Ansible Limit When Using Netbox as Inventory
I’m currently using Ansible to template a large and growing number of devices for an ISP that I’m working for. The last part of the process is to use Netbox as a source of truth to write the configs...
View ArticleInstalling AWX 19 on MicroK8s in AWS
AWX is now deployed on Kubernetes (since AWX release 18), which is great – the only thing is, what do you do if this is the only application you need Kubernetes for? It is a bit of a hassle setting up...
View ArticleNotes on Pushing Ansible-generated FortiOS Configs
I’m working on a project to push out configuration files to Fortigates using the ‘configuration restore’ capability in FortiOS. The configs are generated using Jinja2 templates and then restored to...
View ArticlePublic/private key SSH access to Fortigate
To save having to enter usernames and passwords for your devices, it is a lot more convenient to use public/private key authentication. When SSHing to the device, you simply specify the username and...
View ArticleCable testing on Juniper EX switches
Does anyone use the cable test feature on EX switches? Did you even know you could do this kind of thing? In case you didn’t, here is a bit of background and an example. The Time Domain Reflectometer...
View Articlefpc1 vlan-id(32768) to bd-id mapping doesn’t exist in itable
If you are getting this message appearing repeatedly on a Juniper switch (e.g. an EX4300), check you don’t have an IRB interface that is not attached to a VLAN. Alternatively, check your IRBs all have...
View ArticleRestoring data to Netbox Docker
Having just shot myself in the foot by deleting docker and losing a container I had been working on, here is the command to restore data to netbox-docker’s Postgres database: sudo docker exec -i...
View ArticleDHCP Relay Issues With Microsoft Surface Pro Docks and Junos
After deploying some new Juniper EX4600 core switches, my customer complained that he was experiencing about 45 seconds of delay in getting an IP address on a Surface Pro connected to a dock. The...
View ArticleMigration Strategy: Moving From MPLS/LDP to Segment Routing
MPLS core networks that use Label Distribution Protocol (LDP) are common in SP core networks and have served us well. So, the thought of pulling the guts out of the core is pretty daunting and invites...
View Article3 Challenges for Network Engineers Adopting Ansible
Ansible, ansible, ansible seems to be all we hear these days. There are lots of resources out there all trying to convince us this is the new way get stuff done. The reality is quite different –...
View ArticlePulling Configs from Cisco NSO using curl and json2yaml.py
We’re using Cisco NSO in our lab at the moment to provision L3VPNs across multi-vendor environments as part of a demo. Just noting down a few things here for future reference: You can use the curl...
View ArticleTesting notes: simulating link failure by filtering BFD packets
In some testing I am doing, I need to prove that BFD can be used with iBGP to tell the BGP protocol when there is an interruption. This will enable BGP to be brought down much faster than if regular...
View ArticleJuniper RADIUS-delivered switching filters
I’ve been experimenting with getting RADIUS to deploy switching filters to Juniper switches recently, as part of a reference architecture demo. The concept is called REACH2020 and combines network...
View ArticleSSH tunnelling from OSX
In certain situations, I need to connect to a remote network via a bastion host but only have SSH available to me. To get around installing some kind of VPN gateway, the easiest thing to do is to...
View ArticleFTP and Telnet removed from OSX High Sierra (10.13.1)
For those of us that often have to use console servers to connect over IP to serial ports of devices, the removal of telnet from High Sierra is a bit of a pain in the bum. Here are two things you can...
View ArticleStorm control on a QFX VCF
There don’t seem to be many operational commands in Junos to tell you what’s going on with regard to Storm Control. Here’s all I could find – let me know if you know of more: In the lab, I configured...
View ArticleCreating a mixed-mode Virtual Chassis Fabric (VCF)
In order to mix EX switches and QFX switches in the same VCF, you need to enable mixed-mode. This requires all members of the VCF to reboot unfortunately: {master:1} imtech@sw0-24c> request...
View ArticleUpdating to JDK 1.8 or 1.9 on Ubuntu
Trying to install OpenDaylight Nitrogen needs JDK 1.8 or later. Needless to say, I’ve not go the right version on my Ubuntu 16.04 server – it reports 1.7. Also needless to say, installing it isn’t a...
View ArticleShrubbery.net TACACS+ daemon and Junos
Axians Professional Services normally recommends using RADIUS authentication to our customers, but one of our customers uses TACACS. We did some type-approval testing of new Junos release for them...
View ArticleRestoring Space 15.2 data to 16.1
The upgrade from Space platform 15.2 to 16.1 is one of the worst procedures I’ve seen in quite a while. It is complicated because the underlying CentOS is being upgraded at the same time, so I guess...
View Article