NSX-T 2.4 is a major software upgrade with a multitude of new features, listed here: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4.0/rn/VMware-NSX-T-Data-Center-240-Release-Notes.html The documentation for this release is not very mature, so I've compiled some gotchas I found while installing NSX-T 2.4 below: …

Read More

Since I'm building a hybrid systems/networking lab, one of the key features I'll need is a serial console server to administer the lab switches. There are a few options here: Find an old Cisco Router and some async octal cables (Rare, takes up rack space) Purchase a serial console server like MRV, Perle, …

Read More

I cheated/pivoted a little bit - decided to simulate a bit more closely what I'd be using at work. I bootstrapped a CentOS VM and followed the instructions in: https://github.com/PaloAltoNetworks/minemeld-ansible 1sudo yum install -y wget git gcc python-devel libffi-devel openssl-devel zlib-dev sqlite-devel bzip2-devel …

Read More

Palo Alto Networks has provided a tool for public use - Minemeld - that will collate threat intelligence feeds and other indicators for a more dynamic security policy enforcement strategy with their firewalls: https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld I have a slightly …

Read More

I've removed NSX-V 6.4.4, and am about to start some more datacenter/route-switch projects - this is the lab network diagram for reference: And, the meatspace version - the cheetos are there in case of an emergency:

Read More

Captive portals suck. We need them for any public access network, but with the widespread adoption of HTTPS, it is really difficult for users to find a hint as to where to go to get their access. How captive portals work In most real-world applications, the client station is placed in a network where all of the …

Read More

Did you know that before you authenticate to your wireless network, it's using the same security mechanisms as open Wi-Fi? With TLS, it's fairly well known how (most) cipher suites implement the Diffie-Hellman exchange to provide reasonably effective forward secrecy. ECC Diffie-Hellman has largely superseded RSA, but …

Read More

Aruba has released for general availability ArubaOS 8.4, which includes WPA3-PSK: https://www.arubanetworks.com/techdocs/ArubaOS/8.4.x.x/Default.htm Understandably, I was pretty excited to try it out and promptly upgraded my instant cluster, contained within the "safe zone" of my home lab. It was running …

Read More

Homelab design dideas - focus on how to build a home lab, then challenges

Read More

engyak.co Blog Archive

Read More