Cabletron 与 Enterasys

在四年半的时间里，这个岗位走过了厂商工程的整段弧线：现场工程与售后支持、系统工程与售前，以及自 1997 年起的认证培训。主题是那个时代的企业 LAN 与 WAN 网络：交换机和路由器、Wi-Fi 与 WLAN、网络管理、NAC 与 UAC，以及状态检测防火墙。正是在这里，解决方案设计、实施、审计、故障排除和升级管理的纪律被首次磨砺，也正是在这里，培训开始进入工作。

作为服务与支持经理回到这条脉络，重点是 Secure Routing 产品线，Enterasys 作为巴西的区域支点。工作把高级别客户支持、复杂故障排除和升级管理与本地产品管理结合在一起。技术层面扩展到涵盖网络管理、NAC 与 UAC、入侵检测与防御，以及 SIEM，贯穿企业交换与路由。Enterasys 后来于 2013 年被 Extreme Networks 收购，从而完成了把这段早期工作与今日仍在教授的平台连接起来的闭环。

None of this happened at a desk. It meant pulling cable under the petrol-ship pier at São Sebastião for Petrobras, alongside the country manager and nearly the entire local team, because the deadline and the late-fee clause left no other option. It meant climbing metal structures to mount antennas at the top, and crawling through tight, dusty spaces, always in full business attire, designer tie included. It meant constant travel by car, plane, and taxi, and waking up more than once not sure which city it was. It also meant meeting a great many people and making friends and acquaintances along the way. The work was physical, relentless, and, in its own way, a privilege.

Where the work went is its own kind of résumé. The customer list ran across the Brazilian economy of the era: the datacentres of national and international banks and credit-card processors, the BM&F futures exchange, and investment and stock-trading brokers; Rede Globo across many sites in Rio de Janeiro and São Paulo, Editora Abril, and print and cable-TV media; Petrobras throughout both states, Votorantim and VCP, and chemical and pharmaceutical industry; airlines, national bus-line operators, insurers, call centres, retail and fast-food chains, construction and development firms; mobile-phone and cable operators; federal, state, and municipal government; and large, geographically distributed university campuses. Few weeks looked alike.

The connectivity of the era deserves recording, because the numbers sound implausible now. The São Paulo office reached corporate headquarters in Rochester, New Hampshire over a 256 kbps private line. That single link carried an entire country operation: mail, file access, internal systems, and whatever else needed the other end. Brazil held 134.141.239.0/24 out of Cabletron's own registered space, and it was possible to reach the internet through the United States over that private line - though in practice the local Brazilian connection carried most of it, at either 2 or 10 Mbps depending on which year is being remembered, and that uncertainty is left standing rather than resolved into a false precision. Dial-up did the rest. The modems were USRobotics Sportsters, replaced as the speeds stepped up through 14.4, 28.8, 33.6 and finally 56k, with a pair of the more expensive Couriers arriving as a gift from a client - which is roughly how anyone outside a corporate purchasing department came to own one.

Returning to the lineage as a services and support manager, the focus was the Secure Routing product line, with Enterasys as the regional focal point for Brazil. The work combined high-level customer support, complex troubleshooting, and escalation management, including the demanding escalations that came in from a key account, Petrobras in São Paulo, with localized product management alongside. The technical surface had grown to include network management, NAC and UAC, intrusion detection and prevention, and SIEM, across enterprise switching and routing. Enterasys was later acquired by Extreme Networks in 2013, closing a circle that connects this early work to a platform still taught today.

One thread from the Enterasys years deserves recording precisely, because it is easy to overstate. This was the height of policy-based networking, Enterasys built its Secure Networks architecture around role-based access and 802.1X, and the work sat in close, constant contact with the demanding world of contact-center networks and the Avaya and Cisco IP-telephony systems running on top of them. The familiarity ran deep, but it was familiarity from the network side. The role was never unified-communications engineering; it carried no telephony certification and no hands-on UC work. What it delivered instead was the layer all of that depends on: a secure, redundant, resilient, monitored, guaranteed always-on superhighway for voice and mission-critical traffic. Being clear about where that line sits is part of describing the work honestly.

One deployment of those years connects two chapters of this record. Enterasys's LAN user access control, reviewed as Sentinel 1.0 in October 2006 and sold as Enterasys NAC after it, admitted an end system only after assessing it, and the assessment engine it called was Nessus, the scanner created by Renaud Deraison and by then Tenable Network Security's product: a Nessus server scanned the endpoint when the Trusted Access Gateway asked, a failed scan put the port into a quarantine policy that allowed nothing but the remediation web page, and a passing one released it. On the other side of the loop sat Enterasys's Dragon intrusion detection and prevention and the NetSight Automated Security Manager, which turned a detected event into a located source and an applied response. Deploying that solution for customers in Brazil, with Nessus doing the assessment, was this record's first contact with Tenable's product, fourteen years before the pre-sales chapter of 2020. The author recalls the Nessus part clearly and the Dragon part less so; the product descriptions here come from Enterasys's own 2008 NAC whitepaper and from the 2006 review of Sentinel 1.0, not from memory.