Archive for the 'Cisco' Category

Why GRE is needed for IPSec VPN?

Friday, July 16th, 2010

I paused a bit during my QoS study and hitting this qos pre-classify command. My question is, why would we need GRE/Tunnelling to create IPSec VPN? I managed to get my IPSec VPN working without GRE/Tunnelling and it keeps me even wondering why. I’d been searching everywhere but I guess I didn’t get the right [...]

No More max-reserved-bandwidth

Wednesday, June 30th, 2010

The max-reserved-bandwidth command is not supported in Cisco IOS Release 12.2SR or in 12.2SX. It is supported in 12.4T, but only up to the 12.4(20)T release in which HQF functionality was integrated. http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1054626 This investigation by Pavel Bykov explains it all.

MLP LFI on Serial Link; Configuration Example

Wednesday, June 16th, 2010

!!! R4 interface Multilink1 bandwidth 128 ip address 155.13.45.4 255.255.255.0 ip rip advertise 10 fair-queue ppp multilink ppp multilink interleave ppp multilink group 1 ppp multilink fragment delay 10 end interface Serial0/1/0 bandwidth 128 no ip address encapsulation ppp ip tcp header-compression load-interval 30 no fair-queue clock rate 128000 ppp multilink ppp multilink group 1 [...]

Loopback interface in OSPF

Monday, March 29th, 2010

What is so special about a loopback interface in OSPF? For example that we create a loopback9 – 9.9.9.9/32 and lo99 – 99.99.99.99/24 and make these addresses available throughout the OSPF domain. There are two ways to make these addresses available throughout the OSPF domain. The first one is to include this to the OSPF [...]

OSPF-4-ASBR_WITHOUT_VALID_AREA

Thursday, March 18th, 2010

A Stub area is where External LSA (type 5) and ASBR Summary LSA (type 4) are not flooded. If we happen to use command no-summary then it will be a totally-stub-area which besides LSA type 5 and type 4, it will not flood Network Summary LSA (type 3). From the above understanding, we cannot do [...]

Cisco ACL cannot have more than 10 ports?

Wednesday, March 17th, 2010

It’s good to know that rather thatn explicitly line up the code for each port we can actually use one line to define all of those ports as shown below. ip access-list ext MORE_THAN_1_PORTS permit ip any any eq 1 permit ip any any eq 2 permit ip any any eq 3 permit ip any [...]

OSPF adjacency on Point-to-Multipoint; What could go wrong?

Tuesday, March 16th, 2010

Brian McGahan @ InternetworkExpert warned this in his CoD. During the establishment of Point-to-Multipoint protocol you would only expect 1 adjacency from spoke to hub. However, the spoke could ended up trying to establish adjacency to another spoke. It’s good experience to know that my R1 (spoke) is keep informing that its adjacency to R2, [...]

OSPF Area Transit Capability

Monday, March 15th, 2010

The OSPF Area Transit Capability feature is enabled by default. RFC 2328 defines OSPF area transit capability as the ability of the area to carry data traffic that neither originates nor terminates in the area itself. This capability enables the OSPF ABR to discover shorter paths through the transit area and forward traffic along those [...]

Reloading config from Dynamips/Dynagen

Saturday, March 13th, 2010

I was having difficulty to save configuration after few labs I did with Dynamips. Saving config and reload the dynamips doesn’t work and I previously I have to copy and paste all the latest config I’ve had. There is actually a trick to save config in Dynamips to text files (.cfg) and after starting the [...]

Dialer Persistent

Wednesday, February 3rd, 2010

What did I do wrong when I was configuring dialer watch as a backup link. All I could see was this. 003855: .Feb 3 19:45:41.736 AEDT: DDR: Dialer Watch: watch-group = 8 003856: .Feb 3 19:45:41.736 AEDT: DDR: network 10.10.10.0/255.255.255.252 UP, 003857: .Feb 3 19:45:41.736 AEDT: DDR: primary UP 003858: .Feb 3 19:45:42.736 AEDT: Ce0/0/0 [...]