Skip to main content

Community

Connect with others to answer questions, gain new insights, and grow your networking knowledge.

236 Topics
fwd.scott.a
Employee
fwd.scott.aEmployee
asked in Product Discussions
Is adding AI to robots a good idea?

This is both incredibly amazing and absolutely frightening. The cat is extremely out of the bag now. Boston Dynamics put a generative AI into the robot dog Spot. And there are different personalities.

311
davetee
Community Manager
steve
Employee
steveEmployee
posted in Product Discussions
Operational Excellence in the Digital Age (Nov 14 - Atlanta, GA)

If you are in/near the Atlanta area on Nov 14, please join me at this Optm event where I will presenting with other executives from Optm, Infoblox, BigPanda, and LogicMonitor. I’d love to connect in person, and happy to have additional conversations. Event Registration

90
steve
Employee
N
Employee
natEmployee
posted in Product Discussions
Happy Halloween!

We had a fun costume contest for Forward employees and their fur babies. Here are the winners! Our co-founder, Peyman, won Best Costume! Our infra engineer, Manuel, won Most Original Costume! Our apps engineering manager, Gayathri, won Scariest Costume! Gayathri’s dog, Nash, won Best Pet Costume! What do you think of the costumes? Do you have any fun ones to share of your own? 🎃

221
steve
Employee
captainpacket
Employee
captainpacketEmployee
posted in Product Discussions
Attaching instances to multiple VPCs

You can now attach EC2 interfaces to multiple different VPCs in AWS: https://aws.amazon.com/about-aws/whats-new/2023/10/multi-vpc-eni-attachments/ The implications of this are pretty huge - previously to control access (with a firewall, etc) between VPCs you needed to use a Transit Gateway, generally associated with a centralized applicance via a Gateway load balancer. This solution is great and scales very well, but its probably overkill for smaller environments. What if you only have 2-4 VPCs? This solution would work great - simple attach your NVA interfaces to different VPCs and modify your route tables accordingly. This eliminates the cost and complexity of TGWs, keeping all the performance benefits. What use cases can you see for this new functionality? Off the top of my head, you could also provide remote access without using a VPN gateway too. I’m sure there are more. This also models correctly out of the box in Forward as well :)

420
captainpacket
Employee
Mike
Community Manager
MikeCommunity Manager
posted in Videos
Demo Tuesday - 10/24 - It’s not dark magic — it's Forward Enterprise

WHO DARES TO INVESTIGATE THE DARK PRESENCE WITHIN THE NETWORK DURING AN AUDIT? Network modeling illuminates the dark corners of your network, so you don't have to be scared anymore. No boogeyman can derail your network audit because the 'digital twin' models all of your network devices, even the cloud, with mathematically-accurate precision. It’s the single-source of truth trusted by the world's largest networks. It’s not dark magic — it's Forward Enterprise.

140
Mike
Community Manager
G
gschmittRamping Up
asked in Product Discussions
Log into devices using an SSH jump server to connect to a telnet server

Is it possible to use a SSH jump server to log into a Telnet server, and then from there log into each of the devices?

491
V
G
Employee
GaryBEmployee
posted in NQE Discussions
Complex state parsing example using Juniper inventory Part 2

In Part 1 we introduced several techniques for dealing with semi-structured data to parse a Juniper Inventory. In Part 2 we will leverage a few more techniques to parse a more complex output. 1. Let’s setup our test by grabbing the output from the “show chassis hardware” command. remember to use the multi-string block delimiter “”” We have 5 columns Item, Version, Part number, Serial number and Description, but we are only interested in three: Item, Serial number and Description. output = """Hardware inventory:Item Version Part number Serial number DescriptionChassis JN2221837ABC MX960Midplane REV 03 710-013698 TR0123 MX960 BackplaneFPM Board REV 03 710-014974 JZ1111 Front Panel DisplayPDM Rev 03 740-013110 QCS1012345U Power Distribution ModulePEM 0 Rev 07 740-029344 QCS1012346U DC 4.1kW Power Entry ModulePEM 1 Rev 07 740-029344 QCS1012347U DC 4.1kW Power Entry ModuleRouting Engine 0 REV 20 750-054758 CAPS1234 RE-S-2X00x6Routing Engine 1 REV 20 750-054758 CAPS1235 RE-S-2X00x6CB 0 REV 1

1660
G
Employee
G
Employee
GaryBEmployee
posted in NQE Discussions
Complex state parsing example using Juniper inventory Part 1

Sometimes you need to parse out information that is not in the NQE data model for various reasons. It maybe device specific information that is not generalizable across vendors, or not generally useful in dataplane analysis but maybe important for operations. Importing this data is beyond the scope of this post but you can read more about it here: Getting Custom Commands First, I am going to demonstrate how you build up your parsing chops by leveraging a testing approach to NQE, then will demonstrate how this can be applied to your collection data. Setting up your testing. We need to represent the data that our custom command will import into the snapshot. We can represent this by setting a variable to a multiline string using the delimiter ””” output = """Item Version Part number Serial number FRU model numberMidplane REV 03 710-013698 TR0001 CHAS-BP-MX960-SFPM Board REV 03 710-014974 JZ2323 CRAFT-MX960-SPEM 0 Rev 07 740-029344 QZY2122ABCD PWR-MX960-4100-DC-SPEM 1 Rev 07 740-029344 QZ

