Fabrizzio's networking stuff https://compumundohipermegared.one/ 2025-02-23T14:30:00+0200 https://compumundohipermegared.one/posts/mikrotik-vyos-l2tpv3/ 2025-02-23T14:30:00+0200

I have been using powerline adapters to connect the bedroom TV, Odroid and IPTV box to my network. It worked fine, quite fast close to 1Gbit speeds, and can pas...

I have been using powerline adapters to connect the bedroom TV, Odroid and IPTV box to my network. It worked fine, quite fast close to 1Gbit speeds, and can pass through VLANs without any problems. That is, until one of the adapters started smelling like burnt plastic one random Sunday afternoon. I've decided it's too much of a fire risk even if they honor the warranty and replace them. In the meantime there's an Ethernet cable being squished by a door hinge. I've purchased a Mikrotik hAP ax3 ... https://compumundohipermegared.one/posts/route-collector-addpath-single-rr/ 2024-10-12T14:30:00+0200

My network AS203528 has eBGP Multihop peering to a couple of route collectors - both from BGP.tools and NLNOG These peerings are off a couple of my routers OSR...

My network AS203528 has eBGP Multihop peering to a couple of route collectors - both from BGP.tools and NLNOG These peerings are off a couple of my routers OSR1GLASS1 and OSR2GLASS1 - in both Ostrava sites, and their only purpose is for these route collection peerings and for the Looking glass (Hyperglass). Being accessible by the Looking glass means they're very firewalled - to prevent any lateral movement just in case they would be compromised by a vulnerability on Hyperglass. I make heavy u... https://compumundohipermegared.one/posts/l2circuit-requested-vlan/ 2024-06-15T09:00:00+0100

So this is a short post. I'm studying for the JNCIP-SP and I found very interesting that although l2circuits / Martini PWs need the VLANs at both ends to match,...

So this is a short post. I'm studying for the JNCIP-SP and I found very interesting that although l2circuits / Martini PWs need the VLANs at both ends to match, this disappears from the LDP label mapping if there's outer-vlan-map swap present `` fabrizzio@PE01# show interfaces ge-0/0/4.150 encapsulation vlan-ccc; vlan-id 150; fabrizzio@PE01# show protocols l2circuit neighbor 10.254.0.12 interface ge-0/0/4.150 virtual-circuit-id 2; fabrizzio@PE03# show interfaces ge-0/0/3.200 encapsula... https://compumundohipermegared.one/posts/AS203528-route-reflector/ 2024-05-08T17:00:00+0100

My hobby network (AS203528) keeps growing. I had a full iBGP mesh among those routers, however that's no longer viable. I already have 4xBGP Route reflectors ...

My hobby network (AS203528) keeps growing. I had a full iBGP mesh among those routers, however that's no longer viable. I already have 4xBGP Route reflectors on my internal network. I want to re-use those same reflectors for AS203528. Those two networks have each their own IGP, and are just peered with each other. My entire network needs to be able to pass a cold start / bootstrap itself. I have the loopbacks of my internal network on 192.168.254.0/24 and of AS203528 at 192.168.248.0/24. E... https://compumundohipermegared.one/posts/evpn-vxlan-01/ 2024-03-09T18:00:00+0100

Today I wanted to play around with VXLAN as I've never touched it and I had nothing better to do. This has been tested with the latest VyOS nightly 1.5-rolling...

Today I wanted to play around with VXLAN as I've never touched it and I had nothing better to do. This has been tested with the latest VyOS nightly 1.5-rolling-202403050022. First, I read the related VyOS blog post and the FRR docs. I really prefer learning while doing things instead of just reading the theory. Even though it means I will likely mess something up, that's precisely what the Lab is there for. First I need to enable address-familty l2vpn-evpn on my route reflectors. I have fo... https://compumundohipermegared.one/posts/vyos-sr-gre-mpls-issue/ 2024-01-01T18:00:00+0100

I was reading about Segment Routing, and I wanted to give that technology a try. I already had a GNS3 lab built with vSRX devices, with a basic IS-IS+LDP topol...

I was reading about Segment Routing, and I wanted to give that technology a try. I already had a GNS3 lab built with vSRX devices, with a basic IS-IS+LDP topology, running iBGP between PE routers and a L3VPN service. Unfortunately after trying to enable SR on the vSRX devices I found that you cannot configure SRGB on them. I'd have to re-do my lab with vMX and that's not fun for me, it takes it out of "weekend fun project" territory and more into "homework". So I thought, why not deploy Segmen... https://compumundohipermegared.one/posts/graph-page/ 2023-11-05T19:00:00+0100

Over the weekend I had the idea to add a tab onto my blog, to show some of the statistics I collect within my network As I already run LibreNMS it was just a m...

Over the weekend I had the idea to add a tab onto my blog, to show some of the statistics I collect within my network As I already run LibreNMS it was just a matter of creating a script on one of my Virtual Machines that will collect the graphs using LibreNMS API and then push them to my web server that runs Caddy. Here is (a simplified version) of the the main script _graph\_monitor.sh_, that will pull the graphs from my LibreNMS instance, put them all into a temporary directory, then SSH in... https://compumundohipermegared.one/posts/vsrx-gns3-aes/ 2023-10-18T19:00:00+0100

Recently I've been studying for my JNCIA-SEC certificate, using the Juniper Open Learning portal & lessons. However I always set up the labs myself on my own k...

