tag:blogger.com,1999:blog-7079717391141290492024-09-26T17:50:47.009+02:00shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.comBlogger113125tag:blogger.com,1999:blog-707971739114129049.post-59913423169077574082013-06-22T21:04:00.002+02:002013-06-23T11:35:35.441+02:00<style type="text/css"> pre.source-code { font-family : Andale Mono, Lucida Console, Monaco, fixed, monospace; color : #000; background-color : #eee; font-size : 12px; overflow: auto; padding : 5px; width : 98%; border : 1px dashed #999999; line-height : 14px; clear:both; } </style><code></code>Today i'v tested LISP Mobility across subnets with CSR1000V<br /> according to Cisco Doc <a href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/5.0/LISPmobility/LISPmobile_5.html">Cisco LISP Mobility across subnets-DOC<code>&nbsp;</code></a><br /> <br /> <u><i><b>The lab setup :</b></i></u><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigSG8ydKdtQ7yP6FfZ7hPGtgRwuWLj_NxIZGYGZk0KCYqy7kMBt5893hNY9mqmN1msgMZcLl4A5CcCUYYkaq__92fICKjB7jDgJcHaDFVmvCk71CR7R0-ygp6sgKkLZ-iyyUngg-shvumt/s1600/lispmobilityacrossubnetslab.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="257" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigSG8ydKdtQ7yP6FfZ7hPGtgRwuWLj_NxIZGYGZk0KCYqy7kMBt5893hNY9mqmN1msgMZcLl4A5CcCUYYkaq__92fICKjB7jDgJcHaDFVmvCk71CR7R0-ygp6sgKkLZ-iyyUngg-shvumt/s320/lispmobilityacrossubnetslab.jpg" width="320" /></a></div> In this scenario we're moving one VM from DC1 to DC2 via LISP without any L2 connection between the DC-networks.<br /> <br /> <u><i><b>IP Adressing scheme :</b></i></u><br /> <br /> Branch-Router<br /> Gi1 192.168.3.245/24 (CORE-Network) <br /> Gi2 192.168.4.254/24 (Branch)<br /> <br /> DC1-R1<br /> Lo0 1.1.1.1/32<br /> Gi1 192.168.3.241/24 (CORE-Network)<br /> Gi2 10.1.1.241/24 (DC 1) <br /> <br /> DC1-R2<br /> Lo0 1.1.1.2/32<br /> Gi1 192.168.3.242/24 (CORE-Network)<br /> Gi2 10.1.1.242/24 (DC 1)<br /> HSRP 10.1.1.254/24<br /> <br /> DC2-R3<br /> Lo0 2.2.2.1/32<br /> Lo10 1.1.1.100/32 (Map-Server / Map-Resolver)<br /> Gi1 192.168.3.243/24 (CORE-Network)<br /> Gi2 10.2.1.243/24 (DC 2)<br /> <br /> DC2-R4<br /> Lo0 2.2.2.2/32<br /> Gi1 192.168.3.244/24 (CORE-Network)<br /> Gi2 10.2.1.244/24 (DC 2)<br /> HSRP 10.2.1.254/24<br /> <br /> DC1-Host 10.1.1.1<br /> DC2-Host 10.2.1.1<br /> Branch-Host 192.168.4.1<br /> <br /> <u><i><b>VMWare Network Map :</b></i></u><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSKSejZkW_qOuEsu3n0jLEnFcrmXPEGVomPCxBEKaCfOH6dDTeOQNncdsqkEyD8-KUF3tGvxY0D8rEcc5_ZI22rPSHsqX5vRlhwtHUn56mivpMo_UbqxIzYXzXxmILM-vlvw9KiHqq_TdC/s1600/network-map.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSKSejZkW_qOuEsu3n0jLEnFcrmXPEGVomPCxBEKaCfOH6dDTeOQNncdsqkEyD8-KUF3tGvxY0D8rEcc5_ZI22rPSHsqX5vRlhwtHUn56mivpMo_UbqxIzYXzXxmILM-vlvw9KiHqq_TdC/s400/network-map.JPG" width="230" /></a></div> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <u><i><b>Basic Configurations :</b></i></u><br /> <br /> Branch-Router<br /> <pre class="source-code"><code> ! ! Last configuration change at 12:31:55 UTC Sat Jun 22 2013 ! version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no platform punt-keepalive disable-kernel-core platform console virtual ! hostname Branch ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! ! no aaa new-model ! ! ! ! ! ! ip dhcp pool BRANCH network 192.168.4.0 255.255.255.0 default-router 192.168.4.254 ! ! ! ! ! ! ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! spanning-tree extend system-id ! ! redundancy mode none ! ! ! ! ! ! ip tftp source-interface GigabitEthernet0 ! ! ! ! ! ! ! ! ! ! ! ! ! interface LISP0 ! interface GigabitEthernet1 description CORE Network ip address 192.168.3.245 255.255.255.0 negotiation auto ! interface GigabitEthernet2 description BRANCH NETWORK platform ring rx 256 ip address 192.168.4.252 255.255.255.0 standby 0 preempt standby 4 ip 192.168.4.254 negotiation auto ! interface GigabitEthernet0 vrf forwarding Mgmt-intf ip address dhcp negotiation auto ! ! router eigrp 1 network 192.168.3.0 ! router lisp database-mapping 192.168.4.0/24 IPv4-interface GigabitEthernet1 priority 1 weight 100 ipv4 itr map-resolver 1.1.1.100 ipv4 itr ipv4 etr map-server 1.1.1.100 key BRANCH ipv4 etr exit ! ip forward-protocol nd ! no ip http server no ip http secure-server ! cdp run ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 privilege level 15 stopbits 1 line aux 0 stopbits 1 line vty 0 4 privilege level 15 no login line vty 5 15 privilege level 15 no login ! ! end Branch# </code></pre> <br /> DC1-R1<br /> <pre class="source-code"><code> ! ! Last configuration change at 17:47:49 UTC Sat Jun 22 2013 ! version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no platform punt-keepalive disable-kernel-core platform console virtual ! hostname DC1-R1 ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! ! no aaa new-model ! ip vrf MGMT ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! otv site bridge-domain 101 ! multilink bundle-name authenticated ! ! ! ! ! ! ! license accept end user agreement spanning-tree extend system-id ! ! redundancy mode none ! ! ! ! ! ! ip tftp source-interface