1630
G
Employee
cariddir
Spotter
cariddirSpotter
posted in NQE Discussions
BFD Checks - Arista & Cisco-IOSXE

This is a check I wrote to check BFD Status on Arista and IOS-XE as a single combined query. Unfortunately, I can’t change the name of the title to include Arista && IOS-XE screenShot /*** @intent BFD State Arista & IOS-XE* @description Add Command 'show bfd neighbors || peers' and report status - apply to EOS and IOX-XE Devices**/ EOS_BFDPattern = ```{DstAddr:ipv4Address} {MyDisc:number} {YourDisc:string} {Interface:string} {Type:string} {LastUp:string} {LastDown:string} {LastDiag:string} {State1:string} {State2:string} {State3:string} {State4:string} ```; iosXE_BFDPattern = ```{ip:ipv4Address} {LD:string} {RD:string} {State:string} {Int1:string}```; // Define EOS FunctionArista_BFD = foreach Device in network.deviceslet Platform = Device.platformwhere Platform.os == OS.ARISTA_EOSlet Outputs = Device.outputsforeach Command in Outputs.commandswhere Command.commandText == "show bfd peers"let parsed = parseConfigBlocks(OS.ARISTA_EOS, Command.response)let matchData = blockMatches(parsed,

1201
M
Employee
GTurner
Employee
GTurnerEmployee
posted in NQE Discussions
Fun with NQE parsing and data extraction.

Many customers often ask me about digging into data, especially when it involves sifting through device status or custom command outputs. Sometimes, it's a piece of cake to handle because the data is nicely structured, but other times, it's like solving a puzzle. Just last week, I was helping out a customer who needed to extract security policy data from their enforcement points to keep tabs on various compliance matters. The data they had to deal with was all over the place – lines of varying lengths, multiple strings scattered within the lines, and positional changes for the data we needed. This got me thinking, and I wanted to share some techniques for handling these tricky data chunks. I can't share the exact customer query with you, but I've thrown together a sample query to show one way of tackling this. Imagine you've got data like this: "Don't teach me how to extract stuff with IP address 10.1.1.1 and float 10 from string." "Please teach me how not to extract stuff with IP addr

2680
GTurner
Employee
cariddir
Spotter
cariddirSpotter
posted in NQE Discussions
NQE Validate DNS Configuration on Arista & Cisco

Audit our DNS configuration on Arista Devices and Cisco Devices - Would like to be able to combine the script as a single check, and started it (Second Code Script), but it’s not working yet, I need a little tutoring. /** * @intent Audit DNS Configuration on Arista * @description Searches through the running configuration for a pattern match. */ DNS_Standard = ["name-server 1.7.7.7 & 1.7.7.8", "dns domain net.xyz.com ", "ip domain lookup source-interface Loopback0"]; AristaPatternDNS =```ip domain lookup source-interface Loopback0dns domain net.xyz.comip name-server vrf default {ipv4Address} ip name-server vrf default {ipv4Address} ```; /* Select a list of devices by vendor */foreach device in network.deviceswhere device.platform.vendor == Vendor.ARISTA || device.platform.os == OS.ARISTA_EOSlet outputs = device.outputsforeach command in outputs.commandswhere command.commandType == CommandType.CONFIGlet response = command.response/* parse out the pattern defined above from the response

1332
cariddir
Spotter
Mike
Community Manager
MikeCommunity Manager
published in Videos
Demo Tuesday 9/26 - Blast Radius

I’m taking the show on the road! Watch how the Blast Radius feature can localize a compromised host in seconds, even while on vacation, with Forward Enterprise. Live from Forward Networks HQ in sunny Santa Clara, California.

331
davetee
Community Manager
Mike
Community Manager
MikeCommunity Manager
published in Videos
Demo Tuesday 10/10 - No one can hear you scream in outer space

No one can hear you scream in outer space when the network is down! Join me to see where forward can help!

120
Mike
Community Manager
Kachow
KachowRamping Up
asked in Product Discussions
Splunk / SIEM Integration

I’d like to use FN APIs to integrate with Splunk and SIEM / Security systems. Has anyone else done this?

1402
GTurner
Employee
mrollin
mrollinRamping Up
asked in Product Discussions
Character Restrictions on Tags

Are there any character restrictions for tags? I would like to use ’ : ‘ in a tag as a namespace but want to be sure there won't be any caveats. I don't see anything in the docs.

474
mrollin
Novak
NovakRamping Up
asked in NQE Discussions
Building new NQE dashboards

Is there a reference to building new dashboards using NQE derived values as inputs?

531
Tyson Henrie
Employee
mrollin
mrollinRamping Up
asked in Product Discussions
How to create SSL Certs for Forward?

How do you create a custom SSL certificate for the fwd web interface?

