Long time, no write. Been busy moving countries, as you do. Started a new job too. Been setting up RANCID and wanted to pull together all the pieces here: RANCID Let’s start in the obvious place, www.shrubbery.net/rancid/. I prefer my own, slightly different, expansion of the acronym. Really Awesome Network ConfIg Differ. If you are […]
Marcus Ranum – The Six Dumbest Ideas in Computer Security Read this some time back but a mailing list post reminded me of it. “Let me introduce you to the six dumbest ideas in computer security. What are they? They’re the anti-good ideas. They’re the brain damage…” Personal observations on the reliability of the Shuttle, […]
CT3 – Disable optional IOS features on high CPU load “The applet monitors the average one minute CPU load on the router (using the cpmCPUTotal1min SNMP variable) and disables optional features when the CPU load exceeds predefined value.”
Cowboy 2.0 – Salesforce.com No Longer Playing Nice “I guess it was inevitable, but I did not want to believe it could happen. Marc Benioff (Salesforce.com founder, chairman and CEO) was apparently lying to us all along.” Cisco IOS hints and tricks: Display locally originated BGP routes “Displaying the BGP routes originated in the local […]
37signals – Git smart: How we’re using Git to track our source code. I’ve been using bzr a lot lately but every man and his dog and their source code seems to be switching to git. Must take a deeper look one of these days. Changing the IP-address of an ESX host and HA – […]
So at $work[0] we’re trying to bring up a new service for a customer. It’s a 2meg service from T, which terminates on our side like so: fibre -> managed media converter -> twisted pair -> router We think we’re ready to turn it up and a T technician is booked. For 01:30am due to […]
So, at $work[0] we needed to do a “many to one” SNAT on Cisco IOS. I’d only ever previously done this by SNAT’ing to an interface, however this required specifying the IP. My Google-fu failed me, I could turn up how to do the “SNAT to interface” and “SNAT one to one from a network […]