Cisco Live! Europe: I'm in!
First time here, the impression is like being in the Willy Wonka chocolate factory with the big difference you can touch everything without disappear.
As my job is not focused on a single technology I'm registered to many different sessions, from WiFi to Security, from FCoE to …
Read MorePrivate VLAN configuration:
vlan 300 private-vlan primary private-vlan association 301-302 ! vlan 301 private-vlan isolated ! vlan 302 private-vlan community
Port configuration:
interface GigabitEthernet1/0/1 switchport private-vlan host-association 300 301 switchport mode private-vlan host
What about the SVI? …
Read MoreNetflow quick notes for basic config.
NETFLOW EXPORT
Send NetFlow data to a collector:
- From? (source)
- Where? (destination, port)
- How? (udp, sctp, backup)
- Version? (1,5,9)
SAMPLING / FILTERING
Not all traffic is evaluated to generate NetFlow statistics. Sampling (one packet each N) of filtering (sampling only on a …
Read MoreYour Route to Cisco Career Success by Kevin Wallace
A free ebook from Amazon/Kindle about the strategy to prepare for a brilliant career in networking.
UPDATE: the book was free just for a limited amount of time (I got the link from Twitter).
Read MoreWhen a router config is saved with
copy run start
IOS asks for a destination filename:
RTR#copy running-config startup-config Destination filename [startup-config]? Building configuration... [OK]
To bypass the request and use the default name startup-config do this:
RTR(config)#file prompt quiet
And then again
copy …
Read MoreOSPF Forward Address (FA):
works like BGP next-hop for OSPF external routes
advertised only if next-hop is on a not-passive and multiaccess interface
if there's not a route to FA address, route is not installed
FA = 0.0.0.0 --> cost to ABR
FA <> 0.0.0.0 --> cost to FA address
NSSA --> FA is …
Read MoreToday a customer called to change the IP address of a L2L VPN peer on his Cisco ASA 8.3(2)4.
The task can be divided in 3 steps:
Get the VPN password. It should be written somewhere in the network documentation, as stated by rule 7, but you know, password sometimes just get lost.
Find and update crypto map
asa# sh …
Read MoreSometimes it can be useful to copy files to and from a Cisco ASA Firewall via SCP.
To enable SCP just type:
ssh scopy enable
Read MoreForgot the PSK of a VPN on a Cisco ASA? With this command you can see all the passwords in cleartext:
more system:running-configuration
Read MoreToday I passed Cisco 642-983 DCUCI exam and it was a surprise to see two certifications on my Cisco curriculum:
Cisco Unified Computing Technology Support Specialist
and
Cisco Data Center Support for UC Specialist
The next step would be "Cisco Data Center Unified Computing Support Specialist" but since VCP is …
Read MoreThis week I'm attending Cisco DCUCI course in Milan. I have no experience on blade servers or Cisco UC plaftorm and it'll be a great opportunity to learn new topics and move another step towards the datacenter.
I've prepared for this course watching Cisco PEC videos and reading the two must-read books from Silvano Gai: …
Read MoreToday I passed this Cisco exam: (642-647) Deploying Cisco ASA VPN Solutions v1.0 (VPN) and my CCSP certification is now updated to the new CCNP(Security).
I've prepared the exam on the Cisco Press Official Cert Guide. The exam was not very hard, probably because I work on Pix/Asa platforms since 2007. The guide is very …
Read MoreQuick note about PPPoE address assignment.
IPCP
CLIENT
interface Dialer1 **ip address negotiated** encapsulation ppp dialer pool 1 dialer idle-timeout 0 dialer persistent end
SERVER
ip dhcp-server 10.0.12.1 interface Virtual-Template10 ip address 10.0.32.2 255.255.255.0 peer default ip address dhcp end
DHCP
CLIENT …
Read More