Networkers 2009

Networkers 2009 is all over now, and things are getting back to normal.  So what did I take away from the conference?

Networking

I mean the other sort of networking: the human network.  It was good to finally meet some of my fellow bloggers: stretch and Ethereal Mind, for example. It was also good to meet marikakis again, a colleague in the NetPro discussion group.

Talking of this sort of networking: “Network Management” can mean different things to different people.  A colleague once booked into a “Network Management” seminar, then found out that the seminar was about how to manage a company by leveraging person-to-person “networks”.

802.1X Techtorial

I spent a whole day looking at 802.1X.  Actually a significant part of that time was spent looking at Cisco’s ACS (Access Control System).  The two or three days follow gave me a chance to reflect on the tool, and chat to the people on the security booth.  The more I reflected, the more I was convinced I need to do an 802.1X project.  I also bought a book about security, and I might even consider going down the security track when my CCIE comes up for renewal.

IOS Instrumentation

Two of my sessions dealt with the interesting and fun recesses of IOS.  The BoF session was really an opportunity for Cisco to brainstorm about these features.  There is a ton of stuff in IOS that is very rarely used: stuff like the EEM (Embedded Event Manager) TCL scripting.  There is a community dedicated to these features at ciscobeyond. One of the conclusions we came to was that Cisco has not made a very good job of publicizing these features.

The other session relating to this was “13 Smart Ways to Configure Your Cisco IOS Network Elements”.  This was a really fun session that, “like all bad ideas, was formulated over a beer”.  It was a bet, based around “there must be at least a dozen ways to configure a router.”   EEM is only one of them, and there are well more than the 13 the speaker listed.  I can’t wait to get back to the lab to try some of them out.

VSS and layer-2 architectures

I went to several sessions about VSS, both in campus architectures and the data centre.  I detected an interesting change of emphasis over last year’s offering.  Last year they were still pushing pure layer-3 architectures.  At the same time I was struggling with how to split a server cluster over two sites.  Over course, this is not easy to do with a layer-3 architecture; you need at least one layer-2 interconnect to carry the heartbeat.

This year, they seem to have woken up to the need for a layer-2 interconnect between the data centres.  They offer VSS as a way to provide redundancy for that interconnect.  I still stubbornly use Rapid Spanning Tree for various reasons connected with my architecture, which makes me feel a distinct minority.  I suppose you can get away with it provided there are not too many hops between the data centres.

Advanced BGP

I always try an attend a session by Russ White if he is there.  His style is eclectic, to say the least, with about 50% of the time spent on anecdote and sidelines.  That’s what makes the presentation memorable and entertaining.  Must be confusing for anyone whose native language is not English tho`!  Good guy, and what a huge knowledge base!

Other stuff

Just a few more observations:

1. The “World of Solutions” was tiny compared with previous years, so full marks to those who did attend.  Companies must really be feeling the pinch. I was impressed with SolarWinds for taking the time to show me their Orion network management centre.  No marks for Computer Associates, who I wanted to grill about my problems with their Spectrum product, but who did not attend this year.
2. I was impressed with the Nexus 1000v virtual switch.  This is an add-on to VMware and replaces the ESX virtual switch.  What it does is to make one huge virtual switch across your VMware domain, which means you can apply policies to invidual virtual machines: policies that move with the machine whenever it goes vmotion.
3. I’m getting too old for the Cisco party.  It was a bit entertaining, but a lot brash and noisy.  The best Networkers party was the one in Monte Carlo in 1995, or the one in Vienna in 1999 (?), with a group that covered a range of musical tastes, not just hip hop, punk, and rap.
4. The keynote address by Prof. Brian Cox was cool, but not very much to do with networking.  He could have tied in the theme of collaboration a bit more explicitly.

Now where was I?

