Posts

Showing posts with the label CCNP Routing and Switching

Show LLDP Commands on Cisco Devices

LLDP Show commands are easy to understand. Cisco IOS images that support LLDP Read the section Cisco IOU Unsupported Features . LLDP configuration on Cisco devices DLS-1#sh lldp neigh % LLDP is not enabled DLS-1# DLS-1# LLDP show commands on Cisco devices DLS-1#show lldp neighborsCapability codes:(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device(W) WLAN Access Point, (P) Repeater, (S) Station, (O) OtherDevice ID Local Intf Hold-time Capability Port IDTotal entries displayed: 0DLS-1# Give it some time to gather information about neighbors and re-run the command. DLS-1#show lldp neighborsCapability codes:(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device(W) WLAN Access Point, (P) Repeater, (S) Station, (O) OtherDevice ID Local Intf Hold-time Capability Port IDTotal entries displayed: 0 DLS-1#DLS-1#DLS-1#DLS-1#show lldp neighborsCapability codes:(R) Router, (B) Bridge, (T) Telephone, (C) DOCSIS Cable Device(W) WLAN Access Point, (P) Repeater, (S) Station, (O) Othe...

How I Passed the Cisco CCNP Exams

Image
Here is my experience with the Cisco CCNP exams and the material I’ve used to study and pass them. First, make sure to download the official exam blueprints and read them carefully. Here is a quick link to the CCNP Routing and Switching syllabus in PDF format, as of May 4th, 2015. Before we jump on the topic, let us look at the prices of the CCNP exams: Implementing Cisco IP Routing (ROUTE) 300-101 : exam costs about 200$ Implementing Cisco IP Switched Networks (SWITCH) 300-115 : exam costs about 200$ Troubleshooting and Maintaining Cisco IP Networks (TSHOOT) 300-135 : exam costs about 150$ If you book one of the exams, you may find that in your country these prices are a bit different, even after currency conversion. That was the case for me, with every Cisco exam. The testing center I deal with buys Cisco exams from Pearson Vue Europe (in Euros). It charges its own fees, in addition to the high conversion rate from Euro to Tunisian Dinar. So each Cisco exam costs me about one th...

Cisco IP SLA Configuration

Image
In this article we focus on the configuration of Cisco IP SLA in three flavours: ICMP-echo, ICMP Jitter and delay. Configuration steps The quick steps to configure IP SLA on a Cisco device are: – create the IP SLA monitor – configure it – schedule it Cisco IOS did not show me help when I type interrogation mark. Yet, commands are accepted. IP SLA Track Delay IP SLA delay is an option that facilitates the failover and fallback of links when you have multiple of them. A common complaint among network engineers is that a primary link flaps up and down, and with it flaps the secondary links too. In order to avoid flapping back and forth between the primary and the secondary links, and assuming there is IP SLA configuration with tracking (see a sample configuration for IP SLA tracking applied to Policy-based Routing ), you can tell the IOS to wait a certain delay before declaring an tracked object officially down or up. Cisco IP SLA delay configuration The delay command is ...

Cisco GLBP Tutorial

Image
I listed below some helpful Youtube videos that explain the concept of Cisco GLBP.    

802.1X Port-Based Authentication on Cisco Devices

Image
In this blog post I’m going to describe the configuration commands needed to configure dot1x authentication, as well as the home lab I built to test the basic functionalities of 802.1X port-based authentication with Cisco switches and Cisco ISE. 802.1x Authentication Configuration on Cisco Switches Here is the Cisco switch 802.1x configuration that worked for me in my home lab. Line 131: activates AAA lines 134 – 135: defining the Radius server group Lines 164 – 166: defining the Radius server and the secret key. Line 137: enables AAA dot1x authentication using the default method list, and using the Radius server group defined above. Lines 142 – 150: this is the interface connected to the 802.1x supplicant. I put a generic access-list (default_acl) as a default ACL, in case the dACL feature does not work. 802.1x Port-based authentication Home lab topology Home lab constructs EVE-NG IOS images one router, the image version does not matter one switch with IOS ...

Cisco ISE Internal Radius Server Configuration for 802.1X

Image
In this article we’ll explore the configuration of Cisco ISE as an internal Radius server. Setting Device Groups Configuring the network device (the Radius client) Setting internal users Preparing the Authentication policy Setting a compound authorization policy Setting the Allowed Protocols Setting the downloadable ACL Setting Authorization Profiles Setting the Policy Set Setting Device Groups Go to Administration -> Network Resources -> Network Device Groups   Configuring the network device Setting internal users “Employee” is a pre-defined user group. Preparing the Authentication policy We’ll use the pre-built Wired_802.1X authentication policy which is enough for what we are going to do. Setting a compound authorization policy When a Radius client is authenticated, the authorization process is evaluated. Our authorization policy will be compound. Here is a sample one. I did not use the default Wired_802.1x authorization policy because I w...

ISDN PRI Technologies

Image
In this post, we will understand the nuances between the following concepts related to ISDN PRI: TDM links and interfaces T1, T1 PRI, E1, E1 PRI, ISDN BRI ISDN E1 PRI and ISDN T1 PRI E1 and T1 are two TDM technologies; they leverage Time Division  Multiplexing to transmit and receive information. E1 TDM link provides a total 2.048 Mbps bandwidth. T1 TDM link provides a total 1.544 Mbps bandwidth. Both the E1 TDM and the T1 TDM links are segmented into channels, or timeslots. Each timeslot allows a bandwidth of 64 kbps. E1 TDM and T1 TDM have been used in the past to carry digitized voice. But since carrying voice and data is the same thing -from a transmission perspective- then T1 TDM and E1 TDM have been leveraged to carry data, voice and even video. E1 TDM, T1 TDM and WAN Protocols E1 TDM and T1 TDM can be used to carry PPP traffic. Also, E1 TDM and T1 TDM are used as a Link Layer transport protocol for ISDN PRI technology. That’s why we find in literature E1 PR...