Monthly Archives: January 2017

The Argument for Standardized Configurations

Matt/ January 31, 2017

There are quite a few things that you don’t realize how great they are until you don’t have them anymore. For me, one of those things was standard guidelines for device configurations. At my last job, documented standards were extremely important – we had them for everything. While some devices might ultimately be configured in a slightly different manner to accommodate

Read More

Getting Started with JunOS PyEZ

Matt/ January 24, 2017

This guide is written for CentOS 7. If you’re running another distro, find your dependencies here Last year we had to begin migrating off of some of our older Juniper SSG firewalls since we were beginning to push them to their throughput limits. We evaluated a couple of vendors but ultimately decided to stay with Juniper and purchase SRX 1500

Read More

The Small Things (0x2142)

Matt/ January 17, 2017

Even when you’re ten years or so into your career, you can always stand to learn something. It’s important that no matter how experienced you get, you always keep an open mind to other people’s ideas or opinions. As an example to this, I would like to share the story of this blog name. Back when I worked at a

Read More

BGP: Getting Started with Multi-homed Internet

Matt/ January 10, 2017

A few years back I worked for an organization that had a single 100Mb Internet connection. Not bad for just typical corporate traffic, but we also hosted our production web site out of that location as well. An incident occurred where our website was down due to Internet issues during an extremely inconvenient time. So we decided to procure a

Read More

IP Address Design (Part 2)

Matt/ January 3, 2017

Last week in IP Address Design (Part 1) we discussed an example of a bad design for IP allocations and the problems that it caused. This week we will continue by discussing the proposed solution and how it resolved those issues. The problems with our IP Addressing scheme bothered me quite a lot – especially because IP Addressing design doesn’t really

Read More