It was a long long timeago I wrote here. ot of things happens to me but I don’t think it is the time and place to explain it. This post is about a new experience to me : hosting this
Site to site IKEv2 tunnel
Hello guys, Here it is a tips / reminder how to implement an site-ot-site IKEv2 tunnel : crypto ikev2 proposal aes-cbc-256-proposal encryption aes-cbc-256 integrity sha1 group 2 crypto ikev2 policy policy1 match address local x.x.x.x proposal aes-cbc-256-proposal crypto ikev2 keyring
IPv6 prefix delegation feature
We will dive into IPv6 prefix delegation prefix. First of all, we will make a real simple topology : R1 acts as a DHCP server and use the prefix delegation feature. But how it works ? How it is configured
IP SLA operation
IP SLA is a great tool to automation some treatment. You could do great things with it. We will work on IP SLA Reaction here. What is it ? You could launch some action on some state of an IP
BGP rib-failure
I think everyone now what is a RIB-Failure in BGP context. It sounds obviously as an exact same route with a lowest AD as {e|i}BGP. We have VRF-Lite on R1 here : We have : 1#show ip bg vpnv4 vrf
BGP review – ‘received-only’ prefix state
Today a little review : edge12.bor03>show ip bg 37.8.8.8 BGP routing table entry for 37.8.0.0/20, version 47221703 Paths: (3 available, best #2, table Default-IP-Routing-Table) Advertised to update-groups: 1 15975, (received-only) 17.69.240.117 from 17.69.240.117 (17.69.255.1) Origin IGP, metric 16, localpref 500,
Redback magic command
For those of you who are working with Redback equipments, this command can be useful : [local]Redback# washoutthewash Then you will have access to all commands the CLI hide you such as : ‘show sub ip’ or ‘show qos meter’
GETVPN : Group Encrypted Transport VPN
Here it comes. We will use the same topology as the last two blog posts. This time we will play with GETVPN. GETVPN is a Cisco technology. One of the advantage of GETVPN is that we are able to build
IPSEC VTI
IPSEC VTI stands for IPSEC Virtual Tunnel Interface. Besides traditionnal IPSEC configuration with cyrpto map, VTI allows to use an interface. It is useful to apply some policies as we can do as other : service-policy, … For this example,
DMVPN and QOS
How can DMVPN can make some QOS per spoke ? It is what we will configure today : Here is the network : I will not explain how NHRP works in detail here. R1, R2, R3,