GigabitEthernet0 ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 1.1.1.1 255.255.255.255 ! interface LISP0 ! interface GigabitEthernet1 description CORE NETWORK ip address 192.168.3.241 255.255.255.0 negotiation auto ipv6 address autoconfig default ! interface GigabitEthernet2 description DC1 ip address 10.1.1.241 255.255.255.0 standby 1 ip 10.1.1.254 standby 1 preempt standby 1 mac-address 00a0.0000.0001 negotiation auto lisp mobility MOBILITY ! interface GigabitEthernet0 vrf forwarding Mgmt-intf ip address dhcp negotiation auto ! ! router eigrp 1 network 1.0.0.0 network 192.168.3.0 passive-interface GigabitEthernet2 ! router lisp locator-set DC 1.1.1.1 priority 1 weight 50 1.1.1.2 priority 1 weight 50 exit ! database-mapping 10.1.0.0/16 1.1.1.1 priority 1 weight 50 database-mapping 10.1.0.0/16 1.1.1.2 priority 1 weight 50 dynamic-eid MOBILITY database-mapping 10.1.1.0/24 locator-set DC map-notify-group 224.0.0.100 exit ! ipv4 itr map-resolver 1.1.1.100 ipv4 itr ipv4 etr map-server 1.1.1.100 key DC1 ipv4 etr exit ! ip forward-protocol nd ! no ip http server no ip http secure-server ip pim ssm default ! ! cdp run ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 privilege level 15 stopbits 1 line aux 0 stopbits 1 line vty 0 4 privilege level 15 no login line vty 5 15 privilege level 15 no login ! ! end </code></pre> <br /> DC1-R2<br /> <pre class="source-code"><code> ! ! Last configuration change at 17:48:53 UTC Sat Jun 22 2013 ! version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no platform punt-keepalive disable-kernel-core platform console virtual ! hostname DC1-R2 ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! ! no aaa new-model ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! spanning-tree extend system-id ! ! redundancy mode none ! ! ! ! ! ! ip tftp source-interface GigabitEthernet0 ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback1 ip address 1.1.1.2 255.255.255.255 ! interface LISP0 ! interface GigabitEthernet1 description CORE-Network ip address 192.168.3.242 255.255.255.0 negotiation auto ! interface GigabitEthernet2 description DC1 ip address 10.1.1.242 255.255.255.0 standby 1 ip 10.1.1.254 standby 1 preempt standby 1 mac-address 00a0.0000.0001 negotiation auto lisp mobility MOBILITY ! interface GigabitEthernet0 vrf forwarding Mgmt-intf ip address dhcp negotiation auto ! ! router eigrp 1 network 1.0.0.0 network 192.168.3.0 passive-interface GigabitEthernet2 ! router lisp locator-set DC 1.1.1.1 priority 1 weight 50 1.1.1.2 priority 1 weight 50 exit ! database-mapping 10.1.0.0/16 1.1.1.1 priority 1 weight 50 database-mapping 10.1.0.0/16 1.1.1.2 priority 1 weight 50 dynamic-eid MOBILITY database-mapping 10.1.1.0/24 locator-set DC map-notify-group 224.0.0.100 exit ! ipv4 itr map-resolver 1.1.1.100 ipv4 itr ipv4 etr map-server 1.1.1.100 key DC1 ipv4 etr exit ! ip forward-protocol nd ! no ip http server no ip http secure-server ip pim ssm default ! ! ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 privilege level 15 stopbits 1 line aux 0 stopbits 1 line vty 0 4 privilege level 15 no login line vty 5 15 privilege level 15 no login ! ! end DC1-R2# </code></pre> <br /> DC2-R3<br /> <pre class="source-code"><code> ! ! Last configuration change at 17:49:41 UTC Sat Jun 22 2013 ! version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no platform punt-keepalive disable-kernel-core platform console virtual ! hostname DC2-R3 ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! ! no aaa new-model ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! spanning-tree extend system-id ! ! redundancy mode none ! ! ! ! ! ! ip tftp source-interface GigabitEthernet0 ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback1 ip address 2.2.2.1 255.255.255.255 ! interface Loopback10 ip address 1.1.1.100 255.255.255.255 delay 1000000 ! interface LISP0 ! interface GigabitEthernet1 description CORE-Network ip address 192.168.3.243 255.255.255.0 negotiation auto ! interface GigabitEthernet2 description DC2 ip address 10.2.1.243 255.255.255.0 standby 1 ip 10.2.1.254 standby 1 preempt standby 1 mac-address 00a0.0000.0001 negotiation auto lisp mobility MOBILITY ! interface GigabitEthernet0 vrf forwarding Mgmt-intf ip address dhcp negotiation auto ! ! router eigrp 1 network 1.0.0.0 network 2.0.0.0 network 192.168.3.0 passive-interface GigabitEthernet2 ! router lisp locator-set DC 2.2.2.1 priority 1 weight 50 2.2.2.2 priority 1 weight 50 exit ! site BRANCH authentication-key BRANCH eid-prefix 192.168.4.0/24 accept-more-specifics exit ! site DC1 authentication-key DC1 eid-prefix 10.1.0.0/16 accept-more-specifics exit ! site DC2 authentication-key DC2 eid-prefix 10.2.0.0/16 accept-more-specifics exit ! database-mapping 10.2.0.0/16 2.2.2.1 priority 1 weight 1 database-mapping 10.2.0.0/16 2.2.2.2 priority 1 weight 1 dynamic-eid MOBILITY database-mapping 10.1.1.0/24 locator-set DC map-notify-group 224.0.0.100 exit ! ipv4 map-server ipv4 map-resolver ipv4 itr map-resolver 1.1.1.100 ipv4 itr ipv4 etr map-server 1.1.1.100 key DC2 ipv4 etr exit ! ip forward-protocol nd ! no ip http server no ip http secure-server