Show Notes Coming Soon.Show Notes Coming Soon.Zigbits Network DesignEmailDownloadNew TabScroll back to topJoin The Zigbits NewsletterEnter your name and email address and I'll send you periodic updates and advice that will help you in your career and life.powered byCome hangout with Zig and the rest of the Zigbits community in our Discord Server.Check out our current Zigbits giveaway here. Free is my favorite color! I love free stuff and I hope you do as well!If you want Zigbits themed merchandise you can check out our store to see Zigbits branded t-shirts, hoodies, mugs, and stickers! Check out the Zigbits store here.More Content for you to enjoy!Do you need a CCIE to get the CCDE?  Do you need a CCIE, spending all of the time and resources in that process ...Get Your License To Design with the CCDE – ZNDP 094  Show Notes Coming Soon.Show Notes Coming Soon.Come hangout with Zig and the rest of the ...Global Scale Network Design with Malcolm Booden – ZNDP 092  Today we are talking about Network Design but at the Global Scale! What do you ...How to Make VXLAN Network Designs Simple, Scalable, and Uncomplicated with Lukas Krattiger – ZNDP 091  This is a 100% technical show, we are diving into the weeds on VXLAN and ...How Abstraction, Orchestration, and True Automation can make your Career Successful with Tim Fiola – ZNDP 090  How Abstraction, Orchestration, and True Automation can make your Career Successful!This is all about making ...Network Design Principle Security – ZNDP 088  Network Design Principle Security!Network Design Principles… we have to know them and leverage them in ...

Show Notes Coming Soon. Show Notes Coming Soon. Zigbits Network Design Email Download New Tab Scroll back to top Join The Zigbits Newsletter Enter your name and email address and I'll send you periodic updates and advice that will help you in your career and life. powered by Come hangout with Zig and the rest of the Zigbits community in our Discord Server. Check out our current Zigbits giveaway here. Free is my favorite color! I love free stuff and I hope you do as well! If you want Zigbits themed merchandise you can check out our store to see Zigbits branded t-shirts, hoodies, mugs, and stickers! Check out the Zigbits store here. More Content for you to enjoy! Do you need a CCIE to get the CCDE? Do you need a CCIE, spending all of the time and resources in that process ...Get Your License To Design with the CCDE – ZNDP 094 Show Notes Coming Soon. Show Notes Coming Soon. Come hangout with Zig and the rest of the ...Global Scale Network Design with Malcolm Booden – ZNDP 092 Today we are talking about Network Design but at the Global Scale! What do you ...How to Make VXLAN Network Designs Simple, Scalable, and Uncomplicated with Lukas Krattiger – ZNDP 091 This is a 100% technical show, we are diving into the weeds on VXLAN and ...How Abstraction, Orchestration, and True Automation can make your Career Successful with Tim Fiola – ZNDP 090 How Abstraction, Orchestration, and True Automation can make your Career Successful! This is all about making ...Network Design Principle Security – ZNDP 088 Network Design Principle Security! Network Design Principles… we have to know them and leverage them in ...

Get Your License To Design with the CCDE – ZNDP 094

Damon Abruzere

This is going to be a similar show theme as our Demystifying Role series, but we are going to highlight the transition Damon has gone through from being a Leading Security Architect to a Leader of People in his new Leadership role.

From An Architect to a People Leader  with Damon Abruzere – ZNDP 093

Malcolm Booden

Today we are talking about Network Design but at the Global Scale! What do you need to think about? What questions should you be asking? What are the most important design decisions, for a Global Scale Network? Click here to find out!

Global Scale Network Design with Malcolm Booden – ZNDP 092

Lukas Krattiger

This is a 100% technical show, we are diving into the weeds on VXLAN and what the critical Network Design Decisions are around that protocol.

How to Make VXLAN Network Designs Simple, Scalable, and Uncomplicated with Lukas Krattiger – ZNDP 091

Tim Fiola

How Abstraction, Orchestration, and True Automation can make your Career Successful!This is all about making you successful in your career with Abstraction, Orchestration, and True Automation. What are they? How can you learn them and immediately start leveraging them in your Career right now!If you want to make your Career successful and you want to know how you should go about leveraging Abstraction, Orchestration, and True Automation immediately, check today’s episode of the Zigbits Network Design Podcast!Helping me today is my good friend and frequent Zigbits Guest Tim Fiola! We are starting right now!

