Extreme Networks – RADIUS Netlogin Error about Missing VLAN

We had a bit of an oddity on an Extreme Networks SwitchEngine (XOS) switch running: 32.7.1.9patch1-26, devices connecting to a specific VLAN that should be authenticated by Netlogin (NAC) via radius were failing giving the error below. Checking the switch, the VLAN very much existed, so it was a mystery why it said it wasn’t. […]

More...

Enabling Multicast on Edge Network used for Multicast via Extreme Networks Fabric (Stretched VLAN)

If you have a VLAN which used as the source of multicast streams there are considerations on how it is used specifically when you are “stretching” that VLAN across the fabric, i.e. you have the VLAN and router(s) for that VLAN on a particular distribution switch pair, but then you have the VLAN stretched across […]

More...

Multicast – PIM, RP, BSR and MSDP for Multicast Across Routed Networks

Multicast is a networking method used to efficiently transmit data to multiple recipients simultaneously. Unlike unicast (one-to-one) and broadcast (one-to-all) communication, multicast is a one-to-many or many-to-many method where data is sent only to devices that are interested in receiving it, rather than to all devices on a network. In multicast, devices that want to […]

More...

Palo Alto Firewall – Command Line Example (Interface and Access Rules)

The Palo Alto Firewall GUI is really slick, but sometimes its handy to create using the CLI, perhaps if you have a large number of changes that need to be made at once. Within this example, we’ll create a zone, then an Interface (on an Aggregate Interface), give it an IP address, apply a management […]

More...

Multicast – IGMP Snooping and IGMP Querier – Sender and Reciever(s) in same VLAN/Layer 2 Segment

Multicast is a networking method used to efficiently transmit data to multiple recipients simultaneously. Unlike unicast (one-to-one) and broadcast (one-to-all) communication, multicast is a one-to-many or many-to-many method where data is sent only to devices that are interested in receiving it, rather than to all devices on a network. In multicast, devices that want to […]

More...

AWS Transit Gateway with VPN to On-Premise Palo Alto Firewall

The AWS Transit Gateway can be used to join the networking of many VPCs (in the same or different AWS Accounts) within the same region together to facilitate communication, it may also be used in conjunction with DX (Direct Connect) or Site-to-Site VPNs to provide connectivity to other Cloud Platforms but additionally to on-premise networks […]

More...

SLPP Guard – Simple Loop Prevention Protocol Configuration for Edge Ports (XOS/SwitchEngine)

On VOSS/FabricEngine SLPP should be configured on every VLAN at the point where it leaves the fabric and meets a non-fabric loop prevention strategy.  This will prevent any loops from impacting the fabric by closing down ports where a loop is detected. The below assumes you already have SLPP configured on your upstream switches. If […]

More...