ip pim ssm default ! ! cdp run ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 privilege level 15 stopbits 1 line aux 0 stopbits 1 line vty 0 4 privilege level 15 no login line vty 5 15 privilege level 15 no login ! ! end DC2-R3# </code></pre> <br /> DC2-R4<br /> <pre class="source-code"><code> ! ! Last configuration change at 17:51:23 UTC Sat Jun 22 2013 ! version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no platform punt-keepalive disable-kernel-core platform console virtual ! hostname DC2-R4 ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! logging buffered 65000 notifications ! no aaa new-model ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! spanning-tree extend system-id ! ! redundancy mode none ! ! ! ! ! ! ip tftp source-interface GigabitEthernet0 ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 2.2.2.2 255.255.255.255 ! interface LISP0 ! interface GigabitEthernet1 description CORE-Network ip address 192.168.3.244 255.255.255.0 negotiation auto ! interface GigabitEthernet2 description DC2 ip address 10.2.1.244 255.255.255.0 standby 1 ip 10.2.1.254 standby 1 priority 101 standby 1 preempt standby 1 mac-address 00a0.0000.0001 negotiation auto lisp mobility MOBILITY ! interface GigabitEthernet0 vrf forwarding Mgmt-intf ip address 192.168.3.185 255.255.255.0 negotiation auto ! ! router eigrp 1 network 1.0.0.0 network 2.0.0.0 network 192.168.3.0 passive-interface GigabitEthernet2 ! router lisp locator-set DC 2.2.2.1 priority 1 weight 50 2.2.2.2 priority 1 weight 50 exit ! database-mapping 10.2.0.0/16 2.2.2.1 priority 1 weight 50 database-mapping 10.2.0.0/16 2.2.2.2 priority 1 weight 50 dynamic-eid MOBILITY database-mapping 10.1.1.0/24 locator-set DC map-notify-group 224.0.0.100 exit ! ipv4 itr map-resolver 1.1.1.100 ipv4 itr ipv4 etr map-server 1.1.1.100 key DC2 ipv4 etr exit ! ip forward-protocol nd ! no ip http server no ip http secure-server ip pim ssm default ip route 0.0.0.0 0.0.0.0 192.168.3.254 ! ! cdp run ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 privilege level 15 stopbits 1 line aux 0 stopbits 1 line vty 0 4 privilege level 15 no login line vty 5 15 privilege level 15 no login ! ! end </code></pre> <br /> <u><i><b>Let's start :</b></i></u><br /> <br /> The inital setup is quite normal. DC1-Host resides in DC1. In this setup, DC1-Host can be reached from the Branch via LISP.<br /> <br /> <pre class="source-code"><code> root@DC1-Host:~# ping 192.168.4.1 -c 1 PING 192.168.4.1 (192.168.4.1) 56(84) bytes of data. 64 bytes from 192.168.4.1: icmp_req=1 ttl=62 time=1.26 ms --- 192.168.4.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.265/1.265/1.265/0.000 ms root@DC1-Host:~# </code></pre> <br /> <pre class="source-code"><code> DC1-R2#show ip lisp map-cache LISP IPv4 Mapping Cache for EID-table default (IID 0), 3 entries 0.0.0.0/0, uptime: 06:16:12, expires: never, via static send map-request Negative cache entry, action: send-map-request 10.2.0.0/16, uptime: 00:10:47, expires: 23:49:12, via map-reply, complete Locator Uptime State Pri/Wgt 2.2.2.1 00:10:47 up 1/50 2.2.2.2 00:10:47 up 1/50 192.168.4.0/24, uptime: 05:36:07, expires: 18:23:52, via map-reply, complete Locator Uptime State Pri/Wgt 192.168.3.245 05:36:07 up 1/100 DC1-R2# </code></pre> <br /> Now we move over DC-Host1 to DC2<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqgPnVJCO8QblNhQTUH-3baY9sXhwcGQ3w3f2vc4MN86CR4aRlr36pcIbH9ltKZ15cnFYWBGIKSRwChp0DX9kmrZqpHqIR7trDw6uC5jlumXfwUrK7YexupPtb7IMrAxNRAQ-Mo4Csx8SY/s1600/moving-from-dc1-to-dc2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqgPnVJCO8QblNhQTUH-3baY9sXhwcGQ3w3f2vc4MN86CR4aRlr36pcIbH9ltKZ15cnFYWBGIKSRwChp0DX9kmrZqpHqIR7trDw6uC5jlumXfwUrK7YexupPtb7IMrAxNRAQ-Mo4Csx8SY/s400/moving-from-dc1-to-dc2.JPG" width="400" /></a></div> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> The ping from DC1 to the Branch-Host shows that we had a short interruption (approx. 4 sec)<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKj7E9KF7lRv0if3m0sd9Gyyd-iuk2tGjlxi9Y6TJLi5pkL5O8VJKDod2I0L2PRnDEJErFBp8zjypjTMBe669EWH0cZpGL4xcwT3pDhEv7A58CTtR5gltf6JfZwTr6ZKaW3FJYO8rR_0bm/s1600/moving-from-dc1-to-dc2-ping.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKj7E9KF7lRv0if3m0sd9Gyyd-iuk2tGjlxi9Y6TJLi5pkL5O8VJKDod2I0L2PRnDEJErFBp8zjypjTMBe669EWH0cZpGL4xcwT3pDhEv7A58CTtR5gltf6JfZwTr6ZKaW3FJYO8rR_0bm/s320/moving-from-dc1-to-dc2-ping.JPG" width="320" /></a></div> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> After the move from DC1 -&gt; DC2, we can see the following dynamic-eid entries in DC2 The * indicates that the HSRP standby router learned from the moved VM through a Map-Notification via Multicast. He cannot learn it directly as the moved VM communicates to the HSRP MAC which is active on DC2-R4.