Well, it’s about 6 months since I last posted anything on my blog, and it’s about time I re-activated it.  I’ve not been completely idle over the six months, but I have been doing things that don’t really relate to CCIE: scouts (Telstar troop), amateur radio (LX2KD / G4AZO), music (guitar), swimming, etc.  Not even my computer/network related activities have been directly CCIE related.

I got an e-mail from Wael Osama the other day with a pointer to a blog called “Networkers Online”.  This confused me at first because it has the same name as the Cisco conference.  But in fact this is a very interesting and competent coöperative blog, written by several engineers.  See my blogroll for the link.

BTW, talking of Networkers, I shall be going to the Cisco Networkers conference in Barcelona on the last week in January.  I have booked in for the 802.1X techtorial, which should be interesting as it is a subject I do not get to use on a daily basis yet.  Are any of my readers going?

So, we have a New Year, and a resolution to blog a bit more often.  A very Happy New Year to all my readers.

Who works for who?

It’s getting like a game of musical chairs.  First we had the announcement a couple of weeks ago that Scott Morris was moving to InternetworkExpert.  Scott had previously been the mainstay of IPexpert.

Now we have an announcement that Narbik has joined up with IPexpert:

IPexpert and Narbik Kocharians Join Forces

 It is with great excitement that we reunite with Narbik Kocharians to offer the most incredible CCIE training value available anywhere! Narbik is a well-recognized triple-CCIE with an outstanding name in the CCIE training space, known for his unique style and magnetic personality. 

Read the full story here.

There seems to be a bit of a ratings war going on between the big three: IPexpert, InternetworkExpert, and NetMasterClass.  I am gratified to see that I am on the “success stories” list of all three, having used materials from all three.  I would always recommend that any candidate should use materials from at least two vendors, otherwise you can get too used to the way a particular vendor phrases his questions.  (P.S. Sorry, I forgot CCBOOTCAMP, which should also be considered one of the “big four”.  I forgot them just because I have not used their materials yet.)

Gripes about my HP Photosmart 3210

This has nothing to do with CCIE.  I’m just using my blog to gripe about an unsatisfactory piece of software.

I have one of those HP All-in-one printer-scanners, the HP PS 3210.  Overall, it works fairly OK, but I do have a number of gripes about it, especially when used on the home network.  I would be very interested to know if these problems are still present in the more recent all-in-one models.

1. Multi-user scenarios

We have Windows XP on the family computer, and an account for each member of the family.  This doesn’t interact too well with the print driver, especially if you try printing double-sided.  The driver has a feature for printing double-sided: basically it prints the odd numbered pages first, then you turn them over manually, then it prints the even numbered pages.  (Or is it first the evens, then the odds .. ?)

Anyway, you get a pop-up telling you when to turn the pages over, and it doesn’t print the other side until you click “Continue”.  Trouble is, the pop-up comes up in the context of the first person to log in, which is not necessarily the person who asked for the print job.  (Some members of the family have the bad habit of leaving their desktops logged in.)

I tried getting support from HP on this, but they said it was too difficult to fix so they were not going to do anything about it.  Great!  Lots of wasted paper.

2. Must be always powered on

If you start the PC with the printer switched off, then you are in trouble.  The trouble occurs not when you start the PC, but when you try and shut it down.  It comes up with lots of “Program not responding” pop-ups, and does not close down until you kill the HP software by hand.  Is it unreasonable to expect them to have thought of that scenario?

3. Cannot update software any more

This is a knock-on effect from my attempts to solve the double-sided issue.  When I contacted HP support, of course, I got the usual “Are you running the latest version of the driver?”  So I downloaded and installed the very latest version I could find on the web site: 7.0.128.000.  Since then, the automatic software update does not work any more.  It seems to download the files OK, counting the bytes, but then says “Download failed”.   There are several “critical” updates I have not been able to install.

