Building INE's RSv5 topology on CSR1000v

May 23, 2014, 9:08 am

≪ Previous: Foundation Lab 1 - Notes, corrections, etc.

Use this thread for discussion on building INE's CCIE RSv5 topology using the Cloud Services Router 1000v (CSR1000v).

Details of INE's RSv5 topology can be found here.

Check the CSR1000v Data Sheets for specific platform requirements.

This thread is a continuation of the original RSv5 build thread that can be found here.

PLEASE DO NOT POST REQUESTS FOR IOS IMAGES, IT IS ILLEGAL TO PROVIDE YOU WITH THEM UNLESS YOU ALREADY HAVE A VALID CISCO SERVICE CONTRACT.

↧

Telnet without Telnet keyword

January 7, 2015, 2:39 am

≫ Next: EIGRP Unequal Cost Load Balancing (maths)

≪ Previous: Building INE's RSv5 topology on CSR1000v

I'm trying to setup the following scenario.

When i type eg. 1.2.3.4 on the cli, i want it to telnet to that address.

i tried the following but it didn't work

line console 0

transport preferred telnet

How can i achieve this ?

↧

EIGRP Unequal Cost Load Balancing (maths)

January 7, 2015, 12:02 pm

≫ Next: CCIE's do you use other vendors?

≪ Previous: Telnet without Telnet keyword

the SG has

interface GigabitEthernet1.67
 delay 25
!
interface GigabitEthernet1.146
 delay 131
!
router eigrp 100
 variance 5

This question's mathmatics baffles me. I have not done algebra since 1997.

I understand what needs to be done - but I do not underderstand the maths.

The solution guide goes from here (relavtive to this topic - dont worry about equal cost on R1)

The total delay of this path is 40 microseconds, or 4 tens of microseconds. Scaled by 256, R1 would be advertising 1024. Because R3's Feasible Distance of 1024 is equal to R6’s Feasible Distance, this path cannot be considered a Feasible Successor.

is this a typo?

to here:

Because the minimum configurable delay value is 10 microseconds, which is already the default for all Ethernet links, and based on task requirements, we need to modify R6's delay values on its VLAN 67 and VLAN 146 interfaces, so that metric through R1 is five times bigger than metric through R7.

then the formuale - which I do not know how to solve. - was the 250 arbitary?

5 * [Delay(Gi1.9) + Delay(Gi1.79) + Delay(Gi1.67)] = [Delay(Gi1.9) + Delay(Gi1.79) + Delay(Gi1.37) + Delay(Gi1.13) + Delay(Gi1.146)].
5 * [10 + 10 +Delay(Gi1.67)] = [10 + 10 + 10 + 10 + Delay(Gi1.146)]].

I understand that the second line is a simplification of the first - but then how do you get the actual values for the delay on the interface? - It then suggests 250 - but I do not see the algebra workings:

If, for example, we configure delay on R6's VLAN 67 interface to be 250, in simple math we need to configure a delay value of 1310 on R6's VLAN 146 interface. This also means that configuring a variance of 5 will be enough so that both routes for VLAN 9 are installed in the routing table of R6 with the requested load distribution.

- was the 250 arbitary? - or does it have a direct correlation with the feasability condition - and if so how was it calculated? - I dont mean its obviously 25 x 10s of microseconds - I mean was this pulled out of a hat - could we have used. 500 and 2620 ?

250 + 20 = 270 * 5 which correlates to 1310 + 40 = 1350

But how was this worked out using maths to satisfy both the feasability condition and the 5 X load balancing ? guess work - or real algebra?

Thanks !

↧

CCIE's do you use other vendors?

January 14, 2015, 3:33 pm

≫ Next: OSPF Router ID - Which Highest Address Is Used?

≪ Previous: EIGRP Unequal Cost Load Balancing (maths)

I am just wondering, after all the studying people do for the CCIE, and how solid your networking experience is in the technologies and understanding of routing & switching, how many of you guys that are currently CCIE actually work 90% on routers and switches? And how often are they Cisco? I've found that us network engineers are expected now to deploy/manage/troubleshoot:

F5 load balancers
Bluecoat Proxys
Loads of firewall vendors
Phone systems, we use Shoretel
Routers, the company only uses Cisco where I am at
Switches, my company uses Brocade, Juniper, Cisco, & Foundary switches
Wireless, we use Aerohive's and Airtights
DHCP/DNS, we use Infoblox
Packet shapers
Cisco VPN concentrators/Juniper RA/Netscouts
etc etc, the list feels endless

I was just wondering, once you guys got your CCIE, do you get employed/contract to do work that is like 90% Cisco/R&S? Or is it still the same, where you just deal with loads and loads of products?