<br /> The LISP Map <br /> <pre class="source-code"><code> DC2-R4#show lisp dynamic-eid summary LISP Dynamic EID Summary for VRF "default" * = Dyn-EID learned by site-based Map-Notify Dyn-EID Name Dynamic-EID Interface Uptime Last Pending Packet Ping Count MOBILITY 10.1.1.1 Gi2 00:02:13 00:00:16 0 DC2-R4# -------------------------------------------------------------------- DC2-R3#show lisp dynamic-eid summary LISP Dynamic EID Summary for VRF "default" * = Dyn-EID learned by site-based Map-Notify Dyn-EID Name Dynamic-EID Interface Uptime Last Pending Packet Ping Count MOBILITY *10.1.1.1 Gi2 00:02:52 00:00:47 0 DC2-R3#&nbsp;&nbsp;</code></pre> <br /> Let's see some debugs. What happens during switchover of VM from DC1 to DC2 -&gt; <br /> <pre class="source-code"><code> DC2-R4#debug lisp control-plane dynamic-eid LISP control plane dynamic EID debugging is on DC2-R4# *Jun 22 18:33:20.727: LISP-0: AF IID 0 IPv4, 10.2.1.1 does not match configured dyn-EID groups. DC2-R4# DC2-R4#term mon DC2-R4# *Jun 22 18:33:38.080: LISP: Processing dyn-EID detection for GigabitEthernet2 EID prefix 10.1.1.1/32 *Jun 22 18:33:38.080: LISP-0: DynEIDgrp IID 0 [MOBILITY] Sending triggered multicast map-notify. *Jun 22 18:33:38.080: LISP-0: DynEID IID 0 10.1.1.1 [MOBILITY:GigabitEthernet2] Created. DC2-R4#show ip route lisp Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route + - replicated route, % - next hop override Gateway of last resort is 192.168.3.254 to network 0.0.0.0 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks l 10.1.1.1/32 [10/1] via 10.1.1.1, 00:02:26, GigabitEthernet2 DC2-R4# </code></pre> From Branch-Router perspective : <br /> <pre class="source-code"><code> Branch#show ip lisp map-cache LISP IPv4 Mapping Cache for EID-table default (IID 0), 5 entries 0.0.0.0/0, uptime: 03:41:28, expires: never, via static send map-request Negative cache entry, action: send-map-request 10.1.0.0/16, uptime: 03:39:45, expires: 23:59:46, via map-reply, complete Locator Uptime State Pri/Wgt 1.1.1.1 03:39:45 up 1/50 1.1.1.2 03:39:45 up 1/50 10.1.1.1/32, uptime: 00:07:22, expires: 23:52:37, via map-reply, complete Locator Uptime State Pri/Wgt 2.2.2.1 00:07:22 up 1/50 2.2.2.2 00:07:22 up 1/50 10.2.0.0/16, uptime: 03:30:25, expires: 20:29:35, via map-reply, complete Locator Uptime State Pri/Wgt 2.2.2.1 03:30:25 up 1/1 2.2.2.2 03:30:25 up 1/1 64.0.0.0/2, uptime: 00:23:58, expires: 00:05:53, via map-reply, forward-native Negative cache entry, action: forward-native Branch#&nbsp;</code></pre> <br /> Now where moving the VM back to DC1 by changing the NIC network.&gt;<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimTa0ZK9Jeg-J0dUB8cApsjBADNeIjxLRkb_JIKyEeSHGUi0YZ9AAQ-KjyTzZ695WccmrUvwDeINGeKbuqxINWZyFZCpIu7M8YeQ3tOZWkDNo2bAmjpleeL0RUiTaDjsGM_jnYgfpzX9Et/s1600/02-dc2-to-dc1-back-vm.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimTa0ZK9Jeg-J0dUB8cApsjBADNeIjxLRkb_JIKyEeSHGUi0YZ9AAQ-KjyTzZ695WccmrUvwDeINGeKbuqxINWZyFZCpIu7M8YeQ3tOZWkDNo2bAmjpleeL0RUiTaDjsGM_jnYgfpzX9Et/s400/02-dc2-to-dc1-back-vm.JPG" width="400" /></a></div> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> Again where experiencing some packet loss as the dynamic-map-entry need to timeout. <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihIlJ-2IwayTKTzeEer35_Uco5ZFP_pVG_T5V2nYHstqNAHhKD6p1KfTiyI3VbGvHCgav6AP3yKRxLBvChwoWxJ-XBTgz0fmVx_emJQYzG5gcwejTwxNl99sozWLT9_GILdZuHKJfxxSw1/s1600/02-dc2-to-dc1-back.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="216" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihIlJ-2IwayTKTzeEer35_Uco5ZFP_pVG_T5V2nYHstqNAHhKD6p1KfTiyI3VbGvHCgav6AP3yKRxLBvChwoWxJ-XBTgz0fmVx_emJQYzG5gcwejTwxNl99sozWLT9_GILdZuHKJfxxSw1/s320/02-dc2-to-dc1-back.JPG" width="320" /></a></div> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> See below how DC2-R4 taking care <br /> <pre class="source-code"><code> DC2-R4#show lisp dynamic-eid summary LISP Dynamic EID Summary for VRF "default" * = Dyn-EID learned by site-based Map-Notify Dyn-EID Name Dynamic-EID Interface Uptime Last Pending Packet Ping Count MOBILITY 10.1.1.1 Gi2 00:14:34 00:00:49 0 DC2-R4#show lisp dynamic-eid summary LISP Dynamic EID Summary for VRF "default" * = Dyn-EID learned by site-based Map-Notify Dyn-EID Name Dynamic-EID Interface Uptime Last Pending Packet Ping Count MOBILITY 10.1.1.1 Gi2 00:14:43 00:00:57 0 DC2-R4# *Jun 22 18:48:25.359: LISP-0: DynEID IID 0 10.1.1.1 [MOBILITY:GigabitEthernet2] Received ping 100% -&gt; 0% ok event, deleting. *Jun 22 18:48:25.359: LISP-0: DynEID IID 0 10.1.1.1 [MOBILITY:GigabitEthernet2] Delete. *Jun 22 18:48:25.359: LISP-0: DynEIDgrp IID 0 [MOBILITY] Sending triggered multicast map-notify. DC2-R4#show lisp dynamic-eid summary LISP Dynamic EID Summary for VRF "default" * = Dyn-EID learned by site-based Map-Notify Dyn-EID Name Dynamic-EID Interface Uptime Last Pending Packet Ping Count DC2-R4# </code></pre> <br /> Pros of the solution<br /> &nbsp;- no need for DCI (OTV,vPC,EoMPLS,VPLS)<br /> - runs on any L3-transport<br /> - optimal ingress traffic routing<br /> <br /> &nbsp;Small drawbacks of the solution<br /> -in the DOC Cisco says it's only for cold migration, from my perspective this is no longer valid as the active DC router now sends Gratuitous ARP for the moved VM<br /> <br /> See below ARP of DC1-Host before and after move from DC1 to DC2<br /> root@DC1-Host:~# arp -an | grep '(10.1.1.2)'<br /> ? (10.1.1.2) auf 00:0c:29:99:25:2f [ether] auf eth1<br /> root@DC1-Host:~#&nbsp; <br /> root@DC1-Host-2:~# arp -an | grep '(10.1.1.1)'<br /> ? (10.1.1.1) auf 00:0c:29:0d:b5:cc [ether] auf eth1<br /> root@DC1-Host-2:~# <br /> <br /> <br /> After 30 seconds the ARP entries got updated on communication between 2 Linux hosts<br /> <br /> root@DC1-Host-2:~# arp -an | grep '(10.1.1.2)'<br /> ? (10.1.1.2) auf 00:a0:00:00:00:01 [ether] auf eth1<br /> root@DC1-Host-2:~# <br /> root@DC1-Host-2:~# arp -an | grep '(10.1.1.1)'<br /> ? (10.1.1.1) auf 00:a0:00:00:00:01 [ether] auf eth1<br /> root@DC1-Host-2:~# <br /> <br /> <br /> See the complete behaviour in the following Trace-Files<br /> <br /> <br /> Because of Gratutious ARP from DC1-R1 for 10.1.1.1 with HSRP vMAC.