Skip to main content

Posts

Access-list at SVI

SVI (Switch Virtual Interfaces) We use the SVI for inter vlan routing. In this scenario I will configure the access list with SVI. In this scenario I want to permit vlan 10 network to vlan 50 Server farm. Vlan 10 and vlan 20 can communicate each other. First create vlan and then interface vlan#. Switch(config)#vlan 10 Switch(config)#interface vlan 10 Switch(config-if)#ip address 192.168.10.254 255.255.255.0 Switch(config)#vlan 20 Switch(config)#interface vlan 20 Switch(config-if)#ip address 192.168.20.254 255.255.255.0 Switch(config)#vlan 50 Switch(config)#interface vlan 50 Switch(config-if)#ip address 192.168.50.254 255.255.255.0 when we finish the vlan interface create make sure the switch port are belong to each vlan. Port to vlan assign configure is Switch(config)#interface g0/1 Switch(config-if)#switchport access vlan 10 Switch(config)#interface g0/2 Switch(config-if)#switchport access vlan 20 Switch(config)#int...

NHS @ NHRP

Hub Router configure HUB(config)#interface Tunnel1   HUB(config-if)# ip address 10.10.10.1 255.255.255.0   HUB(config-if)# tunnel source FastEthernet0/0   HUB(config-if)# tunnel mode gre multipoint  HUB(config-if)# ip nhrp map multicast dynamic HUB (config-if)#ip nhrp authentication OutBox   HUB(config-if)# ip nhrp network-id 100 SPOKE Router interface Tunnel1 Spoke_01(config-if)# ip address 10.10.10.2 255.255.255.0   Spoke_01(config-if)#tunnel source FastEthernet0/0 Spoke_01(config-if)#tunnel mode gre multipoint  Spoke_01(config-if)# ip nhrp authentication OutBox Spoke_01(config-if)# ip nhrp network-id 100 Spoke_01(config-if)#ip nhrp map 10.10.10.1 203.81.1.2 *Apr  5 03:33:03.307: NHRP: Tunnel1: Cache add for target 10.10.10.1/32 next-hop 10.10.10.1 *Apr  5 03:33:03.311:            203.81.1.2 *Apr  5 03:33:03.331: NHRP: Inserted subblock node for cache: Target ...

VPN with GRE Tunnel

Configure https://drive.google.com/open?id=0B-Y7rSPpDdRCemRyNi05eGdXMmc

ISP WAN Password Review

At our country some ISP don't tell their PPoE Username and Password. Normal condition we don't need but sometime we need to replace old modem with new, how? Bring the new modem to ISP and pay the charge. Problem is I don't want to pay about that. So I search the way to view that password. Answer is easy, you need to open your device wan setting page and right click select save page as.open with Notepad++ and  find the username and password will be see like this. Sometime you don't see like this you will see only username and password it depend your devices. Because your device keep that password. PS: You need to know device password. In this cause I lucky, my device is default password. :D  

VRF lite at Enterprise

In this scenario we have two internet line and separate the user group for internet using. I want to setup  NET_G1 group use internet line 1 and NET_G2 group use internet line 2. At NET_G1 sale and MKT department are included and at NET_G2 HR and IT are included. First step create the vrf. R1/R4/R5 ip vrf NET_G1 ip vrf NET_G2 Second step -set the interfaces belong to vrf. R1 ip vrf NET_G1 ip vrf NET_G2 int f0/0 ip vrf forwarding NET_G1 ip add 10.10.10.2 255.255.255.252 description Internet 1 no sh int f1/0 no sh ip vrf forwading NET_G2 ip add 172.16.12.2 255.255.255.252 description Internet 2 no sh int f2/0 no sh int f2/0.10 encapsulation dot1q 10 ip vrf for NET_G1 ip add 192.168.14.1 255.255.255.252 int f2/0.20 encapsulation dot1q 20 ip vrf for NET_G2 ip add 192.168.14.1 255.255.255.252 int f3/0 no sh int f3/0.10 encapsulation dot1q 10 ip vrf for NET_G1 ip add 192.168.15.1 255.255.255.252 int f3/0.20 encapsulation dot1q 20 ...

VRF Lite

VRF (Virtual Routing and Forwarding) is like a logical router, no need to require many router for different routing or different customers.VRF are most commonly associated MPLS service providers. Deployment without MPLS is know as VRF lite.In this topology we configure the VRF Lite. Let see, we have two customer Green and Yellow are using our network service.They have same network prefixes. As we know router don't accept same network prefixes but Vrf can solve that problem. First step we need to create vrf. R1 ip vrf GREEN ip vrf YELLOW R2 ip vrf GREEN ip vrf YELLOW R3 ip vrf GREEN ip vrf YELLOW Each routed interface (virtual or physical) belongs to exactly one VRF.  For vrf GREEN R2 int lo0 ip vrf forwarding GREEN ip add 192.168.1.1 255.255.255.0 int f0/0.1 encapsulation dot1q 10 ip vrf forwarding GREEN ip add 10.10.12.2 255.255.255.252 R1 int f0/0.1  encapsulation dot1Q 10  ip vrf forwarding GREEN  ip address 10.10.12.1 255.25...

Prefix list

In this scenario I want to filter 192.168.3.x /25 , /26, /27 networks form R1 route update. I can use access list but I need to set the rules for every network. In prefix list it will easy to filter. R2(config-router)#do sh ip bgp BGP table version is 8, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,               r RIB-failure, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete    Network          Next Hop            Metric LocPrf Weight Path *> 192.168.1.0      10.10.10.1               0             0 1 i *> 192.168.2.0      10.10.10.1 ...