5,886 reputation
21751
bio website pennington.net
location
age 45
visits member for 3 years, 8 months
seen 18 hours ago

Professional packet pusher / network engineer, python & linux addict

Interests: BBQ-ing pork, Denver Broncos, living the Christian faith, and spending time with my family. Random stuff:


I serve as a Pro-Tem ♦ for NetworkEngineering. If you have any questions about moderation, feel free to ping me in the Network Engineering chat room, or ask on Meta Network Engineering. For everything else, don't hesitate to email me: mike [at] pennington {dot} net.



Dec
11
comment connecting remote site via fiber: layer 2 vlans or layer 3 routing?
As a side note vxlan also solves the Layer2 datacenter interconnect problem, and ESXi virtual switches support vxlan
Dec
9
revised Wildcard cert for local SSL Certificate Authority?
added 32 characters in body
Dec
8
accepted Wildcard cert for local SSL Certificate Authority?
Dec
8
revised Wildcard cert for local SSL Certificate Authority?
added 129 characters in body
Dec
8
revised Wildcard cert for local SSL Certificate Authority?
added 97 characters in body
Dec
8
comment Wildcard cert for local SSL Certificate Authority?
@HopelessN00b and MichaelHampton, this is a BYOD service and Cisco explicitly warns engineers to use a cert chained through a well-trusted root CA to avoid potential problems with SSL MITM attacks; this is particularly relevant to BYOD because I have no control over the supplicant. Whether you believe they are giving me good advice is personally interesting to me, but not really something I want to introduce in the scope of this question since Cisco is pretty clear about this in the context of BYOD services.
Dec
8
asked Wildcard cert for local SSL Certificate Authority?
Nov
30
awarded  Constituent
Nov
30
answered How to determine if auto negotiation with switch is finished
Nov
22
awarded  Quorum
Nov
20
comment
While I am tempted to think this is nothing more than a periodic troll, let's give you the benefit of the doubt. Could you elaborate on what bearing this statement has on anything to do with moderation (or Server Fault) for that matter: "I'll push for a bloody revolution to oust the oppressive overlords who cower behind intellectual property and closed source.". I will politely point out that the vast majority of the internet is run by "closed source" embedded systems called routers and firewalls. Aside from that, a bloody revolution is hardly motivating for my vote.
Nov
17
awarded  Caucus
Nov
7
awarded  Popular Question
Oct
26
awarded  Notable Question
Oct
23
comment How can I prevent myself from being automatically logged out of a cisco nexus switch because of inactivity
The switch's inactivity timer only cares about keystrokes... that's why ServerAliveInterval doesn't help. In principle, you could build some kind of expect wrapper for your ssh sessions. That script needs to be smart enough to send a space / backspace every minute or so... I'm too lazy to write that myself, but I freely license the idea to whoever answers with a working script.
Oct
23
revised Cisco RV110W: Use LAN port as WAN?
Clarify what kind of device in the title, since some LAN ports are perfectly fine as a WAN intf
Oct
21
revised How to type a £ symbol over console with Cisco IOS?
deleted 91 characters in body
Oct
17
revised How to type a £ symbol over console with Cisco IOS?
edited body
Oct
17
answered How to type a £ symbol over console with Cisco IOS?
Oct
3
comment Root cause of “curl: (56) SSL read: errno -5961” errors
@jngshl, I noticed that there was an MTU mismatch (which I discovered by using the tracepath command). Then I simply made the MTU match throughout the whole Vlan.