Main Nav

Participate in this Group

Search This Group

April 22, 2013 | Justin Bennett

Good morning,

 

Anyone seen a phishing attack using a cached version of your own e-mail login page? We just received one this morning that seemed to be using a compromised apache server (signsoflifemissions.org) and using a mod_rewrite command to call our login page.

 

Here's how the URL was crafted:  http://signsoflifemissions.org/cache/mail.our.edu/mail.our.htm

 

Justin Bennett

Supervisor of Network Technology
Information Technology
jbennett@msjc.edu

 

Mt. San Jacinto College
Phone 951-639-5090
http://www.msjc.edu

 

...

April 12, 2013 | Listserv Anonymous User
Message from mark.duling@biola.edu


********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

April 8, 2013 | Pete Hoffswell
Good morning, NETMAN - 

On Thursday, May 30, there will be an opportunity for the NETMAN CG to host a poster session on NETMAN.  We have our own poster, that EDUCAUSE can bring to the conference and set up for a 1:30pm poster session.

There is also an opportunity to host a breakfast roundtable from 7:30 to 8:30am that morning.

Are any NETMAN members attending EDUCAUSE Southeast?  Would you be interested in this opportunity to network with your fellow networkers?

Drop me a note, if interested, and I can get you on the agenda for Southeast!


-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-...
March 28, 2013 | Listserv Anonymous User
Message from mark.duling@biola.edu

Hi Keith,

Well at the least I'd say OSPF or anycast isn't something we'd do soon, because we're still building out redundancy in our core infrastructure and such, and we're not even at our own planned ideal point with DNS as we'd planned it out a couple of years ago.  We do have redundant DNS of course (actually Infoblox).

I guess I was partly in amazement that BIND has an opaque forwarder logic and couldn't quite believe it, and also partly wondering if there were an easy way to improve the situation incrementally for the rare circumstance I mentioned.  I still can hardly believe BIND has an internal operating logic that is apparently entirely opaque unless you use a sniffer on the dns server.

But in the less than near future we're always open to using anything that would help us build a more resilient core, internet, and dns...
March 11, 2013 | Gonzalo Cervantes

Serge,
Aerohive is pretty good about letting you test drive their WAPs. I  did a small trial with an AP and they have pretry good reporting and a good RF deploying tool right out of the box. The AP is easy to configure right out of the box but it ultimately comes down to how you feel about cloud controller management. It will easily make it to your wifi vendor shortlist.
The closest competitor is Cisco's newly acquisition Meraki.

Thanks,

Gonzalo Cervantes

Barnard College
Associate Director of Networks, BCIT
Elliott Lower Level
Tel. 212.854.8795
Fax. 212.854.3606
www.barnard.edu/bcit

《Sent from mobile device》

On Mar 11, 2013 6:42 PM, "KUENY Serge" <net57@free.fr> wrote:
...
March 10, 2013 | Scott Allen

·        Satisfaction/disappointment- what do you like and not?

·        Yes – it just keeps working and it runs on VMs.

·         

·        How long have you used Juniper? How long do you expect to keep going with them for RADIUS?

·        At least five years and likely at least another three-five.

·         

·        How robust do you find the reporting features? Anything not there that you rely on other sources to get?

·   ...

March 5, 2013 | Dennis Bohn
Hello colleagues,
We are looking into integrating other vendors into what has been till now a 100% Cisco network infrastructure.  Soon we'll test one floor of a building containing two computer labs with an access layer of Juniper (EX2200).  One big test will be to see how the IGMP snooping integrates with the Cisco Distro and Core when trying to multicast image (GHOST, rrgghh) the labs.  In particular, we will be looking to ensure that the multicast is only going to the ports that have requested it.  Has anyone else tested a scenario like this and if so, care to share results either to group or privately.  If it is okay, i'll anonomyze and summarize any information I receive.