How Abstraction, Orchestration, and True Automation can make your Career Successful! This is all about making you successful in your career with Abstraction, Orchestration, and True Automation. What are they? How can you learn them and immediately start leveraging them in your Career right now! If you want to make your Career successful and you want to know how you should go about leveraging Abstraction, Orchestration, and True Automation immediately, check today’s episode of the Zigbits Network Design Podcast! Helping me today is my good friend and frequent Zigbits Guest Tim Fiola! We are starting right now!

How Abstraction, Orchestration, and True Automation can make your Career Successful with Tim Fiola – ZNDP 090

Why all Network Engineers need Tequila with Tim Fiola?Today we are going to take a break and we are going to talk about something totally off-topic. We are going to talk about Tequila. Something I know nothing about. This is going to be a fun show to break up our normal rhythm of Network Design shows. Hey, and maybe we will tie some network design concepts into this topic as well.If you know nothing about Tequila and your first thought is it’s another automation tool, well this is the show for you! Find out all about it today in this episode of the Zigbits network design podcast.

Why all Network Engineers need Tequila with Tim Fiola? Today we are going to take a break and we are going to talk about something totally off-topic. We are going to talk about Tequila. Something I know nothing about. This is going to be a fun show to break up our normal rhythm of Network Design shows. Hey, and maybe we will tie some network design concepts into this topic as well. If you know nothing about Tequila and your first thought is it’s another automation tool, well this is the show for you! Find out all about it today in this episode of the Zigbits network design podcast.

Why all Network Engineers need Tequila with Tim Fiola – ZNDP 089

Network Design Principle Security!Network Design Principles... we have to know them and leverage them in every network design decision we make. Is Security a Network Design Principle?  Find out today in this episode of the Zigbits network design podcast.Let's Go!

Network Design Principle Security! Network Design Principles... we have to know them and leverage them in every network design decision we make. Is Security a Network Design Principle? Find out today in this episode of the Zigbits network design podcast. Let's Go!

Network Design Principle Security – ZNDP 088

What Truly Matters?Today we are going to take a break and I am going to talk about What Truly Matters.As part of this conversation, I will be doing an impromptu review of my 2021 goals, what I said I would be doing in Jan 2021, and what have I actually done.Do I need to adjust course?  Do I need to totally revamp my goals?  Find out today in this episode of the Zigbits network design podcast.Let's Go!

What Truly Matters? Today we are going to take a break and I am going to talk about What Truly Matters. As part of this conversation, I will be doing an impromptu review of my 2021 goals, what I said I would be doing in Jan 2021, and what have I actually done. Do I need to adjust course? Do I need to totally revamp my goals? Find out today in this episode of the Zigbits network design podcast. Let's Go!

What Truly Matters – ZNDP 087

Daren Fulwell

Joel Desaulniers

How can you get started with AWS Networking right now, today? And why should you?  What's the business benefit, what's the business impact?  Find all of this out and much more in this episode!

Getting started with AWS Networking with Daren Fulwell and Joel Desaulniers – ZNDP 086

Here is our Cisco Live 2021 Network Design Sessions List.  If you are looking to just be a better network designer, or if you are going after your CCNP ENSLD or the CCDE, this show is for you.

Cisco Live 2021 Network Design Sessions – ZNDP 085

Join Host Zig Zsiga and his cast of Industry Experts as they help you with Network Engineering, Network Design, and Network Architecture. If you are just starting out your career in Networking or if you are a 30 year seasoned Networking Professional, this is the place for you! Our topics range from Network Engineering Technical concepts like complex routing and switching, to Network Design Use Cases, to industry certifications like CCNA, CCNP, CCIE, and CCDE, to Evolving Technologies like Cloud, 5G, Automation, Programmability, DevOps, and DevNet.  You should love and be passionate about what you do in life! That’s why part of this show is to help you find the perfect role within Network Engineering, no matter what it is be it a Network Engineer, Network Designer, or Network Architect. This show Demystifies the roles so you can choose the right one for you!  Join the Zigbits Discord Community: https://zigbits.tech/discord   #AttackYourGoals #AttackTheDay #AttackYourLife #MakeProgress

Zig has a ton of info about the Cisco world is enthusiastic about sharing it.  He has a wonderful blog that mirrors the show with additional great content.  He is super nice on the podcast and welcomes audience participation/feedback.

