Zigbits Network Design Podcast

Zigbits Network Design Podcast

By Zig ZsigaNewsTechnologyEducationHow ToTech News
Download on the App Store

Zigbits Network Design Podcast episodes

  • ZNDP 036 – Design Case Study with Daren Fulwell – Part 1 The Overview
    For today's Zigbits Network Design Podcast we start a Design Case Study Series with my friend Daren Fulwell.  In this first installment we set the stage for this Design Case Study Series, highlighting the constraints, requirements, and over arching architecture model used to solve the business priorities and business outcomes the customer was looking to achieve. Lets dive into it now!
    1 hr 18 min
  • ZNDP 036 – Design Case Study with Daren Fulwell – Part 1 The Overview
    For today's Zigbits Network Design Podcast we start a Design Case Study Series with my friend Daren Fulwell.  In this first installment we set the stage for this Design Case Study Series, highlighting the constraints, requirements, and over arching architecture model used to solve the business priorities and business outcomes the customer was looking to achieve. Lets dive into it now!
    1 hr 18 min
  • ZNDP 035 – Wireless QoS Design with Nick Russo
    The Iconic Mr. Nick Russo joins us once again for today's topic of Wireless QoS Design! Today Nick and I talk about QoS, RFC 4594, Wireless QoS, RFC 8325, WMM, UP values, DCF, TXOP, Wireless High Density, Wireless High Demand, and much more!  We also highlight an issue around vendor endpoints not marking Wireless Voice traffic the way you would expect!  Hold on to your seats folks, we are live in 3...2...1!!!
    56 min
  • ZNDP 035 – Wireless QoS Design
    The Iconic Mr. Nick Russo joins us once again for today's topic of Wireless QoS Design! Today Nick and I talk about QoS, RFC 4594, Wireless QoS, RFC 8325, WMM, UP values, DCF, TXOP, Wireless High Density, Wireless High Demand, and much more!  We also highlight an issue around vendor endpoints not marking Wireless Voice traffic the way you would expect!  Hold on to your seats folks, we are live in 3...2...1!!!
    56 min
  • ZNDP 033 – CI/CD … See Why? With Nick Russo
    The Iconic Mr. Nick Russo joins us once again for today's topic of CI / CD ... See Why?! Today we are picking up where Nick and I stopped in ZNDP Episode 30 - Designing for DevOps, if you didn't get a chance to listen to that episode yet you can find it at zigbits.tech/30, If you need some context around DevOps you should definitely listen to Episode 30. For today's topic we are discussing CI/CD which is Continuous Integration / Continuous Delivery/Deployment. And we are live in 3...2...1!!! :)
    Continuous Integration in CI/CD
    Traditionally, developers would work in their own feature/topic branches for months, then deal with what is called "merge hell" towards the end of the project when entering the "integration testing" phrase. This is typically weeks or months as combining many silos of work is fraught with problems. This goes way past software development; the "divide and conquer" approach for any complex project is best accomplished by continuous lateral communication. CI means merging code together regularly (daily) which kicks off a comprehensive set of tests to ensure code functionality and quality. CI provides immediate feedback as to any problems that arise.
    Commonly associated with software development, but can be applied more generically. In this use case, to a complex Ansible library used at a large customer.
    Continuing from last time (ZNDP Episode 30), we discussed our specific purpose, along with the processes and tools to support it. How do we ensure quality? How do we know the machine built the right product? We checked the inputs, what about the fabrication steps?
    Consider an automotive assembly operation (way overly simplified). First build the frame, then put the wheels on, then the body, then the glass. If the frame is defective, why put the wheels on? Let's try to achieve "Quality at the source" through all the integration steps. This runs whenever code is committed or merged.
    The CI Process in CI/CD:
    1. Lint all the code. Look for syntax/styling issues, and static code analysis to detect security threats. This takes seconds. Fail fast!
    2. Unit (filter) tests. Execute the individual units locally to ensure they function.
    3. Role tests. Roles typically rely on filters, so run those against some virtual devices.
    4. Playbook tests. Playbooks typically rely on roles, so run those against some virtual devices. For cost/runtime savings, you can stub out the virtual devices and provide mock data to the rest of the playbook, but this is less effective. This takes tens of minutes.
    It usually doesn’t make sense to continue to the next step if a previous one fails. For example, if static code analysis reveals a security flaw, executing the code may pose a security risk.
    Bonus feature: CI integrates with chat programs (chatops) to notify developers on-the-fly about activities. New comment/issue, code committed, pipeline pass/fail, etc. Common chat tools like Slack, Ryver, and Mattermost are used for this.
    Consider even more creative examples, such as Nick's OSPF Cisco Live discussion. Configs and markdown READMEs are up on github. Here is Nick's Github Repository link. There is no real code here, just text documents and a diagram. 
    Nick's Troubleshooting OSPF - BRKRST-3010 Cisco Live Session: 
    - Session Presentation
    - Video Recording
    What's the value of CI in CI/CD?
    First, linting the markdown documents ensures they look fresh and high quality. Second, maybe we can do some basic quality checking of the device configurations. There are 19 devices in the lab, and there are two folders (final and initial configs) each with 19 configs, for a total of 38. We can ensure that there are exactly 38 config files. We can also search the files for critical information, such as the author's name and email (for assistance/questions). Last, we can search the files to ensure the hostname of the device (R1) is the same as the file filename (R1.txt) once the file extension is removed.
    1 hr 12 min
  • ZNDP 033 – CI/CD … See Why?
    The Iconic Mr. Nick Russo joins us once again for today’s topic of CI / CD … See Why?! Today we are picking up where Nick and I stopped in ZNDP Episode 30 – Designing for DevOps, if you didn’t get a chance to listen to that episode yet you can
    1 hr 12 min
  • ZNDP 032 – Cisco ISE Client Authentication Design with Andy Richter
    Today's show is all about Cisco ISE Client Authentication Design with Guest Expert Andy Richter, who is a Security Practice Manager and Distinguished Engineer at Presidio. This episode is a follow up episode from ZNDP # 29 - Cisco ISE Authentication Design!  In this episode we are focusing on the Client Authentication piece of the puzzle.  Andy and I talk about Supplicants, PEAP, EAP-TLS, EAP-Chaining, AnyConnect NAM, and much more! So much Tech in this episode so lets get to it!
     
