This blog was originally started to better help me understand the technologies in the CCIE R&S blueprint; after completing the R&S track I have decided to transition the blog into a technology blog.

CCIE #29033

This blog will continue to include questions, troubleshooting scenarios, and references to existing and new technologies but will grow to include a variety of different platforms and technologies. Currently I have created over 185 questions/answers in regards to the CCIE R&S track!! Note: answers are in the comment field or within "Read More" section.

You can also follow me on twitter @FE80CC1E


Monday, February 7, 2011

Carrier Technology

Carrier Technology - I thought I would put a cheat sheet together for some of the carrier technologies used, this is not a comprehensive list but it is a nice start to one. Please feel free to add any technologies to the comment section below.



OC = Optical Carrier - specification for transmission bandwidth using digital signals carried on SONET (Synchronous Optical Networking)
DS = Digital Signal T-Carrier - is a standard in telecommunications in North America and Japan
E = E -carrier - is a standard in telecommunications in Europe and widely used outside of NA and Japan, improves on T-Carrier used in NA and Japan
HSCSD = High-Speed Circuit-Switched Data - faster than GSM  - used in mobile networks
GSM = Global System for Mobile - Worlds most popular standard for mobile networks
EDGE = Enhanced Data rates for GSM Evolution - is considered pre 3G technology - used in mobile networks
UMTS = Universal Mobile Telecommunications System - 3G technology - used in mobile networks
EV-DO =  Evolution-Data Optimized or Evolution-Data only - uses CDMA and TDMA
DSL = Digital Subscriber Line

Quick Notes - OSPF Authentication

OSPF Authentication

-Null, Type 0
-Clear Text, Type 1
-MD5, Type 2
keyid - is used as part of the equation to come up with the MD5 hash, Keyid must be the same on both sides

Note: Ensure that you authenticate virtual links when enabling authentication in area 0

Clear Text

-Under router ospf, "area # authentication"
-Under the interface, "ip ospf authentication-key [password]"

show ip ospf 1 interface
Serial1/2 is up, line protocol is up
  Internet Address 192.168.0.11/24, Area 0
  Process ID 1, Router ID 192.168.0.11, Network Type POINT_TO_POINT, Cost: 64
  Transmit Delay is 1 sec, State POINT_TO_POINT
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    oob-resync timeout 40
    Hello due in 00:00:00
  Supports Link-local Signaling (LLS)
  Index 1/1, flood queue length 0
  Next 0x0(0)/0x0(0)
  Last flood scan length is 1, maximum is 1
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 1, Adjacent neighbor count is 1
    Adjacent with neighbor 192.168.0.14
  Suppress hello for 0 neighbor(s)
  Simple password authentication enabled


MD5

-Under router ospf, "area 0 authentication message-digest"
-Under the interface, "ip ospf message-digest-key 1 md5 [password]"


do show ip ospf interface
Serial1/2 is up, line protocol is up
  Internet Address 192.168.0.11/24, Area 0
  Process ID 1, Router ID 192.168.0.11, Network Type POINT_TO_POINT, Cost: 64
  Transmit Delay is 1 sec, State POINT_TO_POINT
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    oob-resync timeout 40
    Hello due in 00:00:05
  Supports Link-local Signaling (LLS)
  Index 1/1, flood queue length 0
  Next 0x0(0)/0x0(0)
  Last flood scan length is 1, maximum is 1
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 1, Adjacent neighbor count is 1
    Adjacent with neighbor 192.168.0.14
  Suppress hello for 0 neighbor(s)
 Message digest authentication enabled
    Youngest key id is 1

Sunday, February 6, 2011

Quick Notes - OSPF LSA Types

LSA Types

Type 1 - Router
Type 2 - Network
Type 3 - Network Summary
Type 4 - ASBR Summary
Type 5 - AS External
Type 7 - NSSA External

Router LSA Type 1 - Includes a list of all routers links and their states. Flooded in the area they are originated in

Network LSA Type 2 - DR produces these LSA on every multi-access network.Includes all routers including the DR. Flooded in the area they are originated in.