The other thing we will be keeping a close eye on is issues with spanning tree.  Our network is PVSTP, which does not communicate with open-standards STP, RSTP, MSTP.  So far in our testing we have not run into problems: all switches forward...
March 1, 2013 | Bruce Klein

I hope job postings are OK as far as list etiquette goes. If not, I apologize.

 

Information Resources at Rowan University has 24 open positions that we’re looking to fill with the best and the brightest. If you know of anyone who may be interested, please pass this along to them. The openings include:

 

-        Server administrators

-        Network administrators

-        Assoc. Director for Network Operations

-        Support Desk / Help Desk

-        DBAs

-      ...

February 23, 2013 | Justin Bennett

Good morning,

 

We're looking to deploy System Center 2012 SP1. I'm interested in deploying a distributed-server installation instead of continuing with a single-server as we currently run.

 

My main question has anyone gone to the distributed-server model specially for Operations? We'd like to split up the roles, but at a minimal standpoint - unlike what is depicted on Microsoft's planning guide. http://technet.microsoft.com/en-us/library/hh298610.aspx

 

We'd be deploying an SQL database dedicated for System Center apps, an Operations Manager server, a Virtual Machine Manager, and an Endpoint Protection Manager server.

 

Thank you,

 

Justin Bennett

...
February 21, 2013 | Michael Phou
We don't use Juniper equipment, but we do use HP and Cisco flashed optics. I've been told these are from the same factories, and have been flashed with the same firmware. I've also heard vendors speak of potential support issues by not using branded optics. 

Not that I would ever do this, but I've heard of folks keeping a single branded optic on hand just for support issues. 


February 20, 2013 | John Miller
Hello everyone, We're doing a full-on overhaul of our authoritative DNS here at Brandeis, and we're trying to figure out how much of our infrastructure to put out in the cloud. We're evaluating different services right now, and would like your thoughts: - Do you host any of your DNS infrastructure with a cloud provider (UltraDNS, Dyn, Amazon Route 53, Rackspace, etc.)? - If so, whom? - How easy is it to use? - Are you satisfied with pricing? - What does your traffic profile look like--# queries, # hosted zones? - Do you also host DNS internally? - How do you handle internal-only DNS (management vlans, windows dynamic update, etc.)? - If you act as a slave for other universities/other nameservers, is that information housed in the cloud as well? Any feedback you can provide would be greatly appreciated! John -- John Miller Systems Engineer Brandeis University johnmill@brandeis.edu ********** Participation and...
February 20, 2013 | Listserv Anonymous User
Message from paul.keck@usg.edu

On Tue, Feb 19, 2013 at 01:33:27PM -0500, Benjamin Parker wrote: > Hi All, > We are in the planning phases of a new data center. Part of this will be making changes to clean up and organize our wire. What color schemes do you use and would you make any changes after the fact? At another job a while back I made the attempt to standardize on cable colors in a small server room. I bought 100 each of red, yellow, and blue, half 3ft and half 6ft. I don't remember exactly which ones I ran out of first, but since it was a rush I ended up having to use some grey cables I had around and then ask the money guy for more cash. While waiting for cash I then ran out of some other length/color and the money guy wanted to know why I needed money for cables when I had 200 cables in a box. Again I was in a rush and used some cables of the wrong color because I had little choice. After another failed appeal to the money guys, I started using...
February 20, 2013 | Tim Cappalli
Hello,
 
Just curious if anyone who is running Solarwinds for their network monitoring platform allows access to the web interface from off-campus without VPN.
 
Specifically we're looking at being able to acknowledge an alert from an email on a smartphon without VPN.
 
Thanks
Tim
 
Tim Cappalli  ACMP  CCNA
Network Engineer | LTS NetSys
Brandeis University
x67149 | (617) 701-7149
cappalli@brandeis.edu
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

...
February 19, 2013 | Michael Sinatra
I am passing this on, on behalf of my friends who run the network at Lawrence Berkeley National Lab. LBNL, or Berkeley Lab, is a science research laboratory located adjacent to the UC Berkeley campus. It is not to be (although it often is) confused with Lawrence Livermore National Lab. Both labs are operated for the US Department of Energy, but LBNL is run entirely by the University of California, and does only unclassified research. In many respects it is like an EDU, complete with professors and even students. This is basically a technical lead position, although it does carry some managerial responsibilities. Here's a snippet of the description: Description Berkeley Lab's Information Technology Division provides cutting edge technology in support of the scientific and operational needs of the 4500 staff and thousands of collaborators of the Laboratory. We help to enable some of the most advanced fundamental research in the world by providing the computing tools, networks...
February 12, 2013 | Gregory Fuller
State University of New York at Oswego Network Positions Campus Technology Services at the State University of New York at Oswego is seeking qualified individuals for two positions to assist in the support and maintenance of its campus network. The Network Technicians will report to the CTS Network Manager and will be expected to work with a team of technical support professionals and provide assistance in the following areas: • Provide day-to-day maintenance and support of networking systems. • Conduct routine network diagnostics and monitoring. • Cisco network configuration and support • Maintenance for layers 1-3 of the OSI Model. • Field contact for data wiring, equipment installation and service. • Troubleshoot end user connectivity issues. • Assist in the assignment of network numbers and names. • Maintain records in network management and help desk software. • Assist with implementation and management of IP phone infrastructure. • Support for the telecommunications rooms,...
February 4, 2013 | Tim Tyler

Educause networking,

 

I am curious as to what solutions many of you use for password management.  In particular we are looking for something central that might enforce password changes and compliances relating to AD, ldap, and google (api's).

 

1. Do you require users to change passwords and if so, how often?

 

2. Do you have a system that allows users to obtain a new password automatically if they forget their password or do you simply require them to contact your IT staff?

 

3. Is your solution commercial or in house produced?  If commercial, what solution are you using?

 

4. How many services do you require a password change for (i.e. AD, ldap, Google, etc)?...

January 29, 2013 | Nico Stein

We are using Procera and I can say it’s been pretty good. Does what it’s supposed to kind of just works. I do recommend it.

 

 

Regards,

Nico A. Stein

Network Administrator

The Catholic University of America

 

 

 

January 28, 2013 | Listserv Anonymous User
Message from jemurray@zweck.net

We are looking to purchase a few servers to do performance testing on our 10g links. A handful of our research departments are requesting help with transferring large blocks of data between buildings on campus and over I2. We have experience with tuning servers to max out the 1gb/s links, but 10gb is fairly new to us. Before we dump a bunch of money into servers, I am looking for for anyone to share their experiences with pushing near 10gb/s from a single server. Our goal is more based around bit/per/sec then packets/per/sec (large data transfers). We are comfortable with kernel tuning, jumbo frames, etc. We are interested in specific hardware that has been used to achieve near 10gb/s speeds. If there are any cpu, memory, nic card requirements that are absolute must haves (or ones that you have tested that absolutely don't work). Our standard server vendor is HP. I am looking at the DL380p Gen8 Xeon E5, 16 to 32gb ram, 10gb...
January 28, 2013 | Mearl Danner

We use Monitis.

 

http://portal.monitis.com/

 

Can monitor connections and has agents to monitor thinks like CPU, disk space, etc.

 

Mearl Danner

Systems Programmer

Samford University Technology Services

http://www.samford.edu

 

December 1, 2011 | Bruce Klein

Since everyone has been talking about tools they use today, I thought I’d expand the question of management tools to include NAC. I’m using Bradford Networks’ Campus Manager and I’m looking at a pretty big price tag to upgrade it to meet our capacity needs. What is everyone else using? Are you happy? Is it worth the money?

 

I’m especially interested in anyone using NAC at sites with over 30,000 wired ports and a fairly large wireless network (in my case 1400 Aruba access points).