    Cisco ISE Client Authentication - Methodologies Overview
    Discussion of general supplicant capabilities and limitations
    Password vs certificate inner methods
    Go over TLS tunnel for outer security - Preventing rogue WLANs
    Server certificate trust design - Wildcard Certs and SAN Certs
    User vs Machine
    Cisco ISE Client Authentication - Supplicants
    Windows Native 
    GPO
    PEAP
    EAP-TTLS
    EAP-TLS
    Prevent Guest access
    Anyconnect NAM
    MIX methods
    EAP-Chaining - EAP-fast overview
    Corp SSID
    Wired Switching
    Mac OSX
    MDM/JAMF provisioned 
    PEAP
    TLS
    Term of the Show:
    What is a Supplicant?
    Guest Expert: Andy Richter
    Today we welcome back my good friend Andy Richter as our guest Expert! Andy is a Full-on Cisco ISE Expert, he has written one of the best Cisco ISE Books that I still personally use as a reference today.  He is actually the reason I learned ISE in the first place and he personally taught me some of the basics of ISE day one. He currently is a Distinguished Engineer and Security Practice Manager at Presidio!
    How to engage with Andy further:
    Twitter: https://twitter.com/quasinerd
    LinkedIn: https://www.linkedin.com/in/andy-richter-b55a771/
    Publications:
    Practical Deployment of Cisco Identity Services Engine (ISE)
    Call to Action:
    What topics would you like us to spotlight on our next Design episode?
     
    Mentoring and Coaching with Zig:
    Through your participation in a healthy mentoring and coaching relationship, you will benefit greatly from the education, the experiences, the influences, leadership and even the resources provided. Learn how you can accomplish more, in one year, than you could accomplish in your career...in your business...and in your life.
    Accomplish More Now!!
    Ask Zig:
    Ask Zig episodes feature answers to the questions that you provide. Yes You! The questions can be technical, business, certification, or personal related.  I can help out in all of these areas and much more.  If you would like your question spotlighted and answered on the next #AskZig episode submit them now!
    Submit Your #AskZig Question Now!!
    Provide Feedback
    You can leave a comment on the blog!
    You can leave a voicemail at (617) 913-4103
    You can email us at [email protected]
    Engage with Zigbits further:
    Subscribe to the podcast on an iPhone or on an Android
    Follow Zigbits on Twitter!
    Follow Zigbits on LinkedIn!
    Follow Zigbits on Facebook!
    Engage with me further:
    Follow me on Twitter!
    Follow me on LinkedIn!
     
    Transparency:
    This post may contain affiliate links to products or services were I may receive a level of compensation from your actions by following those links. This is seamless to you and does not add any additional cost to the products or services in question. In addition, I do not let any affiliate relationship cloud my judgement or my recommendation of a product or service. My recommendations will always be above reproach.  This is my commitment to you Ziglets!
    1 hr

About Zigbits Network Design Podcast

From the publisher's feed

Join Host Zig Zsiga and his cast of Industry Experts as they help you with Network Engineering, Network Design, and Network Architecture. If you are just starting out your career in Networking or if…