↧

OSPF Router ID - Which Highest Address Is Used?

January 11, 2015, 12:04 pm

≫ Next: Reliable Policy Routing Error

≪ Previous: CCIE's do you use other vendors?

Connectivity -> R1 int se0/0 to R2 int se0/0 R2 int se0/1 to R3 int se0/1

int se0/0
ip addresss 1.1.1.1 255.0.0.0
no shut
!
int fa0/0
ip address 10.1.1.1 255.0.0.0
no shut
!
!
router ospf 1
network 1.1.1.1 0.0.0.0 area 10
!

int se0/0
ip addresss 1.1.1.2 255.0.0.0
no shut
!
int fa0/0
ip address 20.1.1.1 255.0.0.0
no shut
!
int se0/01
ip addresss 2.2.2.1 255.0.0.0
no shut
!
router ospf 1
network 1.1.1.2 0.0.0.0 area 10
network 2.2.2.1 0.0.0.0 area 0

int se0/1
ip addresss 2.2.2.2 255.0.0.0
no shut
!
int fa0/0
ip address 30.1.1.1 255.0.0.0
no shut
!
!
!
router ospf 1
network 2.2.2.2 0.0.0.0 area 0
!

Now whnen I verify OSPF ajacency, from R2, I am seeing that the router-id is 1.1.1.2. I am confused because I know the router id is the highest ip address of any active interface if not specifically defined by the router-id command. I trie clearing ospf processes but the router id remains as 1.1.1.2.

My other questions now is - when selecting the router id, does it matter what area. I am beginning to think because I have area 0 and area 10, it's now taking the ip of the higher area?

Do the interfaces have to be participating in OSPF instatnce to be cosidered for router id? If it's any active interface regardless; why are they no selecting the router id from the F0/0?

Trying to take exam for CCNA recertification. I relaized that noone addresses these questions when expalining selection of router id.

↧

Reliable Policy Routing Error

January 14, 2015, 3:11 pm

≫ Next: Tuning Packet Buffers

≪ Previous: OSPF Router ID - Which Highest Address Is Used?

Topic: Reliable Policy Routing
PDF page: 256
The program simply does not work as expected.

The correction is as follows:

http://www.youtube.com/watch?v=jDTlylLu_S8

Time= 0:45 to 1:47

↧

Tuning Packet Buffers

January 14, 2015, 2:33 am

≫ Next: 'IPv6 Global Aggregatable Addressing' is incomplete

≪ Previous: Reliable Policy Routing Error

Hi,

what happened with the third bullet point of this task? I don't see it anywhere in the sample solution.

Ensure that there are at least 10 Large and Huge buffers always available.

I assume that we should set the following two commands:

buffers large min-free 10

buffers huge min-free 10

Also, in my version the default values are very different from the sample solution. I'm running CSR1000V Version 15.4(2)S2

Public buffer pools:

Small buffers, 104 bytes (total 1200, permanent 1200):

Middle buffers, 600 bytes (total 900, permanent 900):

Big buffers, 1536 bytes (total 900, permanent 900, peak 904 @ 2d17h):

VeryBig buffers, 4520 bytes (total 100, permanent 100, peak 101 @ 2d17h):

Large buffers, 5024 bytes (total 100, permanent 100, peak 101 @ 2d17h):

VeryLarge buffers, 8248 bytes (total 100, permanent 100):

Huge buffers, 18024 bytes (total 20, permanent 20, peak 21 @ 2d17h):

and this is the final output

Public buffer pools:

Small buffers, 104 bytes (total 2400, permanent 2400):

2399 in free list (200 min, 2500 max allowed)

290308 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Middle buffers, 600 bytes (total 1800, permanent 1800):

1800 in free list (100 min, 2000 max allowed)

553756 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Big buffers, 1536 bytes (total 1800, permanent 1800):

1800 in free list (50 min, 1800 max allowed)

164770 hits, 7 misses, 13 trims, 13 created

0 failures (0 no memory)

VeryBig buffers, 4520 bytes (total 200, permanent 200):

200 in free list (0 min, 300 max allowed)

47464 hits, 0 misses, 1 trims, 1 created

0 failures (0 no memory)

Large buffers, 5024 bytes (total 200, permanent 200):

200 in free list (10 min, 300 max allowed)

1 hits, 0 misses, 1 trims, 1 created

0 failures (0 no memory)

VeryLarge buffers, 8248 bytes (total 200, permanent 200):

200 in free list (0 min, 300 max allowed)

190 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Huge buffers, 18024 bytes (total 40, permanent 40):

40 in free list (10 min, 33 max allowed)

0 hits, 0 misses, 1 trims, 1 created

0 failures (0 no memory)

↧

'IPv6 Global Aggregatable Addressing' is incomplete

January 14, 2015, 2:54 pm

≫ Next: Spanning-tree bug?