 

Thanks,

Bruce

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups...
June 5, 2012 | Pete Hoffswell
Hello NETMAN - 

http://www.worldipv6launch.org/ 


We have enabled IPv6 on some of our user networks.  No problems, except for a stray site or two on the Internet that will resolve to IPv6, but not have their servers ready to server on said resolved address.  Naughty naughty!  It seems to be a problem that Happy Eyeballs doesn't help with, either.

What is your organization doing for IPv6 day on Wednesday, if anything?


-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101
********** Participation and...
April 19, 2012 | Joann Williamson

Hi,

We are currently using ATI for our loud speakers on campus.  The ATI system is used for chimes, sirens, and verbalizing emergency broadcast messages over the speakers.  The speakers are loud enough that we hear them inside the buildings.  In the past, ATI has done well at accommodating RAVE into their interface.  We use RAVE for our texting portion.  When we need to text an alert out to our Faculty/Staff and students, we go to the ATI interface and click on some button that invokes RAVE to text out the message.  We love this setup because it gives one interface to our emergency responders.  They don’t have to remember how to logon to this system and that other system when they are in ‘crazy mode’ trying to respond to an emergency. 

 

Now, we have added Alertus.  We are using Alertus to send a pop...

January 9, 2013 | Lee Badman
Wondering if anyone has implemented wired 802.1x as a form of NAC, and if you could briefly describe how you’re using it. Also, would be interested in the administrative burden you feel it either adds or removes.
 
Thanks-
 
Lee Badman
Network Architect
Syracuse University
 
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

November 7, 2012 | Matt Richard
F&M currently has two ISPs, each with a 200 Mb/sec connection. Each connection uses a Gigabit Ethernet handoff. I manage Internet bandwidth with a pair of Packetshaper 10000s in Direct-Standby. I'm looking to upgrade our two ISP links next summer, and I suspect our current solution won't handle our projected needs. We have about 2400 students, and almost all of them live on-campus and use our campus network for residential purposes. The same network also supports the business of the college. In our students' eyes, the role of Internet connectivity has changed over the past few years. Very few students bring a television with them when they move in. For those who do, I suspect the TV spends most of its time connected to a game console. Students generally expect the same level of Internet performance they had at home, when they shared their broadband connection with their immediate family. I'd like to get an idea of what other folks are doing for bandwidth...
November 5, 2012 | Listserv Anonymous User
Message from jstapleton@computer-business.com

If sufficient router memory to hold full Internet BGP tables is a concern, you might want to consider a software-based router, like Vyatta.  Adding memory is cheap and easy when you are dealing with standards-based architecture.

 

Personally, I can’t wait to get one of these $99 software-based routers at my house:  http://www.ubnt.com/edgemax.

provides 145X more Kpps per USD than Cisco; provides 205X more Kpps per USD than Juniper

http://dl.ubnt.com/Tolly212127UbiquitiEdgeRouterLitePricePerformance.pdf

 

From: The EDUCAUSE Network...

July 17, 2012 | James Gutholm
I hope this isn't too far off topic. We are currently recruiting for a Network Engineer position and have gotten a very little response. I'm curious if this is common or is there something objectionable about the position, requirements, pay, etc that might make the position more desirable. We've advertised in the usual big job resources such as Monster and Dice, the local paper, The Chronicle of HE, Educause, etc. Here's the recruitment. http://www.evergreen.edu/employment/jobs/2012-022sm.htm I would appreciate any feedback or advice regarding the position, requirements, pay, etc or recruitment that might bring in good candidates. Thanks, -James James Gutholm Assoc. Dir. Computing and Communications The Evergreen State College 2700 Evergreen Parkway NW , Olympia, WA 98505 360.867.6635 ********** Participation and subscription...
December 1, 2011 | Brian Helman

First off, this is going to get wordy.  My apologies.  Secondly, I know we have a lot of lurkers out there.  Let’s get some of you chiming in on this!  There are no wrong answers.  So..

 

I looked through the archives, and as best I can tell, we haven’t discussed Networking Management/Monitoring Systems in a while.  The last time I see it popping up with any relevancy was in Sept of ’10 .   We recently began switching from using Alcatel gear to  Juniper*.  One issue with this is that Juniper lacks a network management/monitoring platform.  For straight up/down status, I can use anything, but nothing is that simple.   I probably have a metaphysical issue here (not knowing what I don’t know), but here are my current thoughts ..   1) What I know I want/need: Graphical interface that I can drill down campus/building/closet/...
November 14, 2011 | Vlade Ristevski
They were cheaper than bluecat for DNS and DHCP appliances. Also bluecat charges for IPAM. It comes part of Infloblox's solution. I'm not sure if they sell the IPAM solution by itself since we're getting the DHCP/DNS solution.

On 11/14/2011 12:09 PM, Kurtz, Eric wrote:

I see many people are using the Infoblox. What is the pricing like? Are there anything things that you do not like or features that you would like to add?   Also has anyone used their other products like Switch Port Manager? Thoughts?

 

Eric Kurtz
Network Engineer

Office of Information Technology...

November 27, 2012 | Nicholas Urrea

We are currently a Red Hat Enterprise shop. We are looking at other Linux distributions.

Any suggestions?

 

---
Nicholas Urrea
UC Hastings College of the Law

Network and Systems Engineer
Information Technology
e: urrean@uchastings.edu
ext: 4718
helpdesk:
e: helpdesk@uchastings.edu
ph: 415-581-8802

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

May 7, 2012 | Leo Song
Hi, Folks.

We are using Cisco FWSM firewalls at our data centres, and core networks as well. Cisco announced the end-of-life of FWSM in March, and the date of end of SW maintenance release will be September 25, 2013.

For data centres firewalls, it'll probably too disruptive to switch to other firewall platforms. On the core networks, the main functionality that Cisco FWSM provides us is NAT/PAT, instead of applications firewalling which I don't think Cisco FWSM will be able to do so.

One solution for would be to choose the ASA blade or latest ASA appliance, while I am just wondering what firewall platform you are using in your networks, and I am very interested to know your experience of application firewalls, thanks.

--
Leo Song, Senior Analyst & Cluster Lead
Computing and Communication Services - Networking and Security
University of Guelph...
April 6, 2012 | Chris L. Davis

We have traditionally been a Packetshaper shop for a very long time.  I’ve grown a bit dis-satisfied with a number of things over the years, and it looks like we will need to make some fairly expensive upgrades in the not too distant future to one of my shapers. 

 

Plus, my confidence in the deep packet inspection abilities of the shaper is not as high as it once was. 

 

I’m also looking at a next generation firewall and my confidence is much higher in the dpi capabilities of that device for denying stuff like p2p.

 

 

So, that all said, I’ve been looking at a product to equalize my bandwidth more than shape it.  I have seen people on this list mention the NetEqualizer quite often, and would be interested...

December 27, 2011 | Listserv Anonymous User
Message from seanlaurie@hotmail.com

 
what are most institutions doing with content filters not for sensor ship but for block spyware and virus detection.<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

September 13, 2012 | Faye Snowden

Hello Everyone,

Pacific’s network infrastructure (core, distribution and server farm layers) are due for refresh. Currently, the infrastructure consists of single vendor equipment (Cisco). This refresh gives us an opportunity to consider other vendors at the core and distribution. The access, etc. would still remain Cisco. I’m interested in any experiences others have had in diversifying their network infrastructure in this manner. Also, if anyone has an RFP they are willing to share related to a network equipment replacement, I would greatly appreciate being able to review.

Thanks, Faye

 

Faye Snowden, PMP

OIT-Director of Communications Infrastructure

University of the Pacific

Stockton, CA 95211

...
July 31, 2012 | Lee Badman

Apologies for those on multiple lists who may see this twice.