Great CCDE Info

Zigbits Network Design Podcast

Hey Nerds, Geeks, and Ziglets out there.  Today we start our Mini Series on Segment Routing with our Guest Expert Suraj Soni.  We have a lot planned for this Mini Series but today's focus is "Why Segment Routing?" so lets get to it!   Guest Expert: Suraj SoniSoni has been working in our industry for 10 years in multiple verticals to include Enterprise and Service Provider Networks.  He is a triple CCIE in R&amp;S, Sec, and Service Provider.  He has numerous other Vendor Certifications such as F5 and Nokia.  He has been in a number of different roles in his career such as Solution Architect and Network Consultant.  He currently is a Senior Network Manager for a company in Singapore.  Please Welcome my friend Soni to our show today!!  Welcome Soni!Soni joins the Zigbits Network Design Podcast today to start a Mini Series on Segment Routing!  We are going to have about 5 podcast episodes and a number of blog posts to help reenforce the topics we are covering.   Today's topic is "Why Segment Routing"?Why Segment Routing?Segment Routing is a control plan protocol for MPLS.  Segment Routing came into picture because of the evolution of Software Defined Network Solutions (SDN) and the desire to expand said SDN solutions and concepts into the Service Provider arena.Why is LDP and RSVP out, why do we need SR? One reason is because with LDP and RSVP we are statically mapping our policy to an IP address.  In addition with LDP and RSVP we have no visibility of the applications running over the Service Provider Core without implementing some other technology or solution.Sample Use Cases:Voice and Video - Needs low latencyHigher bandwidth needed for file downloadIn both of these use cases, with LDP and RSVP we have static uni-directional configurations of MPLS TE Tunnels which in most cases are never removed even when they are no longer needed.  Lets simplify this to say unnecessary TE Tunnels and complexity.How Segment Routing different:For Segment Routing there is no signally like there is with LDP, RSVP, and MPLS TE.  Segment Routing is a signal free protocol because it instead uses your IGP for signaling.  The IGP floods the Segment Routing information as well when it sends out other information updates. Currently only OSPF and IS-IS are supported.   Segment Routing is not going to resolve these Use Case issues by itself.  Segment Routing is a part of a solution.A Solution can resolve issues, a technology cannot resolve an issue.Open Controller (SDN)Within this entire solution we need a brain or an intelligence center to give us some of the SDN pieces we desire in the Service Provider Core.  This is where we bring in a controller of some sort.   This controller is going to have both the visibility of the customer locations (Data Center, WAN, Campus, etc..) and also the Service Provider Core network.  This allows the controller to have a full End to End visibility of the network.  With the full End to End visibility, the controller is seeing the use cases happen in real time.The controller and application will have a form of integration which we will show in a later segment of this mini series.  This integration will give the controller the ability to fetch the details for the applications in question. Then the controller will find the path throughout the End to End network dynamically keeping measurement of all of the necessary health controls of the different paths and the application requirements (think latency and jitter for voice here as an example).  Once the path is identified the controller tells the application what the path is by giving the application packets the Segment ID list.With this solution, nothing is configured on the routers like MPLS TE or RSVP.  The only requirement on the routers is to properly configure Segment Routing.What if I don't have a controller, you can still use Segment Routing, but you will rely on label forwarding, more to come in future Segment Routing Summary

