www.m00nie.com (Page 4)

ASIC to port mapping

Just a couple of commands to show the ASIC/port mapping on most cisco switches. show interfaces capabilities module Is used on smaller switches e.g. 3750 m00nie-C3750#show platform pm if-numbers interface gid gpn lpn port slot unit slun port-type lpn-idb gpn-idb ---------------------------------------------------------------------- Gi1/0/1 1 1 1

Authentication

Cacti authentication using Cisco ACS

The scenario is that we have a cacti install (0.8.7e) running on an Ubuntu box using only a single user/pass but would like users to authenticate individually to cacti. We use a Cisco ACS server to authenticate access to all our switches etc using tacacs+ so that

Linux

Adding Smoketrace to a Smokeping install

Smokeping is a very good latency monitoring tool that runs on Linux and is easy to install via "apt-get install smokeping". With Ubuntu the addition tool, Smoketrace is currently not included in the 2.003006 version from the repository. It is quite straightforward to add Smoketrace to an

aaa

Password-less ssh login using pki to Cisco IOS

A cool feature in IOS I recently came across was the ability to configure SSH login using PKI. As far as I can see this feture was added in version 15.0 Already assuming the basic SSH server is running on the IOS device here's how we add

642-691 BGP+MPLS

%BGP-4-VPNV4NH_MASK and OSPF advertising loopback as /32 by default

Recently when doing some MPLS VPN lab work I came across the error %BGP-4-VPNV4NH_MASK: Nexthop 4.4.4.4 may not be reachable from neigbor 2.2.2.2 - not /32 mask It occurs because by default OSPF advertises loopback interfaces with a /32 mask even if you

IP

Quickest way to change an IP in windows

Quite often at work we need to manually change the IP of our laptops for testing various things. Since our laptops are not the quickest around town I quickly got bored of clicking on 5 different windows just to change IP. The I found the quite useful netsh command. netsh

chmod

Recursively chmod specific files

Every now and then I need to chmod all my media files to make sure they are accessible by various things. Usually its only one filetype at a time eg. mp3s. The normal chmod -R 744 *.mp3 wont accomplish this so I use the following. find . -iname '*.mp3'

642-691 BGP+MPLS

BGP Route Reflectors (GNS3 lab)

One problem of having a large number of routers running IBGP with each other in a full mesh is the volume of IBGP connections needed. The formula to see the number of connections needed for a full IBGP mesh is n(n-1)/2 so with 20 routers we would end

642-691

BGP Confederations (GNS3 Lab)

642-691 BGP+MPLS

Changing MED value in BGP (GNS3 lab)

BGP Multiexit Discriminator (MED or MULTI_EXIT_DISC) is an optional nontransative attribute (Type code Value 4). It is usually used to exchange info about a preferred to external BGP neighbours. MED is passed between ASs unlike LOCAL_PREF but each time it is passed to another new AS it

1801

Cacti host template for Cisco 1801 ISR

Everyone loves Cacti (?) so heres the first of my own host templates for Cacti. I should just mention that although I I use these templates you should consider them as untested/use at your own risk etc. This one was made on a Cisco 1801 running 15.0.1M2(ED)

Cacti

How to install and use snmpwalk

Snmpwalk is a great tool for Linux boxes. You can easily list all OIDs a SNMP host has to offer then filter the results to your needs and find OIDs to import into tools like Cacti. Snmpwalk is in most linux repos so its easy to install e.g: Fedora/

annoying

Stop your Cisco device interrupting your typing

One annoying "feature" of Cisco devices is that they often output info when your typing into the console making you loose your place and unable to see what you are typing in. Router(config)#host m00nies-router m00nies-router(config)#^Z m00nies-router#sho *Aug 20 09:46:38.867: %SYS-5-CONFIG_

642-691

BGP Attributes

When BGP sends an UPDATE packet to a peer it sends path attributes associated with the prefix. These path attributes are then used by BGP to pick the best route to a destination. BGP attributes are similar to metrics in OSPF and EIGRP in the way it uses them to

ASA

Pix & ASA Packet capturing via cli

Quite a useful feature on Cisco Pix & ASAs is the ability to capture packets and then analyze it with wireshark if needed. The following config sets up the capture for all traffic between two hosts 1.1.1.137 and 10.25.0.143 on the outside interface of

Cisco

Stop the Router trying to telnet to typos!

Quick config to stop the annoying problem of your cisco equipment trying to telnet to your typos like below Router#shwo Translating "shwo"...domain server (255.255.255.255) Translating "shwo"...domain server (255.255.255.255) (255.255.255.255)% Unknown command or computer name,

Cisco

Cisco console shortcut commands

Moving around in Cisco consoles can be very repetitive and slow at times. Just couple of commands from those available that if you remember will add up to saving a significant amount of time and frustration. Command: Ctrl + A Function: Go to the beginning of the line. Useful for adding

alias

Cisco command aliases (shortcuts)

I find that (mis)typing the same commands over and over gets boring very quickly. Creating aliases for other commands on your Cisco equipment and save time and after a while become something you wont be able to live without ;) There are already some default ones like "p"

ASA

Cisco ASA list all SNMP OIDs

I don't find the cisco SNMP documentation too intuitive(slow) to navigate at the moment so a nice little command to help with ASAs and finding interesting OIDs. It does seem to be one of the "hidden" commands for some reason...Should work with all ASAs

642-642

QoS fields

The QoS fields used by the network device depend on the capabilities of the device and the QoS deployments of the network. Below is a little info about a few of these fields. This post will be edited over time with more info added. A table showing some of the

642-642

IP Precedence DSCP and CoS relationships

As part of studying the 642-642 QoS exam course is seems quite important to understand the relationship between the various ways of marking traffic. Below are some notes I've made so far about these relationships. This is note a post about the inner working of the various PHBs

aaa

Test AAA setup using Cisco ASA

A nice little command to test the AAA server will authenticate your users correctly (also works with PIX and FWSM). The sytax is like this: m00nies_ASA# test aaa-server [authentication|authorization] <aaa_server_group> [host <name>|<host_ip>] username <user> password <

commands

Vi display line number

Quite a few times its been useful to see the line number while editing a file. Easily done too :') Heres our poor file without an line numbering..... Now we use the command :set number (the colon is needed too) and it gives us this :) You can revert to no

fstab

Auto mount partition with fstab

To mount a partition on boot you can edit the /etc/fstab file. First create a mount point mkdir /mnt/DATA Then open /etc/fstab in vi vi /etc/fstab Add something along the lines of the following at the end of the file /dev/sda5 /mnt/DATA ext2 defaults

boot

Grub failing to boot Windows XP

The problem: I have a separate drive for windows and linux. Grub was struggling to boot windows i would get "file system type uknown, parition type 0x7" I got this error using a grub config of makeactive chainloader +1 I also tried chainloader +1 This setup would just