Monitoring computer networks! (The Network Berg Stream Ep.10)

[@RoliMchau]

Hey Network Berg, Great video man!

[@zadekeys2194]

Thank you for this! Do you use any tools to create a SIEM / Soc / noc, using syslog data?

[@tiaanventer9065]

Hey Meneer, Awesome Labs love it. Will hoor of jy jou Eve Labs soos bv hierdie een kan share sodat ons bietjie met dit kan speel? Ek moet se ek het al n klomp van jou labs gebruik om netwerke te verbeter en beter te verstaan

[@TheNetworkBerg]

Hi Tiaan, dankie ek waardeer die ondersteuning! Ek het tans nie enige labs wat ek uit deel nie, ek wil graag my labs aan members gee wat my "join" op KZbin, maar daai is nog 'n work in progress.

[@nikolashuminosky6987]

Hey Network Berg, your topology is great, i'll prefer to build my ISP same as your one,but i found for Mgt would be extremely hard, working remotely using VPN. Yes i can go Mgmt VRF, however is going to be complicated

[@TheNetworkBerg]

Management is always a bit of effort depending on network sizes and services that are delivered, especially once you get into things like MPLS and different VRFs. There is always something that you can do to try and make your management easier. Like in this video I created mangle rules from my management network to get to the different VRF just for monitoring. So it should be doable to add the same type of rules for your VPN ranges that connect to one of your routers. Alterative is to be able to VPN into just the one router and connect onto it via ROMON and use its overlay network to manage all your devices. Though maybe I can spend some time on the next stream to see how we can make management for the routers easier :)

[@nikolashuminosky6987]

​ @The Network Berg that would be useful

[@TheNetworkBerg]

Not sure why I can't see your comment about the OSPF you are using for the management routers. Something weird with KZbin. This is actually pretty standard in the ISP world as well. You can basically send all their routes via OSPF to a dedicated "Management" router. This Management router can allow you to remotely manage all the CPE or customer networks that you want to. You can also redistribute your management networks back into the customer VRFs using OSPF. So yeah, I would say it is best practice to do this :)

[@nikolashuminosky6987]

@@TheNetworkBerg let say R2 is VPN server. I can't reach the client which have VRF-Local ip add assign such as CPE-Wireless. in your next video can you show us what would be the solution ?

[@zadekeys2194]

A windows workstation with Wsl2 + Ubuntu + Rdp is a nice free solution that you could use to then utilise the free Linux networking tools.