Hey Nerds, Geeks, and Ziglets out there.  Today we start our Mini Series on Segment Routing with our Guest Expert Suraj Soni.  We have a lot planned for this Mini Series but today's focus is "Why Segment Routing?" so lets get to it!    Guest Expert: Suraj Soni Soni has been working in our industry for 10 years in multiple verticals to include Enterprise and Service Provider Networks.  He is a triple CCIE in R&amp;S, Sec, and Service Provider.  He has numerous other Vendor Certifications such as F5 and Nokia.  He has been in a number of different roles in his career such as Solution Architect and Network Consultant.  He currently is a Senior Network Manager for a company in Singapore.  Please Welcome my friend Soni to our show today!!  Welcome Soni! Soni joins the Zigbits Network Design Podcast today to start a Mini Series on Segment Routing!  We are going to have about 5 podcast episodes and a number of blog posts to help reenforce the topics we are covering.   Today's topic is "Why Segment Routing"? Why Segment Routing? Segment Routing is a control plan protocol for MPLS.  Segment Routing came into picture because of the evolution of Software Defined Network Solutions (SDN) and the desire to expand said SDN solutions and concepts into the Service Provider arena. Why is LDP and RSVP out, why do we need SR? One reason is because with LDP and RSVP we are statically mapping our policy to an IP address.  In addition with LDP and RSVP we have no visibility of the applications running over the Service Provider Core without implementing some other technology or solution. Sample Use Cases: Voice and Video - Needs low latency Higher bandwidth needed for file download In both of these use cases, with LDP and RSVP we have static uni-directional configurations of MPLS TE Tunnels which in most cases are never removed even when they are no longer needed.  Lets simplify this to say unnecessary TE Tunnels and complexity. How Segment Routing different: For Segment Routing there is no signally like there is with LDP, RSVP, and MPLS TE.  Segment Routing is a signal free protocol because it instead uses your IGP for signaling.  The IGP floods the Segment Routing information as well when it sends out other information updates. Currently only OSPF and IS-IS are supported.    Segment Routing is not going to resolve these Use Case issues by itself.  Segment Routing is a part of a solution. A Solution can resolve issues, a technology cannot resolve an issue. Open Controller (SDN) Within this entire solution we need a brain or an intelligence center to give us some of the SDN pieces we desire in the Service Provider Core.  This is where we bring in a controller of some sort.   This controller is going to have both the visibility of the customer locations (Data Center, WAN, Campus, etc..) and also the Service Provider Core network.  This allows the controller to have a full End to End visibility of the network.  With the full End to End visibility, the controller is seeing the use cases happen in real time. The controller and application will have a form of integration which we will show in a later segment of this mini series.  This integration will give the controller the ability to fetch the details for the applications in question. Then the controller will find the path throughout the End to End network dynamically keeping measurement of all of the necessary health controls of the different paths and the application requirements (think latency and jitter for voice here as an example).  Once the path is identified the controller tells the application what the path is by giving the application packets the Segment ID list. With this solution, nothing is configured on the routers like MPLS TE or RSVP.  The only requirement on the routers is to properly configure Segment Routing. What if I don't have a controller, you can still use Segment Routing, but you will rely on label forwarding, more to come in future  Segment Routing Summary

ZNDP 41 – Why Segment Routing with Suraj Soni

Hey Nerds, Geeks, and Ziglets out there.  Today’s show is covering Intent Based Networking, its a market term, a sales term, and potentially much more but before we start lets introduce our guest expert, my good friend Phil Gervasi.

ZNDP 42 – Intent Based Networking With Phil Gervasi

For today's Zigbits Network Design Podcast we start a Design Case Study Series with my friend Daren Fulwell.  In this first installment we set the stage for this Design Case Study Series, highlighting the constraints, requirements, and over arching architecture model used to solve the business priorities and business outcomes the customer was looking to achieve. Lets dive into it now!

ZNDP 036 – Design Case Study with Daren Fulwell – Part 1 The Overview

Nick Russo

The Iconic Mr. Nick Russo joins us once again for today's topic of Wireless QoS Design! Today Nick and I talk about QoS, RFC 4594, Wireless QoS, RFC 8325, WMM, UP values, DCF, TXOP, Wireless High Density, Wireless High Demand, and much more!  We also highlight an issue around vendor endpoints not marking Wireless Voice traffic the way you would expect!  Hold on to your seats folks, we are live in 3...2...1!!!

ZNDP 035 – Wireless QoS Design with Nick Russo

I am back!!  Sorry it's been so long.  I went MIA for a bit, but I am back today with a new episode of the Zigbits Network Design Podcast!  Today I will be highlighting the Benefits of SD-WAN, vendor agnostically!! :)  Enough jabbering, lets get on with the show! :)

ZNDP 40 – Benefits of SD-WAN

In Today's episode, we are going to cover Design Documents.  I recently had a number of coaching sessions where design documents were discussed.  I then attempted to remember how I learned about all of the Design Documents that I have seen, written, and peer reviewed over my career, but I couldn't find a good answer other than experience.  Well today we are going to shed some light on what I would call the most common Design Documents our there.  Lets get started.

ZNDP 039 – Design Documents

In today's installment we have an Ask Zig episode.  Roy from Virginia sent in the following question: "My job isn’t challenging or providing me needed experience, what should I do?"  Hear the answer in today's episode!!

ZNDP 038 – Ask Zig – My job isn’t challenging or providing me needed experience, what should I do?

A little under the weather today and I apologize for this episode publishing a few days late.  Today we have an Ask Zig Episode. Rob from Tampa Florida asked this question on LinkedIn. "Do you think that pursuing CCIE data center makes as much sense as it used to?"  Hear the Answer in today's episode!

