Cisco Packet Tracer 5.1 Download

This is the best way you can practice and familiarize yourself with Cisco routers and IOS for people wanting to get started with Cisco products. I have used this tool in the past and found it to be very helpful. The intuitive graphics shows you the packet flow for the network you configure from scratch. Almost like the real thing. Perfect for setting up your virtual lab.

Packet Tracer 5.1 is the latest version of Cisco’s simulation software. The main objective of Packet Tracer is to serve as a support tool for the Cisco Academy. This tool is extremely useful for both students and teachers. Basically, Packet Tracerallows you to build a network with a range of simulated “real-life” equipment (Cisco equipment, of course), so different configuration options can be tested. You get a range of routers, switches, end-client systems and connections to build the simulated network. The operating systems of the routers and even some portions of PC’s are also simulated. This way, users can learn to configure routers and see the changes they make on the networks.

Teachers can even make an interactive test using the program, which can be graded immediately by the program. It is one of the most complete tools for network learning; however, it can also help simulate and assess equipment options for real networks. It is really a tool to have; however, in order to download it from the original site, you need a Cisco Academy account, but the program has a free license.

packettracer51_setupexe educational purposes only. download

No Comments

Configuring DHCP Snooping on a Catalyst 6500 IOS

To be posted 07/31. The proper way to configure this!

No Comments

EIGRP Formula: Calculation Method for Composite Metric

There have been many posts on the Internet explaining how EIGRP gets its composite metric. I’ve been running around searching for information and it seems that there are NOT that many people who seem to post this info. Here it is, the real calculation method for EIGRP metrics.

Everyone says EIGRP metric is based off bandwidth (BW) and delay (DLY), which are values determined “per-interface” as shown below in bold:

EIGRP Algorithm / Formula:
Composite Metric = 256 * ([K1 * BW + K2 * BW/(256-Load) + K3 * DLY] * [K5/(RELY + K4)])

Default EIGRP K-Values are K1=1, K2=0, K3=1, K4=0, K5=0.  To modify the or change the K values for calculation to include the other non-default variables you input the command below:

What they don’t really emphasize and its important for the formula!

The bandwidth (BW) and delay (DLY) values are based on a “scaled average”.

Bandwidth for EIGRP = (107 / Interface Bandwidth)
Delay for EIGRP = (Interface Delay in usec / 10)

So the formula ends up being Metric = 256( (10,000,000/ BW) + (DELAY/10)).
To modify any EIGRP K-values to use more variables, enter command shown below:


CRNARVSDRR02(config-router)#metric weights ?
<0-8>  Type Of Service (Only TOS 0 supported)

CRNARVSDRR02(config-router)#metric weights 0 ?
<0-255>  K1

CRNARVSDRR02(config-router)#metric weights 0 1 ?
<0-255>  K2

CRNARVSDRR02(config-router)#metric weights 0 1 0 ?
<0-255>  K3

CRNARVSDRR02(config-router)#metric weights 0 1 0 1 ?
<0-255>  K4

CRNARVSDRR02(config-router)#metric weights 0 1 0 1 0 ?
<0-255>  K5

CRNARVSDRR02(config-router)#metric weights 0 1 0 1 0 0 ?
<cr>

CRNARVSDRR02(config-router)#metric weights 0 1 0 1 0 0

No Comments

MPLS with WCCP do not mix!

Problem:
So I was working on implementing WCCP redirection for networks to get TCP accelerated between two data centers and I ran into a problem. The problem was that subnets behind the core switches were not getting WCCP redirected into the WAAS units. So I wonder why? It’s matching the redirect-list ACL and shows up in the ACL hit counters. Subnets directly connected on the CORE switch was getting accelerated fine, I saw TFO matches in the WAE-7371s but any subnet behind in the ACCESS switches were NOT getting accelerated. They were still in PT: pass-through. So I said to myself, wtf?!

After a few hours of thinking in my private office with a magazine, I realized… crap, this is an MPLS-enabled data center… from source IP: 10.10.12.0/24 to destination: 10.20.20.0/24 is applied an MPLS label and switched instead of IP routed towards the destined network.

MPLS Shim Header

MPLS Shim Header

So that means there is an extra SHIM HEADER between L2 and L3… if WCCP gets redirected based on IP, then uhh… crap, it never will see the IP header because the CORE is reading the MPLS LABEL when the ACCESS pushed a label as the IP packet came ingress into VLAN12 on ACCESS switches. Bingo!!! This was the reason why WCCP wasn’t redirecting anything behind my CORE switches in the data center.

Solution: I had to remove MPLS-TE paths from source 10.10.12.0/24 towards 10.20.20.0/24 with a special policy, everything else gets label switched as usual. I really hate doing these “one-off” type configurations but it was the only way I could get WCCP working to the WAAS units in an MPLS enabled data center environment.  I really do hope Cisco IOS supports MPLS labels in WCCP in the future…. After my fix, I was successfully seeing “optimized” connections in both source/destination WAAS boxes. No more MPLS shim header, so WCCP was able to read the IP header to redirect transparently.

 

WAAS with MPLS-enabled Data Center

WAAS with MPLS-enabled Data Center

No Comments

Another SIP CME Configuration

CME - CLI Config
This is a sample CLI configuration for Call Manager Express (CME).

Please make sure to setup all of the local functionality of the CME before trying to setup the SIP Trunks.