≪ Previous: Tuning Packet Buffers

Page 1256

initial configuration files do not contain ipv6 gre tunnel configuration.

↧

Spanning-tree bug?

January 10, 2015, 3:57 pm

≫ Next: INE tokens for sale

≪ Previous: 'IPv6 Global Aggregatable Addressing' is incomplete

I think I have a bug in the lab with spanning-tree. The VLAN 146 spanning-tree instance isn't being built on Sw1, and I remember Brian said the mac address-table and spanning-tree instance is created when you make the VLAN. To share my results, please see below. Sw1 is trunked to Sw4 on both ports fa0/21 and 22. See the outputs below:

SW1#

interface FastEthernet0/21

switchport trunk encapsulation dot1q

switchport trunk native vlan 146

switchport mode dynamic desirable

interface FastEthernet0/22

switchport trunk encapsulation dot1q

switchport trunk native vlan 146

switchport mode dynamic desirable

end

SW4#

interface FastEthernet0/21

switchport trunk native vlan 146

interface FastEthernet0/22

switchport trunk native vlan 146

end

Verification commands on SW4:

SW4#sh int trunk

Port Mode Encapsulation Status Native vlan

Fa0/21 auto n-802.1q trunking 146

Fa0/22 auto n-802.1q trunking 146

Port Vlans allowed on trunk

Fa0/21 1-4094

Fa0/22 1-4094

Port Vlans allowed and active in management domain

Fa0/21 1,146,169

Fa0/22 1,146,169

Port Vlans in spanning tree forwarding state and not pruned

Fa0/21 1,169

Fa0/22 1,169

SW4#sh span int fa0/21

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Desg FWD 19 128.23 P2p

VLAN0146 Desg BLK 19 128.23 P2p self-looped

VLAN0169 Desg FWD 19 128.23 P2p

SW4#sh span int fa0/22

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Desg FWD 19 128.24 P2p

VLAN0146 Desg BLK 19 128.24 P2p self-looped

VLAN0169 Desg FWD 19 128.24 P2p

SW4#

Verification commands on SW1:

SW1#sh span int fa0/21

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Root LIS 19 128.23 P2p

VLAN0021 Desg LIS 19 128.23 P2p

VLAN0022 Desg LIS 19 128.23 P2p

VLAN0121 Desg LIS 19 128.23 P2p

VLAN0122 Desg LIS 19 128.23 P2p

VLAN0124 Desg LIS 19 128.23 P2p

VLAN0221 Desg LIS 19 128.23 P2p

VLAN0222 Desg LIS 19 128.23 P2p

VLAN0239 Desg LIS 19 128.23 P2p

SW1#sh span int fa0/22

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Altn BLK 19 128.24 P2p

VLAN0021 Desg LIS 19 128.24 P2p

VLAN0022 Desg LIS 19 128.24 P2p

VLAN0121 Desg LIS 19 128.24 P2p

VLAN0122 Desg LIS 19 128.24 P2p

VLAN0124 Desg LIS 19 128.24 P2p

VLAN0221 Desg LIS 19 128.24 P2p

VLAN0222 Desg LIS 19 128.24 P2p

VLAN0239 Desg LIS 19 128.24 P2p

!!I then checked the spanning-tree instance for vlan 146

SW1#sh span vlan 146

Spanning tree instance(s) for vlan 146 does not exist.

!!I then checked the vlan database to ensure it's actually there and it is.

SW1#sh vlan brief

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4

Fa0/5, Fa0/6, Fa0/7, Fa0/8

Fa0/9, Fa0/10, Fa0/11, Fa0/12

Fa0/13, Fa0/14, Fa0/15, Fa0/16

Fa0/17, Fa0/18, Gi0/1, Gi0/2

21 VLAN0021 active

22 VLAN0022 active

121 VLAN0121 active

122 VLAN0122 active

124 VLAN0124 active

146 VLAN0146 active

221 VLAN0221 active

222 VLAN0222 active

239 VLAN0239 active

So until this spanning-tree instance is created, there is a loop in my network. I also had problems creating this actual spanning-tree instance. See below.