ZNDP 037 – Ask Zig – Do You Think The CCIE DC Makes Sense?

Here I talk about Keeping it simple stupid... AKA KISS! Simplicity is a Network Design Principle, and it includes managing the complexity level of the network designs we are creating. I go into some detail on this network design principle with real-world, raw examples in this show. This is a must listen to episode for all Network Engineers, Network Designers, and Network Architects!Check it out!

Here I talk about Keeping it simple stupid... AKA KISS! Simplicity is a Network Design Principle, and it includes managing the complexity level of the network designs we are creating. I go into some detail on this network design principle with real-world, raw examples in this show. This is a must listen to episode for all Network Engineers, Network Designers, and Network Architects! Check it out!

Keeping it Simple Stupid – Network Design Principle Simplicity – ZNDP 079

In Today's episode we are highlighting a process to determine Business Requirements, Business Priorities, Business Drivers, Business Outcomes, Business Capabilities, and Business Solutions.  If you follow this process, at the end you will know how to create a Business Plan for your organizations and customers that they can leverage for the next 1, 3, 5, and 10 years!  Lets get started my friends!

ZNDP 050 – Business requirements

In Today's episode we are completing a deep dive after action report on our 2019 Goals, setting up our 2020 goals, and talking about whats been happening the last few months. We also talk about Cisco Live Europe thats happening next week.  Lets get into it shall we!! :)

ZNDP 049 – 2020 Goals and Updates

Jason Gooley

This part 2 of our 2 part series featuring a Real Talk with my good friend Jason Gooley. Jason is the founder of MetalDevOps, a dual CCIE (RS and SP), an author of a number of Cisco Press books, a Distinguished Cisco Live Speaker and a true Leader and Pioneer in our industry.

ZNDP 048 – Real Talk With Jason Gooley – Part 2

Mohamed Radwan

CCDE Simulator!! Yep I said that right! Today we are going to highlight, discuss and review Mohamed's CCDE Simulator. Years ago I thought of creating my own CCDE Simulator but honestly never got around to it. With that said, today we get to have a first hand view in video format of this CCDE simulator that Mohamed has built.

ZNDP 047 – CCDE Simulator with Mohamed Radwan

This part 1 of a 2 part series that features a Real Talk with my good friend Jason Gooley. Jason is the founder of MetalDevOps, a dual CCIE (RS and SP), an author of a number of Cisco Press books, a Distinguished Cisco Live Speaker and a true Leader and Pioneer in our industry.

ZNDP 046 – Real Talk With Jason Gooley – Part 1

In Today's episode we are highlighting Zero Trust. We are going to discuss what is and what it isn't.  We are then going to talk about the specific steps to start your journey towards a Zero Trust world. Lets jump in my friends!

ZNDP 045 – Zero Trust

In Today's episode we are highlighting Unified Network Fabric, or UNF. Unified Network Fabric is not a vendor solution, it is not a marketing pitch (at least not yet)… it is a transformational concept that we will explain in detail that fully meets business priorities, requirements and goals. Lets Dig in my friends

ZNDP 044 – Unified Network Fabric

I usually have this podcast published and released weeks before Cisco Live US so that all of you have a chance to to review it and make your session schedule adjustments.  Well this year there was some uncertainty on what was the future of the CCDE. With no CCDE Techtorials, a number of us in the community were waiting to hear what was going to happen with this certification.  I am very happy to state "The CCDE is not dead!!"

ZNDP 043 – Cisco Live US 2019 Network Design and CCDE Focused Sessions

Tim McConnaughy

We are joined today with my good friend Tim McConnaughy and he brings us our design case study for today's show! This show is all about Data Center Interconnect Design, its a design use case with BGP.  There is BGP, eBGP, and iBGP. This is a real customer solution deployed today in the wild so lets get into it!!