661
Tyson Henrie
Employee
Kachow
KachowRamping Up
asked in NQE Discussions
Adding additional values as columns

Hello Team, we have an NQE that searches all L2 switches obtains each interface status obtains speed obtains sfp information for all ports in up state. So far, we have the following: foreach device in network.devicesforeach item in device.platform.componentswhere item.partType == DevicePartType.TRANSCEIVER let interface = (foreach interface in device.interfaces where isPresent(findInterface(device, item.name)) where interface.name == findInterface(device, item.name).interface.name select interface)where length(interface) == 1let int = min(interface)select { deviceName: device.name, iface: int.name, speed: int.ethernet.negotiatedPortSpeed, partType: item.partType, partName: item.name,} Is there a way we could extract and add the below underlined in BLUE as additional columns as well? Thanks in advance for your time and help

401
Tyson Henrie
Employee
C
cHaRamping Up
asked in Product Discussions
How to connect external data sources?

Is there a way to connect external sources to a postgres database or consume a postgres DB backup? We cannot collect directly from type 1 encryptors but we can get a backup of the encryptor manager DB

381
Tyson Henrie
Employee
G
gschmittRamping Up
asked in NQE Discussions
Collecting device info based on CSV of IP addresses

I want to feed a list of ~5K IP addresses into forward and track the IP down to whatever info is available (device interface, standby address, device interface neighbor, host). I have two functions that build the lists of records that I need to join by ip address. FromCSV (~5K records) and allKnownIps (~200-300K records) What is the most efficient / elegant way to join essentially join these tables? I tried to build the smaller list first and then build the known IP list only if there is a match and then ran a nested loop csvListIPs = (foreach ip in FromCSV select ip.ipAddr);// List of ~5K IPsallknownIpList = (foreach knownIp in allKnownIps where knownIp.ipAddr in csvListIPs select ip);//Filter for only known IPs in CSVlistforeach knownIp in allknownIpListforeach csvIP in FromCSVwhere knownIp.ipAddr == csvIP.ipaddrselect{}; So I have two questions: Is there a more elegant way to do this? 5K IP's trying to match against the 250K Potential IP's (I have normalized everything so that it's

832
J
Employee
Novak
NovakRamping Up
asked in NQE Discussions
I wrote a useful NQE query with no help! Could it be more efficient?

I finally managed to write a useful NQE query with no help. Yay! This query lists all of the loopback interfaces and their IP addresses. I tested it, and it works. But I am curious if there is a more efficient or elegant way to enumerate the IP addresses. Seems to me a little clumsy. getSubIfaceIpInfos(iface) = foreach subIface in iface.subinterfaces foreach subnet in subIface.ipv4.addresses select subnet; foreach device in network.devicesforeach interface in device.interfaceswhere interface.loopbackModelet ifaceSubnets = getSubIfaceIpInfos(interface) select { deviceName: device.name, interfaceName: interface.name, ipAddress: foreach subnet in ifaceSubnets select ipSubnet(subnet.ip, subnet.prefixLength)}

881
J
Employee
G
gschmittRamping Up
asked in NQE Discussions
Prettify is removing parenthesis

I am trying to use a where filter like so: where (a && b) || c Prettify keeps removing the parenthesis. Doesn’t this mess with the order of operations?

252
G
C
cHaRamping Up
asked in Product Discussions
Path Search Ranking

For Path Search Ranking, will devices that have a more specific subnet always rank higher than devices with a less specific subnet as the ingress device for a path?

481
rob
Employee
J
JenRamping Up
asked in Product Discussions
How do we license HA Active/Standby clusters?

We want to run two clusters in HA Active/Standby. We deployed one cluster yesterday and licensed it. We deployed the second cluster today. I am unclear on how we would license the second cluster. I assume we need a second deployment, but can I apply the same license to that new deployment, or would it require a new license as well?

181
m5lbenoit
Employee
Lane
LaneRamping Up
asked in NQE Discussions
Inventory device state from Description field

I am trying to use the harvest the INVENTORY device state file but target the Description field, but I am unsure on on how to do that so that I can select it. I have the following: import "External/Juniper-EoS";foreach device in network.deviceswhere device.platform.vendor == Vendor.JUNIPERlet outputs=device.outputsforeach command in outputs.commandswhere command.commandType == CommandType.INVENTORYlet platform = device.platformwhere isPresent(platform.model)foreach part in platform.componentswhere isPresent(part.serialNumber) select { deviceName: device.name, model: platform.model, part: part.serialNumber, violation: if part.partId in juniper_eos then true else false}

621
A
Employee

Most helpful members this week

  • Community Champ Award
    CarlBhas earned the badge Community Champ Award
  • Community Champ Award
    Christopherhas earned the badge Community Champ Award
  • NQE Collaborator
    Rohit_809 Kumarhas earned the badge NQE Collaborator
  • Community Champ Award
    Vladi Bhas earned the badge Community Champ Award
  • Community Champ Award
    dakotagloryhas earned the badge Community Champ Award
Show all badges

Popular tags

Terms of UseCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings