sec_admin

I'm not at all trivializing the lab at all, I'm pretty sure its very difficult. I'm genuinely curious as to WHY it's difficult.

What warrants the hours and hours of lab? what trips most people?

Once you have many years of experience and have passed encore these days, shouldn't design or troubleshooting be straightforward?

My point being, once you've worked on enough complex networks, shouldn't most lab questions makes sense?

Is the difficulty in the lab being- the question asks for very very ultra specific niche keyword/solution that you wouldn't generally use/apply

or

just cisco being cisco and asking for convoluted solutions?

Can someone provide a kind of similar

For those who passed the CCNP encore, there are many many things in the ocg that is quite dry, some topics don't even appear in the exam blue print.

Is there any topic that you overprepared for, but never appeared in exam? If I have a limited time to prepare for exam, what topic should I just read over or skip?

From a networking perspective, you have a pretty intuitive architecture - putting it simply, you start with the core switch, branch of to WAN, DMZ with firewalls, LAN etc. Of course complexity increases as you move forward. You can look at network diagrams to make sense of stuff.

What is the equivalent for server architecture? For Windows you start with a DC/AD and then build from there while separating Prod/Dev? How about for Linux? How do you plan/design storage?

I'm trying to look at an overall picture of how servers are arranged and planned in an MNC enterprise sysadmin point of view. I tried looking at system designs but these are more involved about application architecture.

I've a idea/vodafone prepaid sim.Usually i used to visit india at least twice a year so was never worried about sim validity, since i would recharge for about Rs 400-500 every time i visit. but now its been more than 8 months since my last visit without using the sim and I'm getting angsty.

I don't use the sim outside at all, i just take it out and put it aside once I'm out of india.

What should i do to ensure that my sim remains active as its the main number for bank and other services.

During research i saw many mention Rs.20 top up, but don't see the option in app. Do i just recharge for rs.20 to my number?

Or Should i just do one of those rs 400 every few months ,

Daughter is around 1 year old. we are living abroad. I'm kind of confused on how to teach her things, should I teach in malayalam, English or both? People here speak English mostly.

For example, initially there is a picture book, and we taught her "aana" and then now tell her its elephant instead.

we travel home mostly once a year, and do video calls almost every day. I'd want her to be able to interact with her grandparents as well if she only knows english words, it will be difficult for my parents.

If I send her to preschool/day care, they will be speaking in english. At the same time, I would want her to understand malayalam too.

People with kids living abroad, how did you tac

Your internet isp connection in site A is up, but let's say there's some issue upstream and you can't reach google/microsoft for eg.

How do you keep track of such scenario? I've a load balancer that points to proxies in site a and site b. I want the proxy to monitor some internet websites or others so that it will switch to site b proxy.

Do you have such setup? What are you monitoring?

I'm connecting 2 Cisco Nexus (C93180YC-FX3) to a FortiGate. We're using 1G SFP (1000base-SX). I have 2 interfaces (aggregate/bundle) on the single FortiGate (also using 1G SFP) connecting to 2 nexus in VPC.

When configuring as trunk link, it went down. After fiddling around, found that after setting speed manually to 1000 and "no negotiate auto", the interface comes up.

On the FortiGate side, it's using default configurations, and when looked at speed it didn't have auto option in cli.

Is the reason for interface to be down because cisco doesn't see auto negotiation from other side, so we have to configure it manually, or because cisco is expecting a 10 SFP and we're using 1G instead

Is there a good resource to learn how a web proxy works in depth - for example, ssl deciphering, websockets, what all things a proxy look at, how to identify them etc?

More layer 7 stuff?

tired of working as network engineer. I don't think sysadmins are walking in bed of roses either, but I guess it's less nerve racking than being responsible for bringing down a whole network.

I can't help but see all this talk about cloud, k8s and stuff and be curious and not help but think networking is being left behind. server team seems to have a better feel of almost everything happening in an org(which can be good and bad) and techwise.

Thinking of taking up rhcsa, cloud and jump ship to an MNC where server teams are specialized.

I know grass is always greener on other side but would like to hear from people who have moved or tried doing that change.

New to checkpoint, got 2 checkpoint 6200 firewall I intend to put in cluster for HA. Verified IP/vlan/typos - all clean.

Strange thing is, I'm unable to ping mgmt IP of FW2. Even strange is, I can ssh and open gaia portal using said mgmt ip. From the firewall itself, I'm able to ping gateway and FW1

No device ( GW, FW1, outside) can ping this device. Getting request timed out. There is a firewall in between, I can see echo request, but no echo reply.

I compared configuration of both fw1 and fw2, no difference.

Any checkpoint gotchas I need to be aware off?

I look around at work and it's all about cloud, kubernetes, docker, container, API, vmware, openstack, CI/CD, pipelines, git.

I only have a vague understanding of these topics. Networking on the side, especially enterprise core side remain basically advertising routes from A to B with SVI, VRF, OSPF, BGP , SPT and WAN- and vendor shenanigans.

At this point I'm trying to enhance my network knowledge from CCNA to CCNP --- you can only read about ospf LSA types so much.

I'm someone who feel like they should have good overall understanding and has this nagging feeling I'm heading down the wrong path. But networking has been something I've been in for some time, I'm 35 years old.

The pla

hello people who work in ISP, when a provider says "remote fault alarm " what exactly do you mean? We have cases where our MAN links ( an EPL for e,g,) flap, sometimes they say no issues seen, sometimes they'll say remote fault observed and cleared on their own.

So..what is happening there?

For others, whenever you face a link flap and provider says no issues seen, is there something you can check further or do you just shrug and close the case?

I saw a technical support role and I like the idea of going deep down in a product line, learning technical chops, but at the same time, I can't help but wonder - wouldn't most cases you see related to "some bug" or need some "hot fix"

If you work in TAC or technical support for network vendors like cisco/fortinet/palo alto/juniper etc,

What percentage of your work is due to a bug and how much do you troubleshoot for like a design issue or deepdown on protocol?

Do they give you formal trainings or just give access to some study links and labs and throw you away into the fire?

Basically, do you enjoy your role or its just find bugs, rinse and repeat?

And for those who moved away from

Hello admins who have worked on both on-premise DC and cloud side, or are doing both, what's your day-to-day look like? How much control do you have over the cloud infra? What skillset do you need?

For on-prem sometime we have to manage device refresh, quotations, license, cost etc, what's the equivalent in cloud space?

What's your personal take and what do you think the future holds?

Do you think its better to

1. remain lets say in enterprise and focus on stuff like ccie or enterprise and have some cloud knowledge,

OR

forget cisco, embrace cloud fully, say bye-bye to hardware, cables , SFP, NAC and vlan?

half-knowledge, difficulty retaining topics, complex and messy environment, busy seniors. Sometime given tasks above my knowledge level and during change windows I'm stressed the hell out. Starts studying something, some other task comes up, drops studying, realizes knowledge not good enough, try to go back to basic, seems I already know this, looses interest.

Had a kid recently so now studying is almost impossible. have some noc experience before, been here for 2 years, can't quit due to the pay and commitments. Feel like I don't measure upto being an engineer and is dragging the team down.

any advice?