ZNDP 034 – Data Center Interconnect Design Use Case with BGP With Tim McConnaughy

The Iconic Mr. Nick Russo joins us once again for today's topic of CI / CD ... See Why?! Today we are picking up where Nick and I stopped in ZNDP Episode 30 - Designing for DevOps, if you didn't get a chance to listen to that episode yet you can find it at zigbits.tech/30, If you need some context around DevOps you should definitely listen to Episode 30. For today's topic we are discussing CI/CD which is Continuous Integration / Continuous Delivery/Deployment. And we are live in 3...2...1!!! :)Continuous Integration in CI/CDTraditionally, developers would work in their own feature/topic branches for months, then deal with what is called "merge hell" towards the end of the project when entering the "integration testing" phrase. This is typically weeks or months as combining many silos of work is fraught with problems. This goes way past software development; the "divide and conquer" approach for any complex project is best accomplished by continuous lateral communication. CI means merging code together regularly (daily) which kicks off a comprehensive set of tests to ensure code functionality and quality. CI provides immediate feedback as to any problems that arise.Commonly associated with software development, but can be applied more generically. In this use case, to a complex Ansible library used at a large customer.Continuing from last time (ZNDP Episode 30), we discussed our specific purpose, along with the processes and tools to support it. How do we ensure quality? How do we know the machine built the right product? We checked the inputs, what about the fabrication steps?Consider an automotive assembly operation (way overly simplified). First build the frame, then put the wheels on, then the body, then the glass. If the frame is defective, why put the wheels on? Let's try to achieve "Quality at the source" through all the integration steps. This runs whenever code is committed or merged.The CI Process in CI/CD:1. Lint all the code. Look for syntax/styling issues, and static code analysis to detect security threats. This takes seconds. Fail fast!2. Unit (filter) tests. Execute the individual units locally to ensure they function.3. Role tests. Roles typically rely on filters, so run those against some virtual devices.4. Playbook tests. Playbooks typically rely on roles, so run those against some virtual devices. For cost/runtime savings, you can stub out the virtual devices and provide mock data to the rest of the playbook, but this is less effective. This takes tens of minutes.It usually doesn’t make sense to continue to the next step if a previous one fails. For example, if static code analysis reveals a security flaw, executing the code may pose a security risk.Bonus feature: CI integrates with chat programs (chatops) to notify developers on-the-fly about activities. New comment/issue, code committed, pipeline pass/fail, etc. Common chat tools like Slack, Ryver, and Mattermost are used for this.Consider even more creative examples, such as Nick's OSPF Cisco Live discussion. Configs and markdown READMEs are up on github. Here is Nick's Github Repository link. There is no real code here, just text documents and a diagram. Nick's Troubleshooting OSPF - BRKRST-3010 Cisco Live Session: - Session Presentation- Video RecordingWhat's the value of CI in CI/CD?First, linting the markdown documents ensures they look fresh and high quality. Second, maybe we can do some basic quality checking of the device configurations. There are 19 devices in the lab, and there are two folders (final and initial configs) each with 19 configs, for a total of 38. We can ensure that there are exactly 38 config files. We can also search the files for critical information, such as the author's name and email (for assistance/questions). Last, we can search the files to ensure the hostname of the device (R1) is the same as the file filename (R1.txt) once the file extension is removed.

The Iconic Mr. Nick Russo joins us once again for today's topic of CI / CD ... See Why?! Today we are picking up where Nick and I stopped in ZNDP Episode 30 - Designing for DevOps, if you didn't get a chance to listen to that episode yet you can find it at zigbits.tech/30, If you need some context around DevOps you should definitely listen to Episode 30. For today's topic we are discussing CI/CD which is Continuous Integration / Continuous Delivery/Deployment. And we are live in 3...2...1!!! :) Continuous Integration in CI/CD Traditionally, developers would work in their own feature/topic branches for months, then deal with what is called "merge hell" towards the end of the project when entering the "integration testing" phrase. This is typically weeks or months as combining many silos of work is fraught with problems. This goes way past software development; the "divide and conquer" approach for any complex project is best accomplished by continuous lateral communication. CI means merging code together regularly (daily) which kicks off a comprehensive set of tests to ensure code functionality and quality. CI provides immediate feedback as to any problems that arise. Commonly associated with software development, but can be applied more generically. In this use case, to a complex Ansible library used at a large customer. Continuing from last time (ZNDP Episode 30), we discussed our specific purpose, along with the processes and tools to support it. How do we ensure quality? How do we know the machine built the right product? We checked the inputs, what about the fabrication steps? Consider an automotive assembly operation (way overly simplified). First build the frame, then put the wheels on, then the body, then the glass. If the frame is defective, why put the wheels on? Let's try to achieve "Quality at the source" through all the integration steps. This runs whenever code is committed or merged. The CI Process in CI/CD: 1. Lint all the code. Look for syntax/styling issues, and static code analysis to detect security threats. This takes seconds. Fail fast! 2. Unit (filter) tests. Execute the individual units locally to ensure they function. 3. Role tests. Roles typically rely on filters, so run those against some virtual devices. 4. Playbook tests. Playbooks typically rely on roles, so run those against some virtual devices. For cost/runtime savings, you can stub out the virtual devices and provide mock data to the rest of the playbook, but this is less effective. This takes tens of minutes. It usually doesn’t make sense to continue to the next step if a previous one fails. For example, if static code analysis reveals a security flaw, executing the code may pose a security risk. Bonus feature: CI integrates with chat programs (chatops) to notify developers on-the-fly about activities. New comment/issue, code committed, pipeline pass/fail, etc. Common chat tools like Slack, Ryver, and Mattermost are used for this. Consider even more creative examples, such as Nick's OSPF Cisco Live discussion. Configs and markdown READMEs are up on github. Here is Nick's Github Repository link. There is no real code here, just text documents and a diagram.  Nick's Troubleshooting OSPF - BRKRST-3010 Cisco Live Session:  - Session Presentation - Video Recording What's the value of CI in CI/CD? First, linting the markdown documents ensures they look fresh and high quality. Second, maybe we can do some basic quality checking of the device configurations. There are 19 devices in the lab, and there are two folders (final and initial configs) each with 19 configs, for a total of 38. We can ensure that there are exactly 38 config files. We can also search the files for critical information, such as the author's name and email (for assistance/questions). Last, we can search the files to ensure the hostname of the device (R1) is the same as the file filename (R1.txt) once the file extension is removed.