<br /> and Proxy-ARP from DC2-R3 for 10.1.1.2 with HSRP vMAC.<br /> <a href="http://www.file-upload.net/download-7746578/LISP-Mobility-Across-Subnets-DC1-Host-1.pcap.html">View from DC1-Host-1 (10.1.1.1)</a><br /> <a href="http://www.blogger.com/blogger.g?blogID=707971739114129049">View from DC1-Host-2 (10.1.1.2)</a><br /> <br /> <br /> <br /> <blockquote> </blockquote> <!------>shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com1tag:blogger.com,1999:blog-707971739114129049.post-51435616185099208932012-07-29T11:04:00.000+02:002012-07-29T11:04:25.811+02:00<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> Open Terminal<br /> <br /> and type <br /> <i>gconftool-2 --set /apps/metacity/general/button_layout &nbsp;--type string&nbsp; "menu:minimize,maximize,close"</i><br /> <br /> Now, the buttons are on the right place<br /> <br />shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-6950383418687021562012-07-27T12:53:00.002+02:002012-07-27T21:05:48.117+02:00Benchmarks <br /> <br /> Test with new 2 vcpu - 1GB RAM - LSI 9260-4i - RAID0 - 2 x Samsung HD204ui - unecrypted- ext3<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI.dat bs=1k count=1000<br /> 1000+0 Datensätze ein<br /> 1000+0 Datensätze aus<br /> 1024000 Bytes (1,0 MB) kopiert, 0,0054602 s, 188 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI.dat bs=1k count=10000<br /> 10000+0 Datensätze ein<br /> 10000+0 Datensätze aus<br /> 10240000 Bytes (10 MB) kopiert, 0,0371225 s, 276 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI.dat bs=1k count=100000<br /> 100000+0 Datensätze ein<br /> 100000+0 Datensätze aus<br /> 102400000 Bytes (102 MB) kopiert, 0,344679 s, 297 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI.dat bs=1k count=1000000<br /> 1000000+0 Datensätze ein<br /> 1000000+0 Datensätze aus<br /> 1024000000 Bytes (1,0 GB) kopiert, 3,80375 s, 269 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI.dat bs=1k count=10000000<br /> 10000000+0 Datensätze ein<br /> 10000000+0 Datensätze aus<br /> 10240000000 Bytes (10 GB) kopiert, 44,017 s, 233 MB/s<br /> root@vm01-storage:~#<br /> <br /> Test with new 2 vcpu - 1GB RAM - LSI 9260-4i - RAID0 - 2 x Samsung HD204ui - luksFormat<code>-c aes-ecb-null -s 128&nbsp;</code> - ext3<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=1000<br /> 1000+0 Datensätze ein<br /> 1000+0 Datensätze aus<br /> 1024000 Bytes (1,0 MB) kopiert, 0,0075393 s, 136 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=10000<br /> 10000+0 Datensätze ein<br /> 10000+0 Datensätze aus<br /> 10240000 Bytes (10 MB) kopiert, 0,0397358 s, 258 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=100000<br /> 100000+0 Datensätze ein<br /> 100000+0 Datensätze aus<br /> 102400000 Bytes (102 MB) kopiert, 0,395835 s, 259 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=1000000<br /> 1000000+0 Datensätze ein<br /> 1000000+0 Datensätze aus<br /> 1024000000 Bytes (1,0 GB) kopiert, 8,23845 s, 124 MB/s<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=10000000<br /> 10000000+0 Datensätze ein<br /> 10000000+0 Datensätze aus<br /> 10240000000 Bytes (10 GB) kopiert, 92,0674 s, 111 MB/s<br /> root@vm01-storage:~# <br /> <br /> &nbsp;Test with new 2 vcpu - 4GB RAM - LSI 9260-4i - RAID0 - 2 x Samsung HD204ui - luksFormat<code>-c aes-ecb-null -s 128&nbsp;</code> - ext3<br /> root@vm01-storage:/# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=1000<br /> 1000+0 Datensätze ein<br /> 1000+0 Datensätze aus<br /> 1024000 Bytes (1,0 MB) kopiert, 0,00577927 s, 177 MB/s<br /> root@vm01-storage:/# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=10000<br /> 10000+0 Datensätze ein<br /> 10000+0 Datensätze aus<br /> 10240000 Bytes (10 MB) kopiert, 0,0358235 s, 286 MB/s<br /> root@vm01-storage:/# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=100000<br /> 100000+0 Datensätze ein<br /> 100000+0 Datensätze aus<br /> 102400000 Bytes (102 MB) kopiert, 0,332578 s, 308 MB/s<br /> root@vm01-storage:/# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=1000000<br /> 1000000+0 Datensätze ein<br /> 1000000+0 Datensätze aus<br /> 1024000000 Bytes (1,0 GB) kopiert, 9,08193 s, 113 MB/s<br /> root@vm01-storage:/# dd if=/dev/zero of=/storage/LSI-9260-4i-RAID0-SAMSUNG-HD204UI-enc-aes128-ecb-null.dat bs=1k count=10000000<br /> 10000000+0 Datensätze ein<br /> 10000000+0 Datensätze aus<br /> 10240000000 Bytes (10 GB) kopiert, 91,4805 s, 112 MB/s<br /> root@vm01-storage:/#<br /> <br /> &nbsp; Test with new 