Hello guys, Here it is a tips / reminder how to implement an site-ot-site IKEv2 tunnel : crypto ikev2 proposal aes-cbc-256-proposal encryption aes-cbc-256 integrity sha1 group 2 crypto ikev2 policy policy1 match address local x.x.x.x proposal aes-cbc-256-proposal crypto ikev2 keyring
IPv6 prefix delegation feature
We will dive into IPv6 prefix delegation prefix. First of all, we will make a real simple topology : R1 acts as a DHCP server and use the prefix delegation feature. But how it works ? How it is configured
IP SLA operation
IP SLA is a great tool to automation some treatment. You could do great things with it. We will work on IP SLA Reaction here. What is it ? You could launch some action on some state of an IP
BGP rib-failure
I think everyone now what is a RIB-Failure in BGP context. It sounds obviously as an exact same route with a lowest AD as {e|i}BGP. We have VRF-Lite on R1 here : We have : 1#show ip bg vpnv4 vrf
BGP review – ‘received-only’ prefix state
Today a little review : edge12.bor03>show ip bg 37.8.8.8 BGP routing table entry for 37.8.0.0/20, version 47221703 Paths: (3 available, best #2, table Default-IP-Routing-Table) Advertised to update-groups: 1 15975, (received-only) 17.69.240.117 from 17.69.240.117 (17.69.255.1) Origin IGP, metric 16, localpref 500,
GETVPN : Group Encrypted Transport VPN
Here it comes. We will use the same topology as the last two blog posts. This time we will play with GETVPN. GETVPN is a Cisco technology. One of the advantage of GETVPN is that we are able to build
IPSEC VTI
IPSEC VTI stands for IPSEC Virtual Tunnel Interface. Besides traditionnal IPSEC configuration with cyrpto map, VTI allows to use an interface. It is useful to apply some policies as we can do as other : service-policy, … For this example,
DMVPN and QOS
How can DMVPN can make some QOS per spoke ? It is what we will configure today : Here is the network : I will not explain how NHRP works in detail here. R1, R2, R3,
OSPF : Outbound filtering
If you read/see videos about OSPF, it will be said that you can only filter on INBOUND or 1/0 on OUTBOUND (via ip ospf database-filter all out / neighbor x.x.x.x database-filter all out). You will say to me, no problem
Some fun on this off-day.
I have found again this networking game. The first time I play with it was in 2009. It was fun to take some hours to play with it. It is not hosted by Cisco, so if you want to retrieve