vty stands for Virtual Teletype. What is Teletype?
The teletype, or teleprinter, is a device used for communicating text over telegraph lines, public switched telephone network, Telex, radio, or satellite links.
This means vty is essentially like a virtual computer screen plugged into the router that we can remotely access.
Both SSH and Telnet use this virtual monitor to let you see the router/switch.
The command
line vty 0 4
Configures 5 of these virtual teletypes (vty’s) for us to use. Can think of it having 5 monitors connected to the router. When you SSH to it, you are claiming one of these monitors. Cisco devices support up to a maximum of 16. 0-15
The following is some basic info on STP and RSTP. This list is not comprehensive. Refer to the link at the bottom of the page for more in depth details.
RSTP Priority
Default Priority is 32768 + VLAN ID
For example, if we are using vlan 10, then our default priority is 32768 + 10 = 32778
RSTP Priority can be set from 0 – 61440 in increments of 4096.
RSTP Port Roles
Ports can fill 1 of 4 roles.
Port Role
Description
Root Port
Port closest to the Root Bridge (Switches going to the Root switch)
Designated Port
Ports going away from the Root Bridge (To clients)
Alternate Port
A “backup” port for the Root port. If the Root Port fails, this port takes over
Backup Port
Essentially a backup port for the designated port
RSTP Port Roles
RSTP Port States
A port can be in one of 3 states. Well technically 4 states if you include down/unplugged.
Port State
Description
Discarding
Port discards packets (Alternate and Backup Ports)
Learning
Port learns MACs and doesn’t forward data
Forwarding
Port forwards data and learns MACs
RSTP Port States
RSTP Port Types
There are 3 port Types. Not to be confused with port States or Roles.
Port Type
Description
Point to Point
Switch to Switch
Point to Point Edge
Edge of Network. Connected to a PC, Printer etc.
Shared
Half Duplex, Port connected to a Hub
STP/RSTP Port Types
RSTP Timers
There are three RSTP timers. STP has the same timers, but the MaxAge is 10 seconds, and the Forward Delay is used for both Learning and Listening states which takes a total of 30 seconds to complete.
Timer Name
Default Value
Description
Hello Timer
2 Seconds
Time between Hellos created by Root
MaxAge
6 Seconds (Hello Timer * 3)
How long a Switch should wait before trying to readjust the network
Forward Delay
15 Seconds
Delay used for Learning/Listening in STP. Shouldn’t be necessary if legacy bridges are not used.
RSTP/STP Timers
Port Cost
There are technically two types of cost. The newer cost values were introduced so we could use faster ethernet speeds.
By default Cisco switches use the old cost values, but they can be changed to use the new ones.
spanning-tree pathcost method long
Ethernet Speed
Old Cost
New Cost
10 Mbps
100
2,000,000
100 Mbps
19
200,000
1 Gbps
4
20,000
10 Gbps
2
2000
100 Gbps
N/A
200
1 Tbps
N/A
20
STP/RSTP Path Cost
More information can be found at the following link.
After a recent update, the named service stopped working. When manually trying to restart the service it would just fail.
Running the named-checkconf command
sudo /usr/bin/named-checkconf -z /etc/named.conf
Returned the following error.
/etc/named.conf:37: option 'dnssec-enable' no longer exists
Looks like what happened is they removed the dnssec-option, but enabled it by default
The dnssec-enable option has been obsoleted and no longer has any effect. DNSSEC responses are always enabled if signatures and other DNSSEC data are present. [GL #866]
Authentication, Authorization, and Accounting or AAA is an framework that allows access to a computer network/resource,
Authentication
Authentication identifies the user. It’s from the Greek authentikos “real, genuine”. We can think of it as proving the identity of the user. Bob sits down at the computer and types in his password (Something he knows) and confirms that he is in fact Bob.
Authorization
Authorization is the privileges that the user has to the system. For instance, Bob is now authenticated to the computer, but he may only be authorized to access email and a web browser.
Authorization and Authentication can get confusing. In simple terms
Authentication – Who are you?
Authorization – What you have access to.
Accounting
Accounting is the auditing or logging arm of AAA. It is for answering the 5 Ws Who did what, when, where, and how. For instance, accounting could log that Bob checked his email at 9:30AM, Improved his mind by reading posts on incredigeek.com for a couple hours, then checked email again before shutting the computer down.
Hopefully that is a short helpful explanation of AAA. For more information, check out the following links.
This error can show up on Windows if you have already copied a file with the same name. To fix the issue, just copy it to a file with a different name. Change cap.pcap to cap1.pcap and so forth as needed.
In the post, we’ll be adding a custom OID for a Ubiquiti Solar Charge Controller.
Find the device OID
Add the Custom OID in LibreNMS
Check the graph
Find the custom OID
Check out the following post if you are trying to add a Ubiquiti Solar Charge controller graph to LibreNMS. Otherwise you may need to do some googling around looking for the OID.
Go to your device -> Settings(Little Gear) -> Custom OID -> +Add New OID
Adding Custom OID in LibreNMS for Ubiquiti UI Charge Controller
Couple notes about the information. – There needs to be a 0 after the end of the OID. – Data Type needs to be Gauge, Not Counter. A gauge can go up and down. A counter just counts up.
Hit “Test OID” and you should get a little notification saying it got a value for the OID. In this case 25572.
Test Custom OID in LibreNMS for Ubiquiti UI Charge Controller
Now Hit “Save OID”
Check the Graph
Now LibreNMS should start graphing our Custom OID. You may need to give it a minute to start showing data.
The graphs show up under Graphs -> Custom OID
Where are Custom OID Graphs?LibreNMS Custom OID Graph
The Network Miner tool is a handy little utility that works great on Windows. It sorta works on Linux. Doesn’t appear to be able to read the traffic coming off the interface, but you can drag and drop a pcap file on it. You can export a pcap file from wireshark, but it needs to be a pcap, not the newer default pcap Wireshark defaults to. Can change it in the “Save as:”