SW1(config)#spanning-tree vlan 146 root primary

SW1(config)#interface Vlan146

SW1(config-if)# ip address 1.1.1.1 255.255.255.252

SW1#sh span vlan 146

Spanning tree instance(s) for vlan 146 does not exist.

Only when I physically assigned this to a layer2 switchport did the spanning-tree instance get created.

SW1(config)#interface FastEthernet0/19

SW1(config-if)# switchport access vlan 146

SW1(config-if)# switchport mode access

SW1#sh span vlan 146

VLAN0146

Spanning tree enabled protocol ieee

Root ID Priority 24722

Address 0022.be7b.bc00

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24722 (priority 24576 sys-id-ext 146)

Address 0022.be7b.bc00

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Fa0/19 Desg LIS 19 128.21 P2p

So when I got this spanning-tree instance created now on sw1, I still was having problems on Sw4.

!! I started by shutting all ports down except fa0/21 and 22.

SW4#sh int status

Port Name Status Vlan Duplex Speed Type

Fa0/1 notconnect 1 auto auto 10/100BaseTX

Fa0/2 notconnect 1 auto auto 10/100BaseTX

Fa0/3 notconnect 1 auto auto 10/100BaseTX

Fa0/4 notconnect 1 auto auto 10/100BaseTX

Fa0/5 notconnect 1 auto auto 10/100BaseTX

Fa0/6 notconnect 1 auto auto 10/100BaseTX

Fa0/7 notconnect 1 auto auto 10/100BaseTX

Fa0/8 notconnect 1 auto auto 10/100BaseTX

Fa0/9 notconnect 1 auto auto 10/100BaseTX

Fa0/10 notconnect 1 auto auto 10/100BaseTX

Fa0/11 notconnect 1 auto auto 10/100BaseTX

Fa0/12 notconnect 1 auto auto 10/100BaseTX

Fa0/13 notconnect 1 auto auto 10/100BaseTX

Fa0/14 notconnect 1 auto auto 10/100BaseTX

Fa0/15 notconnect 1 auto auto 10/100BaseTX

Fa0/16 notconnect 1 auto auto 10/100BaseTX

Fa0/17 notconnect 1 auto auto 10/100BaseTX

Fa0/18 notconnect 1 auto auto 10/100BaseTX

Fa0/19 disabled 1 auto auto 10/100BaseTX

Fa0/20 disabled 1 auto auto 10/100BaseTX

Fa0/21 connected trunk a-full a-100 10/100BaseTX

Fa0/22 connected trunk a-full a-100 10/100BaseTX

Fa0/23 disabled 1 auto auto 10/100BaseTX

Fa0/24 disabled 1 auto auto 10/100BaseTX

Gi0/1 notconnect 1 auto auto Not Present

Gi0/2 notconnect 1 auto auto Not Present

SW4#sh int fa0/21 trunk

Port Mode Encapsulation Status Native vlan

Fa0/21 auto n-802.1q trunking 146

Port Vlans allowed on trunk

Fa0/21 1-4094

Port Vlans allowed and active in management domain

Fa0/21 1,146,169

Port Vlans in spanning tree forwarding state and not pruned

Fa0/21 1,169

SW4#sh span vlan 146

VLAN0146

Spanning tree enabled protocol ieee

Root ID Priority 32914

Address 000a.b8ea.0b80

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32914 (priority 32768 sys-id-ext 146)

Address 000a.b8ea.0b80

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 300 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Fa0/21 Desg BLK 19 128.23 P2p self-looped

Fa0/22 Back BLK 19 128.24 P2p

SW4#conf t

Enter configuration commands, one per line. End with CNTL/Z.

