Cisco networking & eduroam: Rate Limiting Using Microflow Policing

Posted on 2014-08-11 by John Swain

This is my final post on the interesting technical aspects of the new networking infrastructure that support the eduroam service around the university. This post covers the finer technical details of how we currently rate limit client devices to 8Mbps … Continue reading →

Posted in Cisco Networks, eduroam | 1 Comment

Configuring Cisco Ethernet management interfaces

Posted on 2014-07-30 by John Swain

Following on from recent posts where I have covered our use of the Cisco Catalyst 4500-X platform for the eduroam networking infrastructure upgrade project, I thought it would be good to cover the Ethernet management interface in more detail. Why, … Continue reading →

Posted in Cisco Networks | 7 Comments

Cisco networking and eduroam: Routing

Posted on 2014-06-27 by John Swain

This is the first post in a series discussing some of the finer details of the networking setup for the new eduroam infrastructure that went into production last month. In this post, I will be covering the IP routing setup … Continue reading →

Posted in Cisco Networks, eduroam | Comments Off on Cisco networking and eduroam: Routing

Building the new eduroam networking infrastructure

Posted on 2014-05-30 by John Swain

As many of you around the university are likely to be aware of by now, this month we migrated to a new backend infrastructure to support the eduroam service across the city. This blog post has been written to give … Continue reading →

Posted in Cisco Networks, eduroam, Wireless | Comments Off on Building the new eduroam networking infrastructure

Using Microsoft Active Directory as the Authentication server for an SSL VPN on a Cisco ASA.

Posted on 2012-07-06 by Guy Morrell

Background We wanted to be able to run an SSL VPN for a second team (Team B) on one of our ASA pairs. It was important to give each team a different VPN pool for security reasons. The first team … Continue reading →

Posted in Cisco Networks, VPN | Tagged | Comments Off on Using Microsoft Active Directory as the Authentication server for an SSL VPN on a Cisco ASA.

ASA 5505 Transparent Mode DHCP and Memory fun

Posted on 2012-03-29 by Guy Morrell

We have a customer who uses a Cisco ASA 5505 in transparent mode to protect a small LAN. They did the right thing and took out SmartNet cover, but the reseller botched something and the TAC wouldn’t play with them … Continue reading →

Posted in Best Practices, Cisco Networks, DHCP, Firewall, General Maintenance | Comments Off on ASA 5505 Transparent Mode DHCP and Memory fun

VPN NAT Changes

Posted on 2012-01-09 by Guy Morrell

What is this post about? We are planning to make a minor change to the way our VPNs NAT clients. For those who are interested, this blog post explains why and how we are doing this. Please note that these … Continue reading →

Posted in Cisco Networks, Documentation, General Maintenance, VPN | Comments Off on VPN NAT Changes

OUCS Backbone Network Naming and Numbering Conventions

Posted on 2011-08-15 by Guy Morrell

Introduction This blog post is intended to help ITSS in Oxford to better understand how the centrally provided network fits together with their own local networks. It is also hoped it will assist them in assessing the impact of any … Continue reading →

Posted in Backbone Network, Cisco Networks, Documentation, General Maintenance | 1 Comment

Budget High Availability ASA testing

Posted on 2011-05-24 by Guy Morrell

The problem We’re looking at setting up a management network behind a couple of ASAs. My requirements and prerequisites are: No L2 end to end VLANs through the core. That is bad and wrong. A total site failure at one … Continue reading →

Posted in Cisco Networks, Firewall | Comments Off on Budget High Availability ASA testing

MAC Flaps – why are they bad?

Posted on 2011-02-04 by Guy Morrell

What is a MAC Flap? A MAC Flap is caused when a switch receives packets from two different interfaces with the same source MAC address. If this makes no sense, perhaps a  quick summary of how switching at layer 2 … Continue reading →

Posted in Backbone Network, Best Practices, Cisco Networks | Tagged | 6 Comments