2 vcpu - 4GB RAM - LSI 9260-4i - RAID1- 2 x Hitachi 7K4000 - luksFormat<code>-c aes-ecb-null -s 128&nbsp;</code> - ext3<br /> root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=10<br />10+0 Datensätze ein<br />10+0 Datensätze aus<br />10240 Bytes (10 kB) kopiert, 0,000331548 s, 30,9 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=100<br />100+0 Datensätze ein<br />100+0 Datensätze aus<br />102400 Bytes (102 kB) kopiert, 0,000588292 s, 174 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=1000<br />1000+0 Datensätze ein<br />1000+0 Datensätze aus<br />1024000 Bytes (1,0 MB) kopiert, 0,00601441 s, 170 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=10000<br />10000+0 Datensätze ein<br />10000+0 Datensätze aus<br />10240000 Bytes (10 MB) kopiert, 0,0375315 s, 273 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=100000<br />100000+0 Datensätze ein<br />100000+0 Datensätze aus<br />102400000 Bytes (102 MB) kopiert, 0,365487 s, 280 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=1000000<br />1000000+0 Datensätze ein<br />1000000+0 Datensätze aus<br />1024000000 Bytes (1,0 GB) kopiert, 10,3615 s, 98,8 MB/s<br />root@vm01-storage:~# dd if=/dev/zero of=/storage/TEST bs=1k count=10000000<br />10000000+0 Datensätze ein<br />10000000+0 Datensätze aus<br />10240000000 Bytes (10 GB) kopiert, 98,14 s, 104 MB/s<br />root@vm01-storage:~# <br />shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-5618403122200265242012-07-06T22:56:00.001+02:002012-07-06T22:57:39.850+02:00<style type="text/css"> pre.source-code { font-family : Andale Mono, Lucida Console, Monaco, fixed, monospace; color : #000; background-color : #eee; font-size : 12px; overflow: auto; padding : 5px; width : 98%; border : 1px dashed #999999; line-height : 14px; clear:both; } </style><br /> I searched the whole web to find a good script for converting movies to Kindle Fire friendly format.<br /> <br /> Finally i made it up from some other scripts i found for other devices<br /> <br /> Note : I use CM_9 and Mob*Play*r on it<br /> <br /> convert-kindle.sh<br /> <pre class="source-code"><code> INPUT="$1" ffmpeg -y -i "$INPUT" -s 1024x600 -b 0.3M -bt 0.3M -vcodec libx264 -pass 1 -vpre fastfirstpass -an "$INPUT"-KINDLEFIRE.mp4 ffmpeg -y -i "$INPUT" -s 1024x600 -b 0.3M -bt 0.3M -vcodec libx264 -pass 2 -vpre hq -acodec libfaac -ac 2 -ar 48000 -ab 128k "$INPUT"-KINDLEFIRE.mp4</code></pre>shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-5462192595170888212011-12-01T19:29:00.001+01:002011-12-01T19:29:55.606+01:00Passed in 3rd attempt<br /> <br /> <br /> BLOG CLOSED !shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-50439111531684813622011-10-25T19:24:00.001+02:002011-10-25T19:24:33.925+02:00I'm so pissed, failed TS and failed Config... what a f**** up dayshwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-11347690665477054272011-10-20T17:07:00.001+02:002011-10-20T17:07:33.512+02:00dpkg -x [package].deb common<br /> dpkg --control [package].deb<br /> nano DEBIAN/control<br /> Löschen der Zeile "Depends: libc6 (>= 2.3.4-1)"<br /> cp -a DEBIAN/ common/<br /> dpkg -b common [package].deb<br /> sudo dpkg --force-all -i [package].deb<br /> rm -rf common DEBIANshwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-73467310944031043632011-10-17T08:00:00.002+02:002011-10-17T08:00:18.820+02:00After 2 weeks of hard bootcamp, it's 7 days left to my second and hopefully final attemptshwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-26429644424111524412011-09-21T22:24:00.001+02:002011-09-21T22:24:46.618+02:00Did not much this week, been on business travel .<br /> Just watched the mailing lists and made some VoD reviewshwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-88034632337422149052011-09-12T09:01:00.001+02:002011-09-12T09:01:21.082+02:00TS9.1)permit redistribution route-map on R6 that BB1 get routes back/redistri metric - 2p<br /> TS9.2) no area 0 range... on R5 - 2p<br /> TS9.3) router bgp, maximum-path - 2p<br /> TS9.4) prepend on R4/maxas-limit on R5 - 2p<br /> TS9.5) community no-advert on R6 -2p<br /> TS9.6) NOT POSSIBLE WITH 3350, modify eem - 2p<br /> TS9.7) change prim/sec to sec/primary address on SW4 (INE:no validate update-source) - 2p<br /> TS9.8) redistri connected lo0 - 0p (send version)<br /> TS9.9) rp-accept filter/wrong ACL - 3p<br /> TS9.10) ACL 100 on R5 - 2p<br /> <br /> Full 21/Pass 16/My 19shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-4103061845895720282011-09-10T13:21:00.001+02:002011-09-10T13:21:17.929+02:001. Layer 2 Technologies<br /> 1.1 Spanning-Tree Protocol -3p<br /> 1.2 Layer 2 Connectivity - 2p - used native/l2tunnel instead of dot1q<br /> 1.3 Spanning-Tree Protocol - 2p<br /> 1.4 Spanning Tree Protocol - 2p<br /> 1.5 Multilink PPP over FR - 3p<br /> <br /> 2. IPv4<br /> 2.1 OSPF - 2p<br /> 2.2 OSPF - 2p<br /> 2.3 RIP - 2p<br /> 2.4 IGP - 3p<br /> 2.5 Load Distribution - 3p (used bandwidth)<br /> 2.6 BGP Summarization -2p<br /> 2.7 BGP Next-hop processing - 2p (used real ip instead of peer-address)<br /> 2.8 BGP Bestpath Selection - 3p<br /> 2.9 BGP Filtering - 3p<br /> <br /> 3. IPv6<br /> 