Recently I've been studying for my JNCIA-SEC certificate, using the Juniper Open Learning portal & lessons. However I always set up the labs myself on my own kit. I got to the IPsec site to site VPN part of the course and I was happy enough to go onto my lab and put a couple vSRX instances each with a simulated internet connection and LAN, then create a tunnel between each other and make sure it works or troubleshoot it until it does. Unfortunately as soon as I created the site to site IPsec... https://compumundohipermegared.one/posts/dns-update-ansible-01/ 2023-07-02T12:00:00+0100

I already had a semi-automatic way of getting the AAAA and PTR records to put on my zonefiles, from the VyOS router configs. However it involved logging in man...

I already had a semi-automatic way of getting the AAAA and PTR records to put on my zonefiles, from the VyOS router configs. However it involved logging in manually to each router, pulling the config then pasting each one onto a script. Now, I (and StackOverflow and ChatGPT, of course) decided to quickly put together an Ansible playbook for it, along with a script for it. It's all on my github. I don't want to repeat myself here, therefore I will paste the readme, it's already markdown :) ... https://compumundohipermegared.one/posts/route-reduction-vps-project/ 2023-07-01T12:00:00+0100

Reason is simple. I have three small VMs (NYC1BR1, LUX1BR1, AMS1BR1) which have only 2GB of RAM available. Each of these VMs receive full routes from the VPS p...

Reason is simple. I have three small VMs (NYC1BR1, LUX1BR1, AMS1BR1) which have only 2GB of RAM available. Each of these VMs receive full routes from the VPS provider, and they also had all the other routes from the other VMs. It doesn't seem such a good idea to have these VMs, with a small amount of ram, storing 3 full IPv6 BGP tables, they're already running somewhat low in RAM. Considering I have a full mesh of tunnels for IPv6 connectivity among all my AS203528 routers, and I have no servi... https://compumundohipermegared.one/posts/vyos-bgp-ipv6-nexhop-issue/ 2023-06-18T12:00:00+0100

Well, everything started with an upgrade to one of the latest VyOS Nightly builds "vyos-1.4-rolling-202306080317" on some of my AS203528 routers. `` fabrizzio...

Well, everything started with an upgrade to one of the latest VyOS Nightly builds "vyos-1.4-rolling-202306080317" on some of my AS203528 routers. `` fabrizzio@osr1j1:~$ ping osr2br2 PING osr2br2(dum0.OSR2BR2.compumundohipermegared.one (2a0e:8f02:21d0:ffff::15)) 56 data bytes ^C --- osr2br2 ping statistics --- 7 packets transmitted, 0 received, 100% packet loss, time 6130ms fabrizzio@osr1j1:~$ traceroute osr2br2 traceroute to osr2br2 (2a0e:8f02:21d0:ffff::15), 30 hops max, 80 byte packets 1 ... https://compumundohipermegared.one/posts/vyos_bgp_med/ 2023-03-03T21:00:00+0100

An important part of my (new) network is the integration with my old Linodes, on which I rely for the IPv4/v6 addressing for my authoritative nameservers, amon...

An important part of my (new) network is the integration with my old Linodes, on which I rely for the IPv4/v6 addressing for my authoritative nameservers, among other things. That's connected to my current internal network through a variety of tunnels (That's a discussion for another day). !Current setup _Current setup_ The problem I have been facing is with the return traffic from my Linodes to my internal network. That (new) internal network spans two different physical locations, however ... https://compumundohipermegared.one/posts/wireguard_over_gretap_over_wireguard/ 2023-01-28T12:00:00+0100

So… Recently I have been faced with some instability on my wireguard tunnels from NYC1BR1, to the rest of AS203528. I also have a couple of VMs, “NYC2EV1” and...

So… Recently I have been faced with some instability on my wireguard tunnels from NYC1BR1, to the rest of AS203528. I also have a couple of VMs, “NYC2EV1” and “FFT1EV1” on Linode, part of what was my legacy network where I learned the IPv6 basics (they give out IPv6 /56 upon request). This network is connected to my internal network by using GRETAP tunnels over AS203528. However both Linodes still have tunnels between each other. `` fabrizzio@NYC2EV1:~$ sh interfaces | match FFT1 wg4 ... https://compumundohipermegared.one/posts/the_beginning/ 2023-01-23T12:00:00+0100

I have always loved building computers and making them run Linux and do a variety of things. For me, it's the perfect excuse to get some hardware (we all need ...

I have always loved building computers and making them run Linux and do a variety of things. For me, it's the perfect excuse to get some hardware (we all need hobbies) and maybe learn some stuff in the meantime. I think the mindset is more "can i run it?" than "should I?". But that's not necessarily a bad thing. In the last couple of years I have obtained some "mini-pcs" (Ryzen 4650GE, 64GB RAM), which have served me greatly as an hypervisor to run Proxmox on, with plenty of horsepower, though...