Category: <span>Cisco</span>

Fig.1   IOS-XR Configure Loopback interface Loopback0 ipv4 address 172.16.2.1 255.255.255.255 ipv6 address fdfe:abcd:ef12:0:172:16:2:1/128 ipv6 enable Configure P2P IP interface Gi0/0/0/0 description Connection to IOS Fa0/0 ipv4 address 172.17.0.1 255.255.255.252 ipv4 verify unicast source reachable-via any ipv4 unreachables disable ipv6 nd suppress-ra ipv6 verify unicast source reachable-via any ipv6 address fdfe:ab12:cd34:a00:1::/127 ipv6 enable ipv6 unreachables disable load-interval 30 dampening interface Gi0/0/0/1 description Connection to NX-OS E1/1 ipv4 address 172.18.0.1 255.255.255.252 ipv4 verify unicast source reachable-via any ipv4 unreachables disable ipv6…

Cisco

Resetting Cisco ASR9000 Network Processor(NP) NP or network processor is the component on ASR9000 line cards that handle the feature processing of packets as they go through the system. Sample LC: ASR9K MOD160 RP/0/RSP0/CPU0:ASR9000#  show controller np ports all location 0/1/cpu0 Node: 0/0/CPU0: —————————————————————- NP Bridge Fia                       Ports — —— — ————————————————— 0  —     0   TenGigE0/0/0/0 – TenGigE0/0/0/1, TenGigE0/0/0/4 – TenGigE0/0/0/5 NP1 is down. 2  —     2   TenGigE0/0/1/0 – TenGigE0/0/1/1, TenGigE0/0/1/4 – TenGigE0/0/1/5 3  —     3   TenGigE0/0/1/2 – TenGigE0/0/1/3,…

Cisco

As per Cisco website definition: Control Plane Policing (CoPP) is a Cisco IOS-wide feature designed to allow users to manage the flow of traffic handled by the route processor of their network devices. CoPP is designed to prevent unnecessary traffic from overwhelming the route processor that, if left unabated, could affect system performance. Here’s a sample configuration in applying CoPP. Step1: Create necessary ACLs a. Important services,e.g.NTP,SSH,SNMP   ip access-list extended SSH-ACL  permit tcp host 192.168.10.10 any eq 22  permit…

Cisco

Cisco IOS-XR: The NetFlow use these 3 maps to configure Step1. EXPORTER MAP – configure parameters like export destination IP, udp port (only supported transport protocol), source interface IPv4: flow exporter-map NETFLOW-EXPORTER-MAP  version v9   transport udp 9991   source Loopback0   destination 192.168.30.100 IPv6: flow exporter-map IPv6-NETFLOW-EXPORTER-MAP  version v9   transport udp 9991   source Loopback0   destination 192.168.30.100 Note: destination  udp port can be from  <1024-65535> (this is where Netflow is listening) Step2. MONITOR MAP includes flow record map…

Cisco

Taking Cisco’s  Sample Legal Banner message from their Network Security Baseline page. Sample Legal Banner Notification Configuration ! Present a legal notification banner approved by company legal counsel banner login # UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED You must have explicit, authorized permission to access or configure this device. Unauthorized attempts and actions to access or use this system may result in civil and/or criminal penalties. All activities performed on this device are logged and monitored. # ! Here’s how…

Cisco

service unsupported-transceiver Why considered hidden? Because you won’t see it in the command. Sample output: RP/0/RSP1/CPU0:CORE1#ser? service RP/0/RSP1/CPU0:CORE1#service ?   redundancy  Service Director related commands. Applying: Cisco IOS-XE Router1(config)#service unsupported-transceiver Warning: When Cisco determines that a fault or defect can be traced to the use of third-party transceivers installed by a customer or reseller, then, at Cisco’s discretion, Cisco may withhold support under warranty or a Cisco support program. In the course of providing support for a Cisco networking product…

Cisco

Objective: The PBR policy will be removed facing Uplink-Router once it detected that the server is unreachable. Policy-based routing (PBR) is a method used to make routing decisions based on policies. Scenario: Server1 providing web caching to customers for faster web page loading. Since there is route-map in place to route their http/https traffic to the next hop which is Server1, what if this server suddenly goes down?, the expected behaviour is  the customer won’t be able to access websites.…

Cisco

Objective: To configure port-channel and associate it to vlan. Servers will use Cisco-NXOS as their gateway and uplink to Internet. Server-switch have Layer 2 (access mode) connectivity to Cisco-NXOS router. (see Fig.1)  Fig.1 1. Configure the Vlan (interface vlan will be the server’s gateway) Cisco-NXOS# configure vlan 8   name Server-Farm interface Vlan8   description Server Farm Vlan   no shutdown   ip address 192.168.8.1/24   2. Configure port-channel  interface port-channel10    description Port-channel to Server-Switch    switchport access vlan…

Cisco

Objective: To separate management traffic from data/customer traffic in your Cisco XR routers. Preferably, Data and Management are into 2 separate network domains. Pre-requisite: UTP cables (for each RSP management port in case for switchover) are connected to a network switch to access the OOB management gateway * * Management IP Configuration* *  1. Configure the vrf for management vrf management  description VRF for Out-of-Band  address-family ipv4 unicast 2. Set the physical IP address on each RSP management port. There are total of…

Cisco

Cisco IOS e.g. Vlan10 =  interface management vlan NTP Server = 192.168.10.100 conf t 1. Configure ACL to deny NTP requests and query access-list 100 remark to block NTP requests and query access-list 100 deny   any 2. Configure ACL to allow only the NTP servers to peer or synch with access-list 200 remark NTP to peer  access-list 200 permit 192.168.10.100 access-list 200 deny  any 3. Configure NTP conf t ntp source Vlan10 ntp access-group peer 200  ntp access-group serve 100 ntp access-group…

Cisco