4. Default scan profile not applied to multi-page TIF documents

Being European, I have a default scan profile corresponding to A4 paper.  Definition: 1/16 m² with an aspect ratio equal to the golden ratio, ((sqrt(5)-1)/2).  When scanning a single page document, this works fine.  When scanning a multi-page document, it works fine for the first page.  But for subsequent pages, I must re-apply the profile manually to each page.  That slows me down.  (P.S. Strangely, this happens only if you enable the preview.  If you don’t preview, the profile is applied to all the pages.)

5. B/W threshold is different if previewed.

When scanning in black-and-white, you can set the B/W threshold to determine how light or dark you want the image.  The range goes from 1 (very light) to 255 (completely black).

If I preview the scan, I need a B/W of about 120 for a reasonable copy.  If I don’t do a preview, a setting of 120 gives a very light washed-out image.  Unfortunately, the only way I know to edit the profile is do do a preview, which doesn’t make the adjustment of the non-preview setting very easy.  After a lot of experimentation, I found that a B/W threshold of about 164 gave the correct result in non-preview.

Why couldn’t they make the settings behave the same in preview and non-preview modes?

6. Scanner goes into non-responsive mode.

There seems to be no rhyme nor reason to this.  Sometimes the scan software goes to sleep for up to two minutes just after it has populated the preview window, but before I can click “Accept”.  Sometimes, it gives me back control within two or three seconds.  I have no idea why the difference.  During this time, TaskManager tells me that the CPU is 99% occupied, running the process hpscnvw.exe.

Further Comments

Just in case someone comes across this blog and has the same problems, here are some more things I found out:

Issues 5 and 6 are actually related.  I found out that the “going to sleep” depended on the page being scanned.  I was scanning some old documents for the archives.  These documents were on slips of paper of format 1/3 A4: about 8″ by 4″.  These particular documents had some areas with a mid-grey background, and that was being converted to b/w dot-screen for the purposes of the preview.  That is what was taking the time.

If I ask it to scan without a preview, the whole image comes out a lot lighter, and in fact the mid-grey background gets lost.  It can therefore present the scanned slip in about 15 seconds instead of 2 minutes.  I think I can live with that – at least the printed parts are still legible.

Ha-Ha! Gotcha!

Well, they say it is good to be able to laugh at yourself …

So, I took this nice new 2960G-24TC, and I placed it front-down on the floor so I could get at the back panel easily, and I plugged in my console cable, and my power cable, and … absolutely dead!

So, I pick it up to work out what is going on, and it suddenly comes up with:

Base ethernet MAC Address: <omitted>
Xmodem file system is available.
The password-recovery mechanism is enabled.

The system has been interrupted prior to initializing the
flash filesystem.  The following commands will initialize
the flash filesystem, and finish loading the operating
system software:
    flash_init
    load_helper
    boot

switch:

So, I unplug the power cable, and plug it back in again, and it comes up with:

Base ethernet MAC Address: <omitted>
Xmodem file system is available.
The password-recovery mechanism is enabled.
Initializing Flash...

So I put it back down on the floor …. and nothing more happens … until I pick it up again! Etc.

This went on for a good five or ten minutes.  What is going on?  I suppose it is obvious to anyone that has already fallen into this trap!

 

“Still to do” list

Someone asked me recently what I was going to do now I have my digits … would I go for a second one?  Well, not just yet.  I may have got my digits, but there are still too many things in R&S that take me by surprise.  I have found out that you can be a CCIE and still not know everything yet. :-). So expect about a year of consolidation and blogging before I move to pastures new.

Knowing what
Thou knowest not
Is in a sense
Omniscience

Piet Hein, “Grooks”

Some of the stuff that Keith Tokash has been logging recently on the “CCIE Candidate” blog has pointed the way to some interesting investigations.  Furthermore, there have been a few questions on NetPro that have made me think.  It might even be the case to go to one of Narbik’s boot camps when he is in London.  (Or maybe I’m just looking for an excuse to go back to my home city. 😉  So this page will be a working list of things to do.  Pian piano.

