Monthly Archives: April 2009

IP SLA Bug; Address and Source-interface Usage.

Posted on by
Reply

I found this when I applied an IP SLA and checked it using sh ip sla conf. As you can see, the Target and Source address is reversed. According to Cisco Bug ID CSCsy37122 this will still work as per-configured yet the presentation showing it wrong.

Another precaution is when using command source-interface that will causes some issue according Cisco Bug ID CSCsx79219.

ip sla 1
 icmp-echo 1.1.1.1 source-interface Vlan777

RT01#sh ip sla conf | i Target
Target address/Source address: 0.0.0.0/1.1.1.1

Foreach TCL Script

Posted on by
Reply

I keep forgetting this thing. So I decided to put it here for eternity.

ACL_RTR#tclsh
ACL_RTR(tcl)#
ACL_RTR(tcl)#foreach ACL {
+>ICC_DRT_73650
+>ICC_DRT_73563
+>ICC_DRT_73643
+>ICC_DRT_73590
+>ICC_DRT_73822
+>ICC_DRT_73823
+>ICC_DRT_73617
+>ICC_DRT_73830
+>ICC_DRT_73579
+>ICC_DRT_73594
+>ICC_DRT_73645
+>ICC_DRT_73832
+>ICC_DRT_73618
+>ICC_DRT_73555
+>ICC_DRT_73612
+>ICC_DRT_73591
+>ICC_DRT_73509
+>ICC_DRT_73652
+>ICC_DRT_73537
+>ICC_DRT_73522
+>ICC_DRT_73540
+>} { sh ip access-lists $ACL | i $ACL|133.146.140.(0|32) }
Extended IP access list ICC_DRT_73650
Extended IP access list ICC_DRT_73563
    10 permit ip 133.146.140.32 0.0.0.31 13.14.25.0 0.0.0.255 (8062391 matches)
    30 permit ip 133.146.140.0 0.0.0.31 13.14.25.0 0.0.0.255 (232030 matches)
Extended IP access list ICC_DRT_73643
    10 permit ip 133.146.140.32 0.0.0.31 13.14.25.0 0.0.0.255 (7634102 matches)
    30 permit ip 133.146.140.0 0.0.0.31 13.14.25.0 0.0.0.255 (270829 matches)
Extended IP access list ICC_DRT_73590
Extended IP access list ICC_DRT_73822
Extended IP access list ICC_DRT_73823
Extended IP access list ICC_DRT_73617
Extended IP access list ICC_DRT_73830
Extended IP access list ICC_DRT_73579
Extended IP access list ICC_DRT_73594
Extended IP access list ICC_DRT_73645
Extended IP access list ICC_DRT_73832
Extended IP access list ICC_DRT_73618
Extended IP access list ICC_DRT_73612
Extended IP access list ICC_DRT_73591
Extended IP access list ICC_DRT_73509
Extended IP access list ICC_DRT_73537
Extended IP access list ICC_DRT_73522
Extended IP access list ICC_DRT_73540
    10 permit ip 133.146.140.0 0.0.0.255 13.14.25.0 0.0.0.255 (8666854 matches)
    30 permit ip 133.146.140.0 0.0.0.31 13.14.25.0 0.0.0.255 (342381 matches)

ACL_RTR(tcl)#
ACL_RTR(tcl)#tclquit
ACL_RTR#

Kiwi Cattools

Posted on by
Reply

If you are looking for an application that can pushes config for many of your Cisco devices, Kiwi Cattools will be the perfect one.

It has been around for a while and recently was bought by Solarwinds in January 5th, 2009. But fear not, the freeware version will still be available for download and can use up to 20 devices while for $550 you can get the Enterprise Edition which provides unlimited devices.

I began to play with Kiwi Cattools with 3 devices running under Dynamips.

Starting with registering 3 3640-routers, I needed to define the model, name, and IP Address. The first registration could be cumbersome yet later you can just copy the entry and change the name and IP address assuming the device model and the rest are the same.

After you registered the devices, then you are provided with several built-in activities and it’s just enough to carry on your work.

I tried to push some configuration entries and it went very well. It also reported the activity and show whether it encountered errors.

Besides playing with push-config feature I also played with config comparison. This is a very good feature when you need to find what went wrong with your Change. I know some people swear by his life it can only be done via Excel yet now I found there is a better way to compare your config.

The comparison can also exported to HTML so you can view it on your browser. This is just so great.

I haven’t really try to use it extensively for work but Kiwi Cattools looks really promising.

PS. Yes, I also tried NetworkAuthority Inventory on Linux, but I couldn’t get it to recognize my 3640. Also, when I tried to install it in Windows, even until I finished writing this post, I still need to download the ActiveState Perl to get it working. I’ll try to post it some time.