Category: <span>Cisco</span>

Here’s the sample configuration of Netflow in Cisco running IOS and Nexus-OS. Cisco IOS-XR: The NetFlow use these 3 maps to configure Step1. EXPORTER MAP – configure parameters like export destination IP, udp port (only supported transport protocol), source interface IPv4: flow exporter-map NETFLOW-EXPORTER-MAP  version v9   transport udp 9991   source Loopback0   destination 192.168.30.100 IPv6: flow exporter-map IPv6-NETFLOW-EXPORTER-MAP  version v9   transport udp 9991   source Loopback0   destination 192.168.30.100 Note: destination  udp port can be from  <1024-65535>…

Cisco

Taking Cisco’s  Sample Legal Banner message from their Network Security Baseline page. Sample Legal Banner Notification Configuration ! Present a legal notification banner approved by company legal counsel banner login # UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED You must have explicit, authorized permission to access or configure this device. Unauthorized attempts and actions to access or use this system may result in civil and/or criminal penalties. All activities performed on this device are logged and monitored. # ! Here’s how…

Cisco

Why is considered hidden? Because you won’t see it in the command in Cisco Routers Command Line Interface (CLI). Sample output: RP/0/RSP1/CPU0:CORE1#ser? service RP/0/RSP1/CPU0:CORE1#service ?   redundancy  Service Director related commands. Then what it is? service unsupported-transceiver Configuration: Cisco IOS-XE Router1(config)#service unsupported-transceiver Warning: When Cisco determines that a fault or defect can be traced to the use of third-party transceivers installed by a customer or reseller, then, at Cisco’s discretion, Cisco may withhold support under warranty or a Cisco support…

Cisco

Objective: The PBR policy will be removed facing Uplink-Router once it detected that the server is unreachable. Policy-based routing (PBR) is a method used to make routing decisions based on policies. Scenario: Server1 providing web caching to customers for faster web page loading. Since there is route-map in place to route their http/https traffic to the next hop which is Server1, what if this server suddenly goes down?, the expected behaviour is  the customer won’t be able to access websites.…

Cisco

Objective: To configure port-channel and associate it to vlan. Servers will use Cisco-NXOS as their gateway and uplink to Internet. Server-switch have Layer 2 (access mode) connectivity to Cisco-NXOS router. (see Fig.1)  Fig.1 1. Configure the Vlan (interface vlan will be the server’s gateway) Cisco-NXOS# configure vlan 8   name Server-Farm interface Vlan8  description Server Farm Vlan  no shutdown   ip address 192.168.8.1/24 2. Configure port-channel interface port-channel10    description Port-channel to Server-Switch    switchport access vlan 8 3. Configure…

Cisco

Objective: To separate management traffic from data/customer traffic in your Cisco XR routers. Preferably, Data and Management are into 2 separate network domains. Pre-requisite: UTP cables (for each RSP management port in case for switchover) are connected to a network switch to access the OOB management gateway * * Management IP Configuration* *  1. Configure the vrf for management vrf management description VRF for Out-of-Band address-family ipv4 unicast 2. Set the physical IP address on each RSP management port. There are total of…

Cisco

Cisco IOS e.g. Vlan10 =  interface management vlan NTP Server = 192.168.10.100 1. Configure ACL to deny NTP requests and query conf t access-list 100 remark to block NTP requests and query access-list 100 deny   any 2. Configure ACL to allow only the NTP servers to peer or synch with access-list 200 remark NTP to peer access-list 200 permit 192.168.10.100 access-list 200 deny  any 3. Configure NTP conf t ntp source Vlan10 ntp access-group peer 200 ntp access-group serve 100 ntp access-group…

Cisco

Here is sample commands in configuring SNMPv2 and SNMPv3 in Cisco IOS-XR devices. It also detailed on how to configure SNMP traps for your Network Monitoring System. SNMPv2c community: snmpcomm123 management IP address: 192.168.10.100 SNMP Polling Server: 192.168.20.199 SNMP Trap Server: 192.168.20.200 SNMPv2c Polling Configuration: ipv4 access-list SNMP-ALLOW  10 permit ipv4 host 192.168.20.199 any snmp-server contact DC-ADMIN snmp-server location Datacentre snmp-server trap-source Loopback0 snmp-server community snmpcomm123 RO SystemOwner IPv4 SNMP-ALLOW   SNMPv2c Traps Configuration: configure snmp-server traps snmp-server host 192.168.20.200 traps snmpcomm123 Verify: /usr/bin/snmpwalk -M /usr/local/snmp/mibs -v2c…

Cisco

As per Cisco official site definition of FPD: An FPD refers to any programmable hardware device on a router, which includes a Field Programmable Gate Array (FPGA) and Read Only Memory Monitor (ROMMON). Cisco IOS® XR routers use a number of FPDs that are crucial for the function of route processors, line cards, shared port adapters (SPAs), SPA Interface Processors (SIPs), and fan trays.Sample of upgrading fpd in ASR9000 running in IOS-XR. Linecard used is 24x10GE Tomahawk linecard.A. Check first…

Cisco Juniper

SSH Configuration Examples in Cisco (IOS,IOS-XE,NX-OS,IOS-XR) Here are the configuration examples: whereas: 192.168.100.100 = Jumphost IP (Allowed IP to SSH into the device)Prerequisites in configuring SSH for Cisco devices include SSH key generation, please refer to Cisco Official Documentation. command: crypto key generate rsaPreferably, RSA key bits at least 2048, else use 1024 for better securityIOS: ip ssh version 2 line vty 0 4 access-class 101 in exec-timeout 5 0 password 7 01234ABC login authentication VTY transport input ssh access-list…

Cisco