EIGRP 

1. EIGRP uses the metrics at which end of each link: the transmit end or the receive end.  Is it possible to provoke asymmetric routing by configuring different metrics at either end of a link?  Can this result in any unstable topologies?  See NetPro context.
2. Someone on the NetPro forum tells me that EIGRP uneven load balancing is always process switched.  I thought it was handled by CEF using a weighted hash algorithm.  I have to lab this.  Here is a document I based my belief on.

OSPF

1. OSPF uses the cost at which end of each link?  Actually, I already know the answer to this one: each router advertises an LSA for each network it is attached to, along with the outgoing metric of the link.  So, looking at the path of a packet from source to destination, the cost is the sum of the transmit costs on the path.
2. There are two ways of putting a link into are area: with ip ospf 100 area 0 on the interface, and with network x.x.x.x area 0 in the router section.  In the event of a conflict, which takes precedence?
3. Ask the same question of ip unnumbered interfaces.

HSRP and Routing protocols

1. I still need to understand fully the interaction between HSRP and routing protocols.  Hereis a situation where HSRP appears to cause unexpected results from a routing protocol.

LAN Control Protocols

1. When you have a dot1q trunk, which of the control protocols are send on VLAN 1 and which are sent on the native VLAN (assuming these are different).  I answered a question on NetPro about this and apparently got it wrong.  I need to lab it.

Spanning Tree

1. Spanning-Tree.  I guess I should ask the same question for Spanning-Tree, which after all is a sort of Distance-Vector algorithm.  Which end of each link is significant.

VTP

1. I keep telling people to beware that a VTP client can update a domain, and so it can.  But it is not as easy as I had once thought.  I need to write up the experiment properly.  I wonder whether the behavior is version dependant.
2. Furthermore, I really want to investigate VTP transparent.  How transparent is VTP transparent?  Can a transparent switch pass through VTP information, and if so, does the domain name need to match?  How does VTP pruning react to encountering a VTP transparent switch?

There is a load of lab work to do on this.

[OT] On loyalty and motivation

A chance comment by someone this morning got me thinking about my relationship with Cisco.  What is it that keeps me studying, blogging, and answering questions on NetPro?  I don’t get paid for it.  In fact it has cost quite a lot of time and money so far, what with three attempts at the CCIE lab, and Networkers every year.  So why do I do it?

The main reason must be because I find it interesting and fun.  Being a member of Cisco communities gives a certain sense of involvement and belonging.  If it weren’t for the participation of people like Russ White, Harold Ritter, and Rick Burts, on the NetPro, it is doubtful I would be locked in quite so comprehensively.

A lot of it has to do with Cisco’s apparent openness with information.  That encourages participation.  Try to get too close to Juniper or Checkpoint, for example, and you soon come up against a brick wall of paranoia.

That is not to say the relationship is always smooth.  There are times when I get decidedly disillusioned with Cisco.  For example:

• When I tried to warn them that the IPv6 Command Reference had fallen off their documentation site, and I got a frosty response saying they could not help me because I didn’t (personally) have a support contract.
• When I reported to the TAC that their switches were counting collisions as errors.  The TAC argued back: don’t be ridiculous, why shouldn’t collision errors be counted as errors?  I had to quote chapter and verse from the 802.3 spec before they accepted that I wasn’t mad after all.  That bug was fixed in later versions.
• The lack of any easily affordable evaluation licences for lab work.  Microsoft have a program called TechNet Plus which offers evaluation licences for geeks like me who want to play with the features of their products.  Cisco want the full whack like I was a commercial customer.
• When their documentation and training materials contain errors sufficient to confuse any student, and do not provide any way to report them.
• When it impossible to schedule a CCIE lab test within the expiry date of the written test.

At the end of the day, I should remember that Cisco is a commercial organisation, and so they measure their success by the bottom line of the balance sheet.  Cisco has hit on a winning formula – openness and community – that successfully keeps their advocates on side.  In doing so, they raise expectations.  Loyalty is a two-way process.  Let’s hope they continue to meet those expectations.