Network Summary LSA Type 3 - Generated by ABR and advertises destinations outside of the area. Flooded throughout the AS

ASBR Summary LSA Type 4 - Generated by the ABR, provides a gateway to type 5 LSA. Flooded throughout the AS

AS External LSA Type 5 - Generated bt ASBR, advertises external destinations or a default route to a external destination. Flooded throughout the AS

NSSA External LSA Type 7 - Generated by ASBR in a not-so-stubby area

THE IANA IPV4 Address Free Pool is Now Depleted

Are you getting ready for IPv6?

https://www.arin.net/announcements/2011/20110203.html

http://www.nro.net/news/ipv4-free-pool-depleted

Saturday, February 5, 2011

Quick Notes - NAT (Inside/Outside Local/Global)

If you struggle with what is what in regards to Inside/Outside Local/Global then the following may help.

View it from the following perspectives:
Location of the Packet - LOCAL/GLOBAL
Location of the Device - INSIDE/OUTSIDE

Packet Inside
192.168.0.100 - INSIDE LOCAL
200.200.200.100 - OUTSIDE LOCAL

Packet Outside
200.200.200.1 - INSIDE GLOBAL (this address represents 192.168.0.100)
200.200.200.100 - OUTSIDE GLOBAL

Quick Notes - Layer2 MISC

Layer2 MISC

Loop Guard - Prevents alternate port and root ports from becoming designated ports. IF BPDUs are not received on a NON-DP port then the port is moved into err-disabled state
Global config - "spanning-tree loopguard default"

UDLD - Unidirectional Link Detection
- Both sides need to be configured
- default setting is disabled on copper ports and enabled on fibre ports
Enable on copper ports, interface config - udld enable

Root Guard
- the port that has root guard enabled ensures that if a superior BPDU is received the port is put into "root inconsistent state"
Interface config - "spanning-tree guard root"

BPDU Guard
- Ensures that loops are not formed on ports that are enabled to use portfast, if BPDU is recieved the port is put into error disabled state. Two ways to enable BPDU Guard
Global config - "spanning-tree portfast bpduguard" - All ports that have portfast enabled will also have BPDU guard enabled
Interface config - spanning-tree bpduguard enable"

BPDU Filter
- When enabled globally and a BPDU is received on a port the is enabled with portfast the port loses it portfast status
Global config - "spanning-tree portfast bpdufilter default
-when enabled on the interface the port stops sending and recieveing BPDU. This is dangerous as a loop can form
Interface config - "spanning-tree bpdufilter enable

Quick Notes - RSTP

RSTP 802.1w

States
- Discarding, Learning, and forwarding state

Alternative Port
- backup port to the designated port for fast convergence

Backup Port
- backup port to the root port for fast convergence

BPDUs
- sent every 2 seconds and acts as a keepalive, 3 missed hellos and the portocol information is aged

Implmenting RSTP
- MST automatically enables RSTP - spanning-tree mode mst"
- PVST+ - "spanning-tree mode rapid-pvst"

Quick Notes - STP

STP 802.1D

Portfast
- Ports coming up are put into forwarding states
- TCN are not generated when a port comes up or down

Uplinkfast
- detects a directly connected failure and enables a new root port immediately
- increases the root priority to ensure that the switch will not become the root
- sets the port cost to 3000
- tracks alternate root ports

Backbonefast
- speeds convergence when a failure occurs and is indeireclty located. Reduces convergence from 50 seconds to approx 30 seconds.
- all switches need to bne configured with backbonefast


Monday, January 31, 2011

Update

I have been very busy in the last few months with holidays, starting a new job, and studying for the CCIE that I have neglected my blog. ( I know that these sound like excuses...... )  Starting next week I will be trying to add a new blog post daily. If you have any ideas or topics that you would like to see send me an email or post a comment. I will work on creating the content and publishing it ASAP.


 

Tuesday, January 4, 2011

Question 185

What command would you have to use in order to see "debug ip mpacket"? Remember that multicast packets are fast switched and they will not be sent to the processor, the only exception is when using the "ip igmp join-group" command.