Cisco - www.m00nie.com (Page 2)

Petition for Educational IOS emulator – etherealmind.com

Please think about signing the petition since from 15.0 forwards it will become a huge problem for people looking to learn... We the undersigned ask Cisco to consider our petition for an open and usable IOS Emulator for learning, study and training. We are the people who are learning

ASIC

ASIC to port mapping

Just a couple of commands to show the ASIC/port mapping on most cisco switches. show interfaces capabilities module Is used on smaller switches e.g. 3750 m00nie-C3750#show platform pm if-numbers interface gid gpn lpn port slot unit slun port-type lpn-idb gpn-idb ---------------------------------------------------------------------- Gi1/0/1 1 1 1

Authentication

Cacti authentication using Cisco ACS

The scenario is that we have a cacti install (0.8.7e) running on an Ubuntu box using only a single user/pass but would like users to authenticate individually to cacti. We use a Cisco ACS server to authenticate access to all our switches etc using tacacs+ so that

aaa

Password-less ssh login using pki to Cisco IOS

A cool feature in IOS I recently came across was the ability to configure SSH login using PKI. As far as I can see this feture was added in version 15.0 Already assuming the basic SSH server is running on the IOS device here's how we add

642-691 BGP+MPLS

%BGP-4-VPNV4NH_MASK and OSPF advertising loopback as /32 by default

Recently when doing some MPLS VPN lab work I came across the error %BGP-4-VPNV4NH_MASK: Nexthop 4.4.4.4 may not be reachable from neigbor 2.2.2.2 - not /32 mask It occurs because by default OSPF advertises loopback interfaces with a /32 mask even if you

642-691 BGP+MPLS

BGP Route Reflectors (GNS3 lab)

One problem of having a large number of routers running IBGP with each other in a full mesh is the volume of IBGP connections needed. The formula to see the number of connections needed for a full IBGP mesh is n(n-1)/2 so with 20 routers we would end

642-691

BGP Confederations (GNS3 Lab)

642-691 BGP+MPLS

Changing MED value in BGP (GNS3 lab)

BGP Multiexit Discriminator (MED or MULTI_EXIT_DISC) is an optional nontransative attribute (Type code Value 4). It is usually used to exchange info about a preferred to external BGP neighbours. MED is passed between ASs unlike LOCAL_PREF but each time it is passed to another new AS it

1801

Cacti host template for Cisco 1801 ISR

Everyone loves Cacti (?) so heres the first of my own host templates for Cacti. I should just mention that although I I use these templates you should consider them as untested/use at your own risk etc. This one was made on a Cisco 1801 running 15.0.1M2(ED)

annoying

Stop your Cisco device interrupting your typing

One annoying "feature" of Cisco devices is that they often output info when your typing into the console making you loose your place and unable to see what you are typing in. Router(config)#host m00nies-router m00nies-router(config)#^Z m00nies-router#sho *Aug 20 09:46:38.867: %SYS-5-CONFIG_

642-691

BGP Attributes

When BGP sends an UPDATE packet to a peer it sends path attributes associated with the prefix. These path attributes are then used by BGP to pick the best route to a destination. BGP attributes are similar to metrics in OSPF and EIGRP in the way it uses them to

ASA

Pix & ASA Packet capturing via cli

Quite a useful feature on Cisco Pix & ASAs is the ability to capture packets and then analyze it with wireshark if needed. The following config sets up the capture for all traffic between two hosts 1.1.1.137 and 10.25.0.143 on the outside interface of

Cisco

Stop the Router trying to telnet to typos!

Quick config to stop the annoying problem of your cisco equipment trying to telnet to your typos like below Router#shwo Translating "shwo"...domain server (255.255.255.255) Translating "shwo"...domain server (255.255.255.255) (255.255.255.255)% Unknown command or computer name,

Cisco

Cisco console shortcut commands

Moving around in Cisco consoles can be very repetitive and slow at times. Just couple of commands from those available that if you remember will add up to saving a significant amount of time and frustration. Command: Ctrl + A Function: Go to the beginning of the line. Useful for adding

alias

Cisco command aliases (shortcuts)

I find that (mis)typing the same commands over and over gets boring very quickly. Creating aliases for other commands on your Cisco equipment and save time and after a while become something you wont be able to live without ;) There are already some default ones like "p"

ASA

Cisco ASA list all SNMP OIDs

I don't find the cisco SNMP documentation too intuitive(slow) to navigate at the moment so a nice little command to help with ASAs and finding interesting OIDs. It does seem to be one of the "hidden" commands for some reason...Should work with all ASAs

642-642

IP Precedence DSCP and CoS relationships

As part of studying the 642-642 QoS exam course is seems quite important to understand the relationship between the various ways of marking traffic. Below are some notes I've made so far about these relationships. This is note a post about the inner working of the various PHBs

aaa

Test AAA setup using Cisco ASA

A nice little command to test the AAA server will authenticate your users correctly (also works with PIX and FWSM). The sytax is like this: m00nies_ASA# test aaa-server [authentication|authorization] <aaa_server_group> [host <name>|<host_ip>] username <user> password <