SW4(config)#int range fa0/21 - 22

SW4(config-if-range)#shut

SW4(config-if-range)#

*Mar 1 03:01:54.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down

SW4(config-if-range)#

*Mar 1 03:01:56.019: %LINK-5-CHANGED: Interface FastEthernet0/21, changed state to administratively down

*Mar 1 03:01:56.070: %LINK-5-CHANGED: Interface FastEthernet0/22, changed state to administratively down

*Mar 1 03:01:57.026: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/21, changed state to down

SW4(config-if-range)#

*Mar 1 03:01:57.076: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/22, changed state to down

SW4(config-if-range)#no shut

SW4(config-if-range)#

*Mar 1 03:03:30.618: %LINK-3-UPDOWN: Interface FastEthernet0/21, changed state to up

*Mar 1 03:03:30.643: %LINK-3-UPDOWN: Interface FastEthernet0/22, changed state to up

SW4(config-if-range)#

*Mar 1 03:03:34.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/21, changed state to up

SW4(config-if-range)#

*Mar 1 03:03:34.225: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 146 on FastEthernet0/22 VLAN1.

*Mar 1 03:03:34.225: %SPANTREE-2-BLOCK_PVID_PEER: Blocking FastEthernet0/22 on VLAN0146. Inconsistent peer vlan.

*Mar 1 03:03:34.225: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking FastEthernet0/22 on VLAN0001. Inconsistent local vlan.

*Mar 1 03:03:35.231: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/22, changed state to up

SW4(config-if-range)#end

SW4#

*Mar 1 03:03:49.232: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking FastEthernet0/22 on VLAN0146. Port consistency restored.

*Mar 1 03:03:49.232: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking FastEthernet0/22 on VLAN0001. Port consistency restored.

SW4#

*Mar 1 03:03:49.559: %SYS-5-CONFIG_I: Configured from console by console

SW4#

*Mar 1 03:04:03.207: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

SW4#sh span vlan 146

VLAN0146

Spanning tree enabled protocol ieee

Root ID Priority 32914

Address 000a.b8ea.0b80

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32914 (priority 32768 sys-id-ext 146)

Address 000a.b8ea.0b80

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 300 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Fa0/21 Desg BLK 19 128.23 P2p self-looped

Fa0/22 Desg BLK 19 128.24 P2p self-looped

SW4#sh span int fa0/21

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Desg FWD 19 128.23 P2p

VLAN0146 Desg BLK 19 128.23 P2p self-looped

VLAN0169 Desg FWD 19 128.23 P2p

SW4#sh span int fa0/22

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Desg FWD 19 128.24 P2p

VLAN0146 Desg BLK 19 128.24 P2p self-looped

VLAN0169 Desg FWD 19 128.24 P2p

Aslo, if I shutdown port21, I still get the loop on fa0/22.

Can anyone explain to me what the problem is here. I'm not sure why those ports are hearing their own bpdu's back? For reference I also tested this exact same config between Sw1 - Sw2, and Sw1 - Sw3, during lab 802.1q Native VLAN and those links work fine.

↧

INE tokens for sale

November 15, 2013, 9:45 am

≫ Next: CCDA-->CCDP-->CCDE

≪ Previous: Spanning-tree bug?

I have 2050 tokens which I no longer need, -- would like to sell them for $1000, or 500 tokens for $250. If anyone is interested, please reply with your contact info, or call me at 202-593-1474. Thanks.

↧

CCDA-->CCDP-->CCDE

August 5, 2014, 9:36 am

≫ Next: OSPF Intra-Area External Vs OSPF Inter-Area External

≪ Previous: INE tokens for sale

Dear Team,

I was just thinking to start design track to create design skills with existing CCIE SP LAB cert.

But if i stop at the level of CCNA or CCNP then Can i apply Network Architech job with CCNP cert?

Kindly suggest

Thanks and regards,

Sourabh

↧

OSPF Intra-Area External Vs OSPF Inter-Area External

January 11, 2015, 10:34 am

≫ Next: Auto Summary AT Lab

≪ Previous: CCDA-->CCDP-->CCDE

Over and over again, Brian states that intra area external routes are preferred over inter area external routes.

I have yet to be able to produce this on any gear though. Take the below topology.

150.1.9.9/32 is being redistributed as E2 via EIGRP into OSPF Area 2 via R6 and into OSPF Area 0 via R2.

Based on the repeated statement that Intra area externals are preferred over Inter external routes, R1 should choose the path to 150.1.9.9 toward R5/R2.

This is not the case, R1 is load balancing between the R6 path and the R5/R2 path.

Is there something I am missing? I find it frustrating that over and over it is stated that intra area externals are preferred over inter area externals yet it is never demonstrated in the videos. In fact the exact opposite was demonstrated in one of the NSSA videos.

Thanks!