3.1 OSPFv3 - 2p<br /> 3.2 IPv6 Default Routing - 3p (use route-map to match on null route)<br /> 3.3 IPv6 Redistribution - 2p<br /> <br /> 5. IP Multicast<br /> 5.1 Auto-RP - 3p<br /> 5.2 Multicast Distribution - 2p<br /> 5.3 Multicast Testing - 0p (RPF issue)<br /> <br /> 6. Security<br /> 6.1 Router hardening - 3p<br /> 6.2 Traffic Filtering - 0p - used ZBFW<br /> 6.3 Traffic Filtering - 0p - used ZBFW<br /> <br /> 7. Network Serices<br /> 7.1 Default Gateways - 2p<br /> 7.2 Web Caching - 0p - DocCD was down today :D<br /> 7.3 IP SLA - 2p<br /> 7.4 Gateway Redundancy - 3p<br /> <br /> 8. QoS<br /> 8.1 FRTS - 3p<br /> 8.2 Queueing - 3p<br /> 8.3 Congestion Management - 3p<br /> 8.4 Congestion Avoidance - 3p<br /> <br /> Full 79/Pass 64/My 68shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-91496210981781738642011-09-04T10:42:00.002+02:002011-09-04T10:42:37.280+02:00TS8.1) frame-relay map of R4s next-hop - 2p<br /> TS8.2) wrong ip and neighbor ip on R5 (255->254) - 2p<br /> TS8.3) ??? - already receives prefixes - 0p<br /> TS8.4) not possible with 3550 in transit - 2p<br /> TS8.5) wrong network statement on SW2 - 2p<br /> TS8.6) acl on R6 (OUTSIDE_IN) - 2p<br /> TS8.7) transport input telnet on R1 - 2p<br /> TS8.8) change menu-exit to exit - 2p<br /> TS8.9) removeing null-routes on SW1 - 2p<br /> TS8.10) required/offer - 0p<br /> <br /> Passed INE Vol 2 - TS 8 in 37 minutes :D<br /> <br /> Full 21/Pass 16/My 16)<br /> shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-86431845648871097902011-09-04T10:41:00.001+02:002011-09-04T10:41:54.652+02:00...fail :/shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-1044454009649880962011-08-29T20:10:00.003+02:002011-08-29T20:10:59.976+02:00As i'm a little bit sick of lab'in and to not overthrottle myself, I relax this week with some nice VoDs :)<br /> <br /> On Saturday i will finish INE Vol2 Lab 7 and on Sunday do TS+Config Lab 8.<br /> <br /> Time to decide when to do the Mock Lab ... hmmm. Maybe on 24th of Septshwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-89040993876890054732011-08-24T10:17:00.000+02:002011-08-24T10:17:43.219+02:00was just too hot to complete it, but i think it would have been a FAIL.<br /> <br /> Difficulty level 9 (which is much more difficult than the real thing)shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-10807800119316964852011-08-22T15:34:00.000+02:002011-08-22T15:34:24.464+02:00I needed to upgrade the bios of my Computer (Intel).<br /> <br /> But how to do it without windows?<br /> <br /> Download a FreeDOS image, i'll use Balder for now.<br /> Prepare the usb-stick<br /> check partition (e.g cfdisk /dev/sda)<br /> mkfs.msdos /dev/sda1<br /> <br /> Commands<br /> <br /> qemu -boot a -fda balder10.img -hda /dev/sda<br /> A:\> sys c:<br /> A:\> xcopy /E /N a: c:<br /> <br /> Check with<br /> <br /> qemu -hda /dev/sda<br /> <br /> All GRML uses should also take a look at http://wiki.grml.org/doku.php?id=biosupdate which provides a nice overview.<br /> <br /> That's it!<br /> shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-88463359982959025752011-08-21T13:08:00.001+02:002011-08-21T13:08:13.917+02:00TS7.1) capability vrf-lite on SW1 - max-metric router-lsa - 0p<br /> TS7.2) ? ppp encrypt mppe auto required - 0p<br /> TS7.3) fr-map compression - 2p<br /> TS7.4) zbfw - 2p<br /> TS7.5) auto-cost reference-bandwidth - 2p<br /> TS7.6) crypto key.../aaa/transport input -2p<br /> TS7.7) remove not from object 1 / ine changed static route to track 1 - 2p<br /> TS7.8) removed bgp passive connection / ine set to active - 2p<br /> TS7.9) prevent recursive - 2p<br /> TS7.10) wrong default-gateway in DHCP pool -2p<br /> Full 21/Pass 16/My 16<br /> <br /> Yiiihhhaaashwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-47889308401641309352011-08-14T16:40:00.002+02:002011-08-14T16:40:46.014+02:001. Layer 2 Technologies<br /> 1.1 Trunking - 3p<br /> 1.2 Spanning-Tree - 3p<br /> 1.3 Layer 2 Tunneling - 3p<br /> 1.4 MAC Filtering - 3p<br /> 1.5 Spanning-Tree Convergence - 0p - portfast+bpdufilter default<br /> <br /> 2. IPv4<br /> 2.1 OSPF - 3p<br /> 2.2 OSPF Filtering - 0p - area 27 nssa no-redistribution no-summary instead of area 27 nssa default-information no-summary<br /> 2.3 Conditional Default Routing - 3p<br /> 2.4 IGP Redistribution - 3p<br /> 2.5 BGP Filtering - 2p<br /> 2.6 BGP Summarization - 3p<br /> 2.7 BGP Table Stability - 2p<br /> <br /> 3. IPv6<br /> 3.1 IPv6 Addressing - 2p<br /> 3.2 RIPng - 3p<br /> 3.3 EIGRPv6 - 3p<br /> <br /> 4. MPLS VPN<br /> 4.1 PE-CE Routing - 3p<br /> 4.2 Backup Link - sham link BABY :D - 4p<br /> <br /> 5. Multicast<br /> 5.1 PIM Filtering - wooohooo... - 3p<br /> 5.2 IGMP - 2p<br /> 5.3 Multicast Testing - 2p ... yeeehha.. full points on Multicast, this would have been impossible 3-4 weeks ago<br /> <br /> 6. Security<br /> 6.1 BPDU Filtering - 3p<br /> 6.2 Traffic Filtering - 0p - missed dnamic acl missed autocmmand<br /> <br /> 7. Network Services<br /> 7.1 SNMP - 3p<br /> 7.2 RMON - 3p<br /> 7.3 CDP - 2p<br /> 7.4 UDP Echo - 0p - used ip sla responder, i think also working, they wanted to see a