ZNDP 033 – CI/CD … See Why? With Nick Russo

Andy Richter

Today's show is all about Cisco ISE Client Authentication Design with Guest Expert Andy Richter, who is a Security Practice Manager and Distinguished Engineer at Presidio. This episode is a follow up episode from ZNDP # 29 - Cisco ISE Authentication Design!  In this episode we are focusing on the Client Authentication piece of the puzzle.  Andy and I talk about Supplicants, PEAP, EAP-TLS, EAP-Chaining, AnyConnect NAM, and much more! So much Tech in this episode so lets get to it!Cisco ISE Client Authentication - Methodologies Overview 	Discussion of general supplicant capabilities and limitations 	Password vs certificate inner methods 	Go over TLS tunnel for outer security - Preventing rogue WLANs 	Server certificate trust design - Wildcard Certs and SAN Certs 	User vs MachineCisco ISE Client Authentication - SupplicantsWindows Native  	GPO 	PEAP 	EAP-TTLS 	EAP-TLS 	Prevent Guest accessAnyconnect NAM 	MIX methods 	EAP-Chaining - EAP-fast overview 	Corp SSID 	Wired SwitchingMac OSX 	MDM/JAMF provisioned  	PEAP 	TLSTerm of the Show: 	What is a Supplicant?Guest Expert: Andy RichterToday we welcome back my good friend Andy Richter as our guest Expert! Andy is a Full-on Cisco ISE Expert, he has written one of the best Cisco ISE Books that I still personally use as a reference today.  He is actually the reason I learned ISE in the first place and he personally taught me some of the basics of ISE day one. He currently is a Distinguished Engineer and Security Practice Manager at Presidio!How to engage with Andy further: 	Twitter: https://twitter.com/quasinerdLinkedIn: https://www.linkedin.com/in/andy-richter-b55a771/Publications: 	Practical Deployment of Cisco Identity Services Engine (ISE)Call to Action: 	What topics would you like us to spotlight on our next Design episode?Mentoring and Coaching with Zig:Through your participation in a healthy mentoring and coaching relationship, you will benefit greatly from the education, the experiences, the influences, leadership and even the resources provided. Learn how you can accomplish more, in one year, than you could accomplish in your career...in your business...and in your life.Accomplish More Now!!Ask Zig:Ask Zig episodes feature answers to the questions that you provide. Yes You! The questions can be technical, business, certification, or personal related.  I can help out in all of these areas and much more.  If you would like your question spotlighted and answered on the next #AskZig episode submit them now!Submit Your #AskZig Question Now!!Provide Feedback 	You can leave a comment on the blog! 	You can leave a voicemail at (617) 913-4103 	You can email us at Feedback@zigbits.techEngage with Zigbits further: 	Subscribe to the podcast on an iPhone or on an Android 	Follow Zigbits on Twitter! 	Follow Zigbits on LinkedIn! 	Follow Zigbits on Facebook!Engage with me further: 	Follow me on Twitter! 	Follow me on LinkedIn!Transparency:This post may contain affiliate links to products or services were I may receive a level of compensation from your actions by following those links. This is seamless to you and does not add any additional cost to the products or services in question. In addition, I do not let any affiliate relationship cloud my judgement or my recommendation of a product or service. My recommendations will always be above reproach.  This is my commitment to you Ziglets!

