NetAdmin Newsletter
CPTTM Network Admin newsletter issue #31, Kent Tong

Dear Network Administrators,

This CPTTM NetAdmin newsletter is to bring useful news to you, network administrators in Macau, for references without obligations, so that you can do your jobs easier and better! Hope you like it. if you'd like to unsubscribe or recommend your friends to subscribe, just email me at kent@cpttm.org.mo. Old issues are available here.

Topics in this issue:

Advancing your career as a network/system administratorcareer planning

Most of the time we are swamped in daily issues like fixing problems and etc. But have you considered the bigger picture of how to advance your career? For example, in five years from now, will you be still in the same post doing the work as today? Do you want to become a senior network/system administrator, DBA, help desk manager, information security officer, IT manager, or even IT director or CIO?

You may think these are impossible, but there are actual things that you can do to increase your chances. You first need to see what the gap between your current status and the desired position is. Usually there are several types of gaps:

  • Gap in the breadth of skill. For example, you may be good at Windows server but knows nothing about Exchange or Linux. The easy solution is to write down a simple plan, like, "I will attend a course on Linux in 2010 Q2" and then stick to it.
  • Gap in the depth of skill. For example, you aren't strong enough in Windows server. This gap is much toucher to close. Typically training cannot turn an average cook into a good cook. A way to close this gap is to keep practicing (keep cooking and adjusting for better results) and learn from experts (observe how great cooks do it). A great way to practice is to attempt to answer questions on technical forums and verify the solutions offered by others. For example, commit to attempting one question every week.
  • Gap in aptitude. This is the hard part. If you're used to blaming the tools, your boss, your colleagues or Microsoft instead of solving the problems, then it is difficult to advance to a senior post.

Below are the major skills that I think should be important for each post:

Job title Skills
Senior network administrator Routing, switching, wireless, VoIP, VPN, firewall, IDS/IPS. Ability to ensure availability, security, performance in the architecture.
Senior system administrator Windows, Linux, Exchange, Sharepoint, Apache, virtualization, storage. Ability to ensure availability, security, performance in the architecture.
DBA Oracle, SQL server, MySQL.
Information security officer CISSP, CISA, ISO 27001, computer forensics, risk management, project management.
Help desk manager ITIL, communication (NLP), quality management, human resource management.
IT manager ITIL, communication (NLP), project management, quality management, , human resource management, vendor management, outsourcing management, risk management.
IT director/CIO Ditto, plus the ability to support the CEO to transform the enterprise with IT strategies.

Be careful with RAID5 and SATA disksRAID5

If you're using or going to buy SATA disks to be used by a server, you should be careful in deciding to use RAID5. This is because a SATA disk will encounter an error reading a sector once it has read a certain number of bits. What's the problem with RAID5 then? If one of the disk in a 3-disk RAID5 array fails, once you plugin a replacement hard disk, the two disks must be read from start to end to reconstruct the array. If one of the disk has reached that limit and encounters a reading error, the array will fail to reconstruct.

How likely is it? Many SATA disk has an bit error rate of 1014. It means that the disk will be unable to read a sector if it has read 1014 bits. If the disk is say 1TB in size (1012) which is 8*1012 bits. If you read the whole disk from start to end once, there is a chance of 8*1012/1014=8% that it will be unable to read a sector. During the reconstruction phase, the probably of having exactly one disk failing is  2*8%*92%=14.72%. The actual probably for failure is higher because the probability of both disks failing was not included.

In addition, the larger the disk is, or, the more disks you have in the array, the more likely the reconstruction will fail. For example, if you have six disks and each disk is 2TB, the probability for exactly one of the remaining disks failing during the process is 5*16%*(84%)4=39.8%. Again, the probability of multiple disks failing was not included. It means that once a disk is replaced, RAID5 may be degenerated into no RAID at all.

So, what should you to prevent this problem? There are several solutions that you may consider:

  1. Use RAID6 instead of RAID5. RAID6 uses two disks to store the parity. So, even if a disk can't read a sector during reconstruction, it can still go ahead. The probability for exactly two of the remaining disks failing during the process is (5*4/2)*(16%)2*(84%)3=15.2%.
  2. Buy SATA disks that have a lower bit error rate. There are some offerring 1015 which is ten times better.  The probability for exactly one of the remaining disks failing during the process is 5*1.6%*(98.4%)4=7.37%.
  3. You could buy SCSI disks that achieve a bit error rate of 1016. Of course, they are also much more expensive.

Enterprise router at 1/5 of the cost of Cisco's?Vyatta

We all know that Cisco routers are very expensive. For example, it costs several thousand MOP just to upgrade the IOS to support IP security. But why not use Linux on top of a standard x86 server as a router? To do that, we need to ensure the performance, support and ease of management. Now there is a company that aims to provide these.

Vyatta has put a trimmed down version of Linux on a standard IBM x86 server to create a high end router, at 1/5 of the cost of a similar Cisco router. In terms of permformance, it is rivaling a Cisco 7200 router. In terms of support, it provides all kind of support services up to 7x24 and consulting services. Regarding management, it has a command line interface that looks very similar to IOS, so you will feel right at home. For junior administrators, it has a web-based interface.

Vyatta has won the best of open source networking software award in 2009. As it is open source, you can always try it out yourself to see if it fits your needs.

Upcoming courses for network administrators

Course code Title Start date Duration (hours) Fee (MOP) Remarks
CM360-04-2010-C Microsoft official course: MCITP Enterprise Administrator Program 4/6/10 174 hours MOP9,800 Official Microsoft course
CM243-03-2010-C CISA & CISSP: Becoming an information security auditor/officer 3/12/10 54 hours MOP2,800
CM232.4-04-2010-C CCNP 4 - Optimizing Converged Cisco Networks (ONT) 4/10/10 36 hours MOP4,000
CM240-04-2010-C Implementing a Microsoft SQL Server 2008 Database (6232) 4/17/10 24 hours MOP3,800 Official Microsoft course
CM323.3-03-2010-C Configuring & Troubleshooting Identity & Access Solutions with Win2k8 AD (6426) 3/28/10 24 hours MOP1,400 Official Microsoft course
CM332-04-2010-C Essential Wireless Networking 4/8/10 9 hours MOP500
CM371-03-2010-C ITIL v3 Operational Support and Analysis Capability Course 3/24/10 30 hours From MOP7,800
CM374-04-2010-C CCNA Voice 4/25/10 39 hours MOP5,800

Feedbacks

Any questions, ideas or experiences to share? Contact me at 88980601 or kent@cpttm.org.moWe also have 3 more newsletters: CIO newsletterSoftware developer newsletter and E-flow newsletter.

Until next time, 

Kent Tong

footer