L4m3 ACL and udp-small-servers<br /> <br /> 8. QoS<br /> 8.1 Real Time Protocol - 3p<br /> 8.2 Congestion Avoidance - 3p - did not use NBAR match not protocol<br /> 8.3 Link Optimization - 2p<br /> <br /> <br /> Full 79/Pass 64/My 69shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-7294114856940037022011-08-14T11:01:00.002+02:002011-08-14T11:01:57.000+02:00TS6.1)SW2,SW4 allowas-in to R6 - 2p<br /> TS6.2) database-filter out on R2 - 0p<br /> TS6.3) BGP redistribution on R5,R4 / static route to global and redistri - 2p<br /> TS6.4) enable pim R1->R2->SW2, disable TRAFFIC_CONTROL on R2 - 0p - area range<br /> TS6.5) missing EIGRP authentication - 2p<br /> TS6.6) not possible with 3550 but assume ACL or nd ra problem - 2p<br /> TS6.7) ebgp-multihop on SW2 - 2p<br /> TS6.8) typo in "undebug all" / recurring on wrong policy-list - 2p<br /> TS6.9) logging on on R2 ??????? - 0p - missed acl<br /> TS6.10) R5 lmi-type / FR-policy-map - 2p<br /> -----<br /> Full 21/Pass 16/My 14<br /> shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-36135386094905213732011-08-13T10:51:00.001+02:002011-08-13T10:51:15.281+02:00... failed :(shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-83877862450275486262011-08-07T11:25:00.001+02:002011-08-07T11:25:34.574+02:00TS5.1)no tunnel vrf / redistribute on SW2 / set tag on SW2 - 2p<br /> TS5.2)wrong ip on SW4 fa0/14->fa0/16->ip pim sparse<br /> R3 fa0/0 fa0/1 pim sparse-mode<br /> oritginator lo100 SW2/SW4 - 2p<br /> TS5.3)ebgp-multihop 255 on SW1 -2p (INE-Solution : ttl 1 on SW1)<br /> TS5.4)R1 no ip pim sparse/ip pim bsr-border on SW4 - 2p<br /> TS5.5)autorp listener ? - 2p<br /> TS5.6) ? - 0p (INE-Solution : change inside/outside)<br /> TS5.7) neighbor 50.1.104.4 activate on SW4 Bgp multicast - 2p<br /> TS5.8) no summary - 2p<br /> TS5.9) intf-type dce, mapping, neighbor-statement because of non-broadcast - 3p - INE Solution : change to ospf p-t-p correct mapping, no keepalive<br /> TS5.10)CoPP port-filter added Telnet Class - 2p - INE Solution : remove CoPP<br /> <br /> Full 21/Pass 16/My 19)shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-64129731558693454052011-08-03T20:02:00.000+02:002011-08-03T20:02:14.592+02:00I'm a bit overloaded, so i'm watching some VoDs til Sunday when i pass INE Vol2 Lab5shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-1508015597304139172011-08-03T11:19:00.002+02:002011-08-03T11:22:07.014+02:001. Layer 2 Technologies<br /> 1.1 Traffic Control - 0p - pruning<br /> 1.2 Spanning-Tree Protocol - 3p<br /> 1.3 Link Failure Detection - 3p<br /> 1.4 Spanning-Tree Protocol - 2p<br /> 1.5 Rate-Limiting - 0p - storm-control instead of rate-limit (pps)<br /> 1.6 QoS - 3p<br /> 1.7 QoS - 2p<br /> <br /> 2. IPv4<br /> 2.1 OSPF - 3p<br /> 2.2 OSPF - 3p<br /> <br /> 3. IPv6<br /> 3.1 OSPFv3 - 3p<br /> 3.2 OSPFv3 Summarization- 3p<br /> <br /> 4. MPLS VPN<br /> 4.1 PE-CE Routing - 3p<br /> 4.2 VPN Tunneling - 4p<br /> 4.3 BGP - 3p<br /> <br /> 5. IP Multicast<br /> 5.1 AutoRP - 3p<br /> 5.2 Multicast Testing - 2p<br /> 5.3 Multicast Rate Limiting - 2p<br /> <br /> 6. Security<br /> 6.1 Traffic Filtering - 0p - ZBFW with connecting VRF- common INE :/<br /> 6.2 Spoof Protection - 2p<br /> 6.3 Infrastructure Security - 3p<br /> <br /> 7. Network Services<br /> 7.1 SNMP - 3p<br /> 7.2 IOS Menu - 3p<br /> 7.3 DNS - 0p - alias<br /> 7.4 Gateway Redundancy - 3p<br /> 7.5 Failure Message - 0 - busy message<br /> <br /> 8. QoS<br /> 8.1 Congestion Avoidance - 2p<br /> 8.2 Congestion Management - 3p<br /> 8.3 Rate Limiting - 2p<br /> 8.4 Link Efficiency - 2p<br /> <br /> Full 79/Pass 64/My 65)shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-91560697154888811462011-07-31T19:54:00.000+02:002011-07-31T19:54:17.930+02:00Failed... total disastershwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0tag:blogger.com,1999:blog-707971739114129049.post-47283742690916369032011-07-27T10:32:00.000+02:002011-07-27T10:32:34.726+02:00Hm.. why do i always get Tracebacks when i apply "service-policy" ? ;) Who has the answer ?<br /> <style type="text/css"> pre.source-code { font-family : Andale Mono, Lucida Console, Monaco, fixed, monospace; color : #000; background-color : #eee; font-size : 12px; overflow: auto; padding : 5px; width : 98%; border : 1px dashed #999999; line-height : 14px; clear:both; } </style><br /> <br /> <pre class="source-code"><code> Rack1R5(config-if)#service-policy output 1033 Rack1R5(config-if)# *Jul 27 08:30:52.800: %SYS-2-INTSCHED: 'may_suspend' at level 4 -Process= "Exec", ipl= 4, pid= 88, -Traceback= 0x816F117z 0xA728AD3z 0x9B4482Az 0x9B3A931z 0xA06F7EEz 0xA07813Bz 0xA076320z 0xA070C64z 0xA05BE2Cz 0xA069090z 0xA17F14Az 0xA0BED8Cz 0xA0B6B58z 0xA0B6920z 0xA0B90BEz 0xA1CC6A3z *Jul 27 08:30:52.800: %SYS-2-INTSCHED: 'may_suspend' at level 4 -Process= "Exec", ipl= 4, pid= 88, -Traceback= 0x816F117z 0xA728AD3z 0x9B4482Az 0x9B3A931z 0xA06F803z 0xA07813Bz 0xA076320z 0xA070C64z 0xA05BE2Cz 0xA069090z 0xA17F14Az 0xA0BED8Cz 0xA0B6B58z 0xA0B6920z 0xA0B90BEz 0xA1CC6A3z Rack1R5(config-if)# </code></pre>shwayzeehttp://www.blogger.com/profile/02083126180965032475noreply@blogger.com0