When you are ready to setup the SIP trunks, the first thing you wll need to do is setup a translation rule. The translation rule will help you structure how outbound calls are dialed and sent to any 3rd Party SIP provider for trunking services. Read on…

Read more…

No Comments

ASA 5500 SSL VPN LDAP Authentication

In this post I demonstrate how to configure the Cisco Adaptive Security Appliance (ASA) to use an LDAP server for authentication of WebVPN users. The LDAP server in this example is Microsoft Active Directory. In this example Lightweight Directory Access Protocol (LDAP) authentication is configured for WebVPN users, but this configuration can be used for all other types of remote access clients as well. Simply assign the AAA server group to the desired connection profile (tunnel group). 
Ok if you want to use AD we must use LDAP and in some cases we will have to configure an LDAP attribute-map…I have put together a sample config you can use. It’s a sample ldap aaa-server configuration. I put a (#x) where there is something you need to modify to be specific to your environment. There is an explanation for each number below. Read on….

Read more…

No Comments

Call Manager Express to 3rd Party SIP Provider Sample Configuration

This took me about 8-12 hours to figure out (considering I don’t really have voip experience), but I recently canceled one of my consulting contracts where I was using EasyVPN client on my home 2811 and terminated into one of my consulting client’s Cisco VPNc3000 concentrator for Call Manager 4.3 communication for my IP phones at home. Yes I was getting free phone service! Bad news, I was constantly on-call :(  

So since I am not consulting there anymore, I wasn’t able to get IP phone service anymore. My connection to their Cisco Call Manager box was about to be terminated… what do I do now I ask myself. I still want to use Cisco VoIP at home because I had a nice intercom and paging system so I didn’t have to scream for my girlfriend across the house to bring my food over to the office.  So I did some research and seen some things about low cost or even free SIP service.  I ended up going with a SIP provider from “voipvoip.com” because they were offering $6.95/month BYOD (bring your own device) which I had my trusty Cisco 2811 that included unlimited incoming minutes and 1.9 cents/minute outbound.  The KEY part I wanted was having simultaneous channels inbound and outbound so I can have conference bridges with my Cisco MeetingPlace Express server I will be setting up later.  I was allowed up to 2 channels incoming and 4 channels outgoing. Cool right?  So its a typical pay-as-you-go plan… I will start off with this and see how my monthly bills are later. 

Heres the problem…. as I was browsing the company support pages, I noticed there weren’t any configuration guides for CISCO. There was stuff for Asterisk, TrixBox, 3CX, and a few others such as SIP phones, etc.   Then I thought, no problem… I will google this and find some sample configurations to a 3rd party SIP proxy server with some sample dial-peer templates and Im good to go.   A few hours later, I discovered that (1) this sample config does not exist or (2) it is really difficult to find perhaps because not many people do this? or (3) I just really stink in googling.  I like to think it is #1 and #2.   

So here is my sample configuration that I have implemented to help those that are looking for or wanting a similar setup with Call Manager Express.
I am running CME 7.1 and am in process of setting up my Cisco Unity Express NM (NM-CUE) module with a Cisco MeetingPlace Express server. I will definitely write about that as I configure those in the weeks ahead.

Read more…

1 Comment

WCCPv1 vs. WCCPv2

WCCPv1:
————————
1. Only single router can participate in a cluster of WCCP-capable devices
2. Intercepts and redirects HTTP and HTTPS
3. Does not allow load balancing

WCCPv2:
————————
1. Supports multiple routers can redirect to clusters and devices, allows for load balancing.
2. Support for non HTTP and HTTPS protocols such as other TCP or UDP packets.
3. Capable of MD5 authentication.
4. Notification capabilities for web cache overloading to the router
5. Load Balancing based on hashing or masking algorithms

No Comments

WCCP “accelerated” option

This option allows 6500/7600 to use hardware acceleration for WCCP packets in Layer 2. This method in theory allows you to utilize up to 3Gbps of traffic on a PFC2 card, perhaps even more with a PFC3B.

The device (eg: WAE or ACNS) needs to have layer 2 adjacency with the 6500 switch in order to take advantage of hardware redirection. If you do not have layer 2 direct adjacency, then most likely you will have to use the GRE tunneling method of WCCP to redirect transparently.

No Comments

OSPF packet types and LSA packets

OSPF packet types are different from OSPF LSA types.
LSA’s are represented by one of these packet types.
Check out the diagram to get a better understanding for the different types of OSPF packet types.

OSPF Packet Types

OSPF Packet Types

Step 1: Hello packet received from a neighbor router causes an OSPF interface to be in INIT STATE regardless of other variables at this point. Hello packet contains things like (a) router-id (b) area id (c) AuthType (d) authentication (e)Netmask (f)Hello Int (g)Dead Int (h)DR (i)BDR (g) Neighbor IP
Step 2 (optional):  If its a broadcast/multiaccess environment, the interface will go into TWO-WAY state to see who will be the DR (designated router) and BDR (backup designated router) based on the info provided in the HELLO packet. This can also be triggered by receiving a DBD packet.
Step 3 (optional): EXSTART state on the interface is when its OK to start exchanging topological databases between neighbors after DR/BDR is determined.
Step 4: EXCHANGE state is the actual “exchange” of databases using the database descriptor packet.
Step 5: LOADING state, based on the DBD packets received. Some parts of the database might be out-of-date so then the Router sends link-state requests, updates, and acknowledgements to make sure everything is all synchronized between the two neighbors and databases match up. The meaning is pretty straight forward, request is a request for an LSA-type 1,2,3,4,5, or 7. Update is when the router provides the actual route prefix/mask/area info, and Acknowledgement is when it tells the neighbor “OK I received your packet in good condition”.
Step 6: FULL state, databases are all up to date and synchronized with all the other routers in the area topology, good to go for inserting routes into the forwarding table now!

No Comments