Saturday, July 26, 2008

still ...

!
still losing time for my sleep
still my home browser is http://www.cisco.com/univercd
still my screen open iTerm or Terminal
still my finger typing on console
still doing on my lab
still thinking how can be routing-loop
!
...
absolutely still going to magic number #
!
end

- combination IGP mutual redistribute (RIP, EIGRP, OSPF)
.OSPF <-> RIP
.OSPF <-> EIGRP
.RIP <-> EIGRP
*<-> mutual redistribute

- OSPF mutual redistribute with RIP should not be routing-loop

if
1. destination on RIP with default metric
2. destination on OSPF with default metric

how scenario can be routing-loop (one example)
# destination on RIP but advertise with modification metric ex. advertise with metric 10

I will share with simple scenario about it next time ;)
still test & prove ... IGP routing-loop

Wednesday, July 16, 2008

Simple TCLSH, multiple ping from IOS

This is simple way to multiple ping from IOS command in one way, use tclsh. tclsh is IOS scripting like shell scripting in *nix machine. Just type your script in note text, paste it in your terminal console.

foreach IP {
192.168.0.1
192.168.1.1
192.168.2.1
192.168.3.1
} { "ping $IP" }


Router# tclsh
Router(tcl)#foreach IP {
+>192.168.0.1
+>192.168.1.1
+>192.168.2.1
+>192.168.3.1
+>} { "ping $IP" }

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

Tuesday, July 15, 2008

Network Time Service Cisco Router

Network time in Cisco router, all configuration about date, time, clock, calendar in Cisco router. in Cisco router divide two method network time : hardware clock, software clock.

# Hardware clock : date time from hardware component inside router, maintain use battery, battery-powered, like bios in computer system, so if router reload or off the clock still running as long as battery is ok
# Software clock : date time from software, source can from NTP, SNTP, VINES, hardware clock

By default Cisco router use software clock, but after router come up, the clock not sync. So we need to make the clock sync from a source.

1. Source from NTP (client)
(config)# ntp server IP-ADDRESS
- can use to primary source
or
(config)# ntp peer IP-ADDRESS
- cau use to secondary source

2. Source from SNTP (client) use in Cisco router 1600, 1700 and older series not support NTP
(config)# sntp server ADDRESS | HOSTNAME
or
(config)# sntp broadcast client

3. Source from VINES (client)
(config)# vines time set-system

for redistribute time into VINES
(config)# vines time use-system

4. Source from Hardware Clock
(config)# clock calendar-valid

5. Update hardware clock from software clock
# ntp update-calendar

6. Update software clock from hardware clock
# clock read-calendar

7. Setting hardware clock manually
> calendar set HH:MM:SS DAY MONTH YEAR
or
> calendar set HH:MM:SS MONTH DAY YEAR

8. Setting software clock manually
# clock set HH:MM:SS DATE MONTH YEAR
or
# clock set HH:MM:SS MONTH DATE YEAR

9. Server-Client
How to make a Cisco router as NTP server, this is example R1 as NTP server and R2 as NTP client, but in R1 we need choose one of source network time

R1(config)# ntp master [STRATUM]
R2(config)# ntp server/peer IP-ADDRESS

10. NTP broadcast
If we have large network, we can use NTP server acts as NTP broadcast to network, so every device in a cloud network can receive broadcast date time.

R-NTP-SERVER(config-if)# ntp broadcast
and
Router(config-if)# ntp broadcast client

optional
Router(config)# ntp broadcastdelay MICROSECONDS

Router(config-if)# ntp disable

Router(config)# ntp source INTERFACE

11. Other config about network time are
- NTP access group
(config)# ntp access-group ACL

- NTP authentication
(config)# ntp authenticate
(config)# ntp authentication-key NUMBER md5 VALUE
(config)# ntp trusted-key KEY-NUMBER

- The Time Zone
(config)# clock timezone ZONE
ZONE : GMT +7

- Summer Time (Daylight Savings Time)
(config)# clock summer-time ZONE recurring

Ohhh one more, Cisco router can connect a GPS timesource device so source use External reference clock but it just a few Cisco device only.

Monday, July 14, 2008

29th Great Eagle Centre Hong Kong


Victoria Harbour

Welcome Disneyland


Great Eagle Centre

Wednesday, July 9, 2008

Failed in first attempt CCIE lab exam

Actually last night i already know about result lab exam from ccie login page, i check from blackberry roaming with local operator, I failed :(

Many thing i know during this journey, until now i still don't know what exact mistake in my lab, before lunch i already complete configure core and verify, the last requirement exam is test pass can ping all loopback, use tclsh, i think there explicit requirement to be I failed.

It's time to prepare for next mission ;) for a few day i will enjoy hong kong, i will pass next time ;)
oh fyi this is post from free wifi in north point mtr using ipod touch.

Mission to Hong Kong

Yesterday i did CCIE lab exam, i come to hong kong in sunday, monday go to lab place, 29th great eagle center wan chai. I'm not alone to attempt lab, we both, my friend from sampe company attempt too.

Here are in hk



Saturday, July 5, 2008

3 days before mission 'going to CCIE'

Do yo know ? why need put 'subnets' in redistribute to OSPF
May be in OSPFv1 just concern about classfull networks :D

Router(config-router)#redistribute rip metric 1 
% Only classful networks will be redistributed

Router(config-router)#redistribute rip metric 1 subnets

What about progress going to CCIE

my condition (last night)
- health 49% increase 59% before sleep
- spirit 89%

this morning
- health 75%

keep spirit, always battle ...
ganbatte kudasai

Friday, July 4, 2008

BGP AS-path Manipulation without AS-prepend

This simple scenario about different way to manipulation AS-path without prepend.

R1(AS100) -- R2(AS200)

R1#
neighbor 1.1.2.2 remote 200

R2#
neighbor 1.1.1.1 remote 100
network 100.100.100.0 mask 255.255.255.0


AS-path prefix 100.100.100.0/24 from R1 is '200 i'
I will make AS-path from R1 is '500 200 i'

How to make it ? manipulate it with 'local-as'

R1#
no neighbor 1.1.2.2 remote 200
neighbor 1.1.2.2 remote 500

R2#
neighbor 1.1.1.1 remote 100
neighbor 1.1.1.1 local-as 500
network 100.100.100.0 mask 255.255.255.0


'local-as' other function is to manipulation AS-number for existing network, may be we want to migration network in real network, we don't want to long downtime. as I know on a router just can run one 'router bgp AS' process ;) so just one AS-number on one router. I ever test how many routing protocol can running in one router.

How about static routing, how many static routing can run in one router ? Let's see ... continue

Thursday, July 3, 2008

BGP is clever (% BGP : incorrect network or mask configured)

Do you know why BGP is clever, she is know if I input incorrect network or mask :D
why she, cause' BGP is beautiful ;;)

Router(config-router)#net 1.1.8.8 mask 255.255.255.0
% BGP: Incorrect network or mask configured

Router(config-router)#net 1.1.8.0 mask 255.255.255.0

Router(config-router)#do sh ip int b | i 1.1.8.8
Loopback0 1.1.8.8 YES NVRAM up up