Feeds:
Posts
Comments

Archive for February, 2011

This is my first time blogging through my blackberry while sittin on the toilet… Remarkable.. Now I’m able to send cisco ios commands from my handphone devices… Kinda.. Funn!!.. Although I’m connecting using telnet (clear text) but hey! It works! Perhaps security concern can comes in abit later…

POC done, and I’m gad damn happy.

Posted with WordPress for BlackBerry.

Read Full Post »

Configuring VPC to get a host emulator on GNS3:

  • Download the zip file, extract / just open it inside .rar temp file, double click the .exe file, and cmd prompt will appears!
  • type show, and all 9 hosts will show up, press 1, 2, 3, 4, etc directly to switch to other host
  • configure ip <ip address> <default gateway> <subnet mask>, in this case mine is ip 172.1.1.50 172.1.1.1 24 – (i’m trying to test the GLBP capability..)
  • drag and drop the cloud from gns3, configure the LPORT and RPORT accordingly (see the pic) – most prolly just click add will do..
  • after which, configure the router / switch side to accept connections from host..
  • test ping from vpcs and voila!~~

VPC Summary:

The VPCS can simulate up to 9 PCs. You can ping/traceroute them, or ping/traceroute the other hosts/routers from the virtual PCs when you study the Cisco routers in the Dynamips. VPCS is not the traditional PC, it is just a program running on the Linux or Windows, and only few network commands can be used in it. But VPCS can give you a big hand when you study the Cisco devices in the Dynamips. VPCS can replace the routers or VMware boxes which are used as PCs in the Dynamips network.

Try VPCS, it can save your CPU/Memory. It is very small.

Now, VPCS can be run in udp or ether mode. In the udp mode, VPCS sends or receives the packets via udp. In the ether mode, via /dev/tap, not support on the Windows.

http://www.freecode.com.cn/doku.php?id=wiki:vpcs

Read Full Post »

explanation:

PC1 is connected to a switch with 3 uplinks to multilayer switches on which it all connected within the same subnet, 10.100.100.0/24. I’ve enabled HSRP in R1,R2,R4 and it’s configured within the same standby group as well… only one is active (R2), (very much depends on the priority), the rest are either standby (R4) or just… listen.. (R1).

i’ve increased the default priority for each swouter*, 120 (R2) and 110 (R4) resp. and tried to shut the R2 int fa0/0, R4 detects the hello is missing so the swouter becomes alive! (frm standby to active state..).. and R1 changes its state from listen to standby.. (just in case R4 int fa0/0 also fails).. (and yet disconnects the telnet session again)..

btw.. hsrp / vrrp is an active-standby thing (1984 technology..) so it’s being replaced by more modern protocol called GLBP (gateway load balancing protocol)

*swouter = switch & router – multilayer switch btw..

Read Full Post »

These few days i’m firming my knowledge on IP NATing. there’re basically 3 types of NAT:

  • NAT Overload (known as PAT) – allowing overloading 1 public IP for many internal private addresses to go out, to do so, first i’ll need to label the so called ‘inside/outside’ interface (ip nat inside / ip nat outside). second, create a simple access-list (ip access-list standard/extended <Word>, permit / deny accordingly), after which, enable the NAT overload by: (ip nat inside source list <Word> interface (in this case fa1/0) overload. – invoke an icmp packet frm host to dest, and sh ip nat trans to confirm the result.
  • Static NAT Mapping to enable ppl from cloud to connect to a specific internal IP address, for example: static mapping from 10.100.100.2 port 80 to a specific server, or port 25 to another specific server (can be configured up to port level).
  • Dynamic NAT – convert 1 pool of addresses to another (for overlapping addresses)

I’ve lots of things to learn and this is only a simple intro.. many unimaginable things can be done using NAT.. including merging 2 different sets of same IPs in case of IT integration as well.. but managing it requires DNS, and it’s kinda troublesome to troubleshoot i suppose.. it’s an easy way out solution btw…

Oh ya.. the NAT also translates many tcp connections that’s generated from MPLS that i’ve put in the R4 Fa1/0.. i was then trying to disable the mpls ip on that particular interface and suddenly bang! *goes the theory* lol.. existing tcp connections disappear so fast within secs.. well.. till now i’m still unsure why there’s so many TCP connections.. perhaps because of the labeling things? – well, i’ll figure it out in the next few weeks i suppose..

Read Full Post »

Instead of using ROAS (Router on a Stick) method to provide inter vlan connectivity, i’ve came into the world of multi-layer switching.. switch that supports routing are just.. pure awesome.. the setup can be done by mainly two ways:

by creating an SVI (Switch Virtual Interface), simple example: R1 is a multilayer switch, R2, R3 and R4 as routers. the connection from R2, R3, and R4 is going through a switch port.. so to setup:

On R1, setup a vlan database (Vlan10, vlan20), after which, we’ll go to the global config mode, typin’ int vlan 10, and put in necessary IP address and its subnet mask. perform no shut command to ensure the interface is up & runnin. (same like vlan20). After which, setup a routing protocol for both interfaces. (router ospf 1, network blablabla, wildcard bits blablabla… and area blablabla), after the protocol is runnin, ensure the command “IP ROUTING” is typed on conf t… the adjacency should appears and check the sh ip route to see the magic of multilayer switch..

Ensure at R1 the f0/0 and f0/1 is configured as switchport mode access and switchport access vlan 10 / vlan 20. show vlan-switch to check…

On R2 & R3, setup an interface IP address with either default gateway pointing to R1 or setup a routing protocol, and either host should be able to ping each other…

Other way to do is to disable the switchport by going to the interface and type ‘no switchport’.