↧

Auto Summary AT Lab

January 14, 2015, 10:03 pm

≫ Next: IOS 15 on 3560v1 Switches

≪ Previous: OSPF Intra-Area External Vs OSPF Inter-Area External

I am a bit confused on the results of this lab. in the exercise on R7 they have us remove the network statements so we dont advertise those to the peers in AS 54. then they have use create a route map on R7 to redistribute a few interfaces back into BGP. Then we issue the Auto Summary Command.

On R8 they have us just add network statements for the the auto summarized network.

Why would BGP not auto summarize if we have the network statements versus it will auto summaize if we redistribute a few interfaces back into BGP?

Wouldnt we need a exact match for 150.1.0.0/16 in the RIB before we can use the network command "network 150.1.0.0 mask 255.255.0.0"?

Thanks

↧

IOS 15 on 3560v1 Switches

January 14, 2015, 10:09 pm

≫ Next: IPSEC w VRF, When to Use Isakmp profile or not

≪ Previous: Auto Summary AT Lab

I understand the 3560v1 switches with 32MB of flash can run IOS 15SE, but I am curiois about one thing.

I was looking at this: Catalyst IOS 15.0SE Universal with feature set IP Services

I asked myself if I would be able to put the "Univeral" image on the 3560v1 switch that I have (C3560-24TS-S)

In cisco's feature navigator, the universal images show up under the 3560x

Is there a difference between the Universal image with feature set IP Services vs IOS 15SE ip services under the 3560 platform?

Why do they label that IOS image with "universal"?

↧

IPSEC w VRF, When to Use Isakmp profile or not

January 14, 2015, 11:43 pm

≫ Next: Role Based Addressing

≪ Previous: IOS 15 on 3560v1 Switches

Hi,

I have seen the isakmp profile used in some cases where the nbma/underlay ip address is in a separate vrf. However i found out that it works with just using the keyring.

What is an isakmp profile, and when do we really need it?

thanks

↧

Role Based Addressing

August 20, 2013, 7:31 am

≫ Next: ISE documentation and administration guide

≪ Previous: IPSEC w VRF, When to Use Isakmp profile or not

While studying "Designing Cisco Network Service Architectures (ARCH) Foundation Learning Guide", I came across Role Based Addressing. Could you friends please help me understand this. Would appreciate if could get me some links too to understand.

Why Role Based Addressing is not effective in IPv6 as against IPv4?

↧

ISE documentation and administration guide

January 15, 2015, 5:20 am

≫ Next: Nexus 7k HA capabilities

≪ Previous: Role Based Addressing

Good Day,

I have just finished watching the ATCv4 videos and I would like to thank both Brian and Christian for the their efforts. Currently I am having a problem assembling the ISE configuration in my mind and memorizing the steps. My question is; what part of the documentation is accessible in the exam? Does it include the administration guide? Is there a recommendation on how to approach the ISE, ACS and wireless tasks in the exam?

Thank you in advance.

Regards,

↧

Nexus 7k HA capabilities

January 15, 2015, 6:19 am

≫ Next: 2.4 SpanningTree

≪ Previous: ISE documentation and administration guide

hi all,

I read from this URL regarding N7k HA capabilities and I am still not very sure about few things

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/high_availability/command/reference/ha_commands.html#wp1365691

1. what is the purpose of using command "system watchdog"

2. with system hap-reset, is this required before we can enable/modify supervisor redundancy mode such as shutdown or switchover (dual sup)?

appreciate for your thoughts.

Sent from my HTC

↧

2.4 SpanningTree

January 15, 2015, 7:37 am

≫ Next: Secure DC Nexus design with Routing and switching

≪ Previous: Nexus 7k HA capabilities

i configured switch 1 port fa0/1 which is connected to hypervisor .

Port status shown as connected . when i verfiy show spanning-tree fa0/1 i can only see one vlan 1 .

I do not know error about.

SW1#show run int fa0/1

Building configuration...

Current configuration : 63 bytes

interface FastEthernet0/1

spanning-tree portfast trunk

end

SW1#show spanning-tree interface fa0/1

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0001 Desg FWD 19 128.3 P2p Edge

↧

Secure DC Nexus design with Routing and switching

January 15, 2015, 12:30 am

≫ Next: MPLS push-pop-swap labels

≪ Previous: 2.4 SpanningTree

HI,

For my access vlans I want to create SVIs on firewall and thos SVIs will also advertise in routing protocols. but problem is I also need security so I put two firewall in desgin. file is attched for review. I am confused where i create layer 2 and 3 boundary because firewall placement is making me confuse. Need help for in this design also with cisco best practices.

↧