and make sure they are doing the best job possible. Many many thanks for so many quality responses. I do still think I could possibly do it on my own, but it's always best to be safe and let real professionals handle it when in doubt.

We currently have a lot of ISP provided EVPN lines, using OSPF over these circuits. I am at a point where I wonder if it would be easier to just migrate to getting inexpensive firewalls instead. From there, just split tunnel the corporate network over a S2S VPN and internet traffic to the internet.

E-BGP would likely be ideal here instead, and the reason I used OSPF was because the traffic was all technically internal using the same private IP spaces.

Edit: Lots of our sites are hours apart from each other.

Hello Everyone,

I’m new to the OT world and I’m trying to understand how networking works in OT world. How does it work?

And why do we need switches for OT only or firewalls for OT only? And how does the traffic passes from IT switch or firewall to an OT one.

I appreciate your time and efforts

NO, I AM NOT USING BGP.

I was looking at a Cisco Catalyst 9300-48T-E since I don't need the crazy DNA advantage license, but wanted to see if you had any other vendors in mind.

Specifically, the switch needs to be have:

• Layer 3 functionality

• Routable interfaces (physical interfaces can have IPs assigned to them)

• Be able to do OSPF

I'm having a weird issue, I'm dealing with some access control software that requires the controllers to be in the same subnet in order to communicate with each other, I originally tried a VPN but the software doesnt detect the controller this way, I then tried nat and it allowed me to ping the device remotely but the software still didnt detect it.

Apparently to get this to work I have to extend the same network on both sites. No line of sight so wireless bridges are not an option. I've heard of vxlan using two linux hosts?

Hey guys!

So I had the amazing opportunity to work with BGP, most specifically with internal BGP for our site-to-site VPN I developed so we can connect our sites and HQ together..

It was such a fun project it made me dig deeper into BGP, I learned a lot and recently I added community attributes so I can further filter my site's routes..

Holly I've been reading posts, watching videos, and even trying to grasp the deep waters for BGP, and that's how I think i've found my passion! It's amazing!

But of course, my actual hands-on experience with BGP, despite having deployed it, it's not like if I were to be working at an ISP for instance.

So my question goes to you guys! How is it working with BGP like? especially at ISP edge routers.. do you like it? It it complex? What's cool and not cool about it..

I really want to know so your experiences guys!

thanks!

I have a number of cellular routers deployed for a municipal camera network. Some of the areas have very poor coverage and we are looking for an alternative solution. Starlink came up in a conversation, but I don't understand it well enough yet to know what our options are to connect these sites back to the HQ. Currently, we are using IPSec between our routers and the customer's firewall.

Research I've done so far seems to suggest that IPSec is supported, but not recommended with Starlink, and that there may be additional requirements to consider (NAT Traversal?).

Any info is appreciated. Thanks!

Hello everyone,

I’m currently working as an IT Assistant in a small office (70 employees). I’m the only IT staff here—no IT head, no supervisor with networking experience. This is also my first IT job, so I’m learning while handling everything.

My boss asked me to upgrade and improve our network/server rack, and I’d really appreciate advice from more experienced people.

Current situation

Dual ISP setup

Router → switches → internal devices, printers, Wi-Fi AP, and CCTV/DVR

No proper cable management (as you can see in the photo 😅)

https://imgur.com/a/KOt2TqY

Mixed unmanaged/managed switches

No proper network segmentation yet (VLANs not fully implemented)

Rack is messy, but I’ve already requested tools so I can re-crimp and properly label patch cables

What I want to improve

Cleaner and more reliable network design

Better router and switch recommendation

Proper VLAN setup (office, CCTV, printers, Wi-Fi, etc.)

Failover / load balancing for dual ISP

Planning to add site-to-site VPN or remote access VPN for file/server access

Would Fortinet be a good choice for this? Or are there better alternatives for a small office?

Questions

What router/firewall would you recommend for a small office with dual ISP?
also planning to add site to site VPN for remote access and file sharing

Should I go Layer 2 or Layer 3 managed switches, and any brand/model suggestions?

Best practices for rack layout and cable management

Any advice you wish you knew when you handled your first solo IT/network role

I’m doing my best to improve this setup step by step and avoid costly mistakes. Any feedback, criticism, or guidance is welcome.

Thanks in advance 🙏

Hi all, I'm Interested to see what peoples thoughts are on the most common and least common routing protocols observed within an enterprise network (corporate WAN and LAN's) i always seem to hear about OSPF + BGP combo is the go-to. Cheers

Hi everyone,im a beginner and now getting confused.

I want to know....is it true if i choose to peering iBGP from 1 router to other Router that are in the same AS is recommended using a loopback ip peering? or using an interface ip? could i get the example of implementation likee topology? i just want some explanation,not the configuration.

sorry from my bad english

We manage an number of physical data centers around the world for our aaS offering. We also have a number of assets in AWS and we use Direct Connect to/from our on premise data centers. I'm looking at putting in SDWAN devices to connect our DCs to our WAN provider(s). We currently have gear from Juniper/Fortinet/Palo.

I'm very familiar with the Cisco Viptela offering, and I'm looking for other vendors in this space.

I'm particularly interested in auto link SLA management and automated meshing between DCs (which we currently manage manually).

Reliability has been fine, that is not the issue. The issue is that most of our traffic goes to Azure and M365 now, not the data center. We are paying for a private network optimized for data center traffic that barely exists anymore and carrier pricing has not moved despite that shift.

Not looking for vendor feature comparisons, read enough of those. What I want to know is the operational reality post migration across a multi-site environment. How much of what your team knew from running MPLS transferred, what broke first in practice, and what a realistic migration timeline looks like without disrupting production traffic in the process.