 ———————

Collisions are not errors: they are a normal part of the half-duplex media contention mechanism!

Runts and Overruns

I am still in a state of euphoria about finally getting my digits after close on four years working on it.  I can hardly believe it.  I keep thinking “#20765” and grinning!

I’ve not blogged for a few days, but that does not mean I have given up.  I have been involved in a couple of interesting conversations on NetPro and DISCUSSiT, so I am going to  lay down a couple of hyperlinks here so as not to lose track of the thread.

The first is entitled “Runts and Overruns“.  To me, “runts and overruns” sounds an alarm bell called “duplex mismatch”.  Duplex mismatch must be the most Frequently Asked Question on NetPro.  One day I shall get round to posting a page about the duplex mismatch issue so I can just point to it rather than re-writing it each time.

What makes this case slightly different is that the OP has set 100/full on both switches.  But when I ask him to confirm that he has a straight crossed-cable (Is that a contradiction?) between the switches he says “As far as we know it is a point to point link (we don’t manage it) there may be some repeaters in it though.”

I don’t have a vast amount of experience with metropolitan Ethernet service providers, but for my money there is likely to be something half-duplex in this link.  Is that normal?  Do service providers normally supply half-duplex or full-duplex links?  Or do they expect you to auto-negotiate?  I am watching for the outcome of this one to put in my experience bank.

It may be due to something completely different of course, but that would still be interesting.

Yessss! CCIE #20765

CCIE Verification Tool   CCIE Certification Details   Name CCIE Number Track Certification Status Certification Date KEVIN DORRELL 20765 Routing and Switching Certified 09-May-2008

I would like to thank all those who have helped me on my journey.

My wife Myriam and my sons Peter (15) and Matteo (11), who have been patient with me over the past few months, and very understanding when Saturdays, Sundays and may other evenings, have been sacrificed to lab practice.  It was great to be able to go for a long walk in the countryside this Monday holiday morning.

Paul, who started his CCIE journey at about the same time as I did, but arrived almost two years before me, and encouraged me throughout mine.  The proprietors of the New Delhi Restaurant, Gasperich, for regularly allocating us a 4-seat table so I could spread my NMC lab notes out to discuss over dinner.

The many many helpful people on Cisco NetPro who are so willing and eager to share their experience.  Too many to mention, but especially Rick Burts, Russ White, François Tallet, Marikakis, Jon Marshall, and many many others.

The staff at NetMasterClass for their excellent training material, and especially to Alexei for answering my incessant questions on their DISCUSSiT forum.

Last but not least, the bloggers.  Ethan Banks, whose blog is an inspiration.  Richard Bannister, whose excellent diagrams provided the reading for my train journey to Diegem.  PacketLife, CCIE Journey, and all the others that are listed in my blogroll.

Thank you all.

[OT] No support from Sony Ericsson?

I have a new phone, a Sony Ericsson 550i.  I bought it to replace my old Sony Ericsson K750i whose joystick had packed up.  (I notice that they have removed the joystick from the design now.  Just as well: it was a real dog.  Almost guaranteed to break.)

I wanted to ask a question about compatible flash memory chips for my new phone.  But apparently, because I live Luxembourg, I cannot get support.  If you look at their web site, Luxembourg is not listed.

Being English mother-tongue, I approached the UK site in the hope of getting support in the language I am most comfortable with.  But they refuse to talk to me, telling me instead to contact my local support line.  Obligingly, they sent me a list of their support centres for Europe.  Of course, Luxembourg is not on the list.

I am not impressed.  I shall try Sony Ericsson Belgium and see if that works.  It offers support in French (which I do speak some) and Flemish (which I don’t), but it’s anyone’s guess if that is the right one for Luxembourg.

You would think that an international corporation like Sony Ericsson would offer international support.  Next time I think I shall buy Nokia.