Today's show is all about Cisco ISE Client Authentication Design with Guest Expert Andy Richter, who is a Security Practice Manager and Distinguished Engineer at Presidio. This episode is a follow up episode from ZNDP # 29 - Cisco ISE Authentication Design!  In this episode we are focusing on the Client Authentication piece of the puzzle.  Andy and I talk about Supplicants, PEAP, EAP-TLS, EAP-Chaining, AnyConnect NAM, and much more! So much Tech in this episode so lets get to it! Cisco ISE Client Authentication - Methodologies Overview 	Discussion of general supplicant capabilities and limitations 	Password vs certificate inner methods 	Go over TLS tunnel for outer security - Preventing rogue WLANs 	Server certificate trust design - Wildcard Certs and SAN Certs 	User vs Machine Cisco ISE Client Authentication - Supplicants Windows Native  	GPO 	PEAP 	EAP-TTLS 	EAP-TLS 	Prevent Guest access Anyconnect NAM 	MIX methods 	EAP-Chaining - EAP-fast overview 	Corp SSID 	Wired Switching Mac OSX 	MDM/JAMF provisioned  	PEAP 	TLS Term of the Show: 	What is a Supplicant? Guest Expert: Andy Richter Today we welcome back my good friend Andy Richter as our guest Expert! Andy is a Full-on Cisco ISE Expert, he has written one of the best Cisco ISE Books that I still personally use as a reference today.  He is actually the reason I learned ISE in the first place and he personally taught me some of the basics of ISE day one. He currently is a Distinguished Engineer and Security Practice Manager at Presidio! How to engage with Andy further: 	Twitter: <a href="https://twitter.com/quasinerd" rel="nofollow" target="_blank">https://twitter.com/quasinerd</a> LinkedIn: <a href="https://www.linkedin.com/in/andy-richter-b55a771/" rel="nofollow" target="_blank">https://www.linkedin.com/in/andy-richter-b55a771/</a> Publications: 	Practical Deployment of Cisco Identity Services Engine (ISE) Call to Action: 	What topics would you like us to spotlight on our next Design episode? Mentoring and Coaching with Zig: Through your participation in a healthy mentoring and coaching relationship, you will benefit greatly from the education, the experiences, the influences, leadership and even the resources provided. Learn how you can accomplish more, in one year, than you could accomplish in your career...in your business...and in your life. Accomplish More Now!! Ask Zig: Ask Zig episodes feature answers to the questions that you provide. Yes You! The questions can be technical, business, certification, or personal related.  I can help out in all of these areas and much more.  If you would like your question spotlighted and answered on the next #AskZig episode submit them now! Submit Your #AskZig Question Now!! Provide Feedback 	You can leave a comment on the blog! 	You can leave a voicemail at (617) 913-4103 	You can email us at Feedback@zigbits.tech Engage with Zigbits further: 	Subscribe to the podcast on an iPhone or on an Android 	Follow Zigbits on Twitter! 	Follow Zigbits on LinkedIn! 	Follow Zigbits on Facebook! Engage with me further: 	Follow me on Twitter! 	Follow me on LinkedIn! Transparency: This post may contain affiliate links to products or services were I may receive a level of compensation from your actions by following those links. This is seamless to you and does not add any additional cost to the products or services in question. In addition, I do not let any affiliate relationship cloud my judgement or my recommendation of a product or service. My recommendations will always be above reproach.  This is my commitment to you Ziglets!

ZNDP 032 – Cisco ISE Client Authentication Design with Andy Richter

The best philosophy podcast episodes. Asking questions about how to live a better life, what it means to be and do good, to the idea of God. This topic includes episodes that bring about important questions that everyone should be asking themselves. Add episodes you're interested into your queue below!

Best Episodes on Practical Philosophy & How To Live

The Best Multi-Part Documentaries, with documentaries on Obama, Federer vs Nadal, the making of Star Wars, Netflix vs Blockbuster and more. Add episodes you're interested into your queue below!