 

The Wireless list members coordinated on bringing the following to life:

 

https://www.change.org/petitions/from-educause-higher-ed-wireless-networking-admin-group

 

Signatures are being gathered until August 10, and then it will be forwarded to Apple via many SEs. In less than 12 hours, over 100 signatures have been added.

 

Please consider signing, as we at least need to make the attemptJ

 

Kind regards,

 

Lee H. Badman

...
January 17, 2012 | Listserv Anonymous User
Message from ahockett@warnerpacific.edu

All ~

 

Upon coming back from a nice break from work, we ended up having issues with a Rogue DHCP server spewing out 192.168.x.x addresses on our student VLAN.  The way our network is setup right now is that we are allowing any and all traffic over our employee VLAN and our student VLAN.  Yes we have plans to clamp this down to truly segment the traffic but this led me to ask the question to the listserv on how do people deal with the rogue DHCP servers?  Also, do you have a plan in place that allows students to have a WAP on the student VLAN without any disruption to the other students’ network access?

 

So the tl;dr :

-          How do you address/find/monitor for rogue DHCP servers...

October 19, 2012 | Brian Helman

 

We are in the early stages of evaluating VPN appliances.  At this time, our requirements are as follows (subject to change):

 

Support for Windows, OSX, Android, iOS, Linux

Multi-group (varying privilege) support

IPSec and/or SSL

Ability to map drives (Windows, OSX); “dropbox” type support for all platforms

AD/AD-LDAP authentication

Ability to provide encrypted configuration (ie, either cert or ability to push a PSK rather than tell people what it is)

Decent reporting features

Support for approximately 200 concurrent users

REASONABILY PRICED

 

If there are other features your VPN has...

October 5, 2012 | Chris L. Davis

My boss asked me a question the other day, or more correctly expressed a desire to be able to do something pretty specific.  He’s tired of being told in casual conversation or in meetings that network performance was (usually) bad at a specific time (now), or more likely at a specific time 2 days ago.  He, of course, asked me if there was any way we could determine this kind of issue across our whole network. 

 

Our network is probably small compared to some of the campuses I’ve seen but still pretty sizeable (couple hundred switches).  So I wondered what other Network Managers do when this question is asked.  Typically if it is asked in an immediate time frame, we scramble and send someone over to the location and by the time we get there, everything is working just fine.  Even for the person originally reporting the problem.  I know...

May 21, 2012 | Paul Crittenden

We are changing from Cisco Clean Access to Impulses Safe Connect for NAC for our student network. Under CCA we did not allow game systems on our network due to the extra work to let them through Clean Access and because of bandwidth usage concerns. With Safe Connect they can be allowed on our network much easier but we still have bandwidth usage concerns.

 

We currently have a 100mb Internet pipe which we are going to increase to 120mb this summer.

 

Do you folks allow gaming systems on your campus network and what impact have you seen on bandwidth usage?

 

Thanks for any input you can provide.

 

Paul Crittenden

Computer System Manager

Simpson College

...
May 1, 2012 | Bruce Marshall

Have anyone looked at the new SkyDrive Sync app for your PC. It allows remote access to all your shared folders including network shares from any browser. This seems to have a huge security implication  Any thoughts.

 

 

Bruce Marshall

Manager, Network/Server Systems

Valencia College

Orlando, Fl  32811

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Group Leaders

Calvin College
Davenport University

Related to this Group...

Close
Close


Annual Conference
October 15–18, 2013
Save the date!

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.

Close

EDUCAUSE Institute
Leadership/Management Programs
Explore More

Career Center

Leadership and Management Programs

EDUCAUSE Institute
Advanced Programs
Project Management

 

Fellowships and Awards

Fellowships
Awards Programs

Getting Involved

Mentoring
Volunteer
Speak at an Event

 

 

Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.

 

Close
Close

Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
 

 

Close

2013 Strategic Priorities

  • Connected Learning
  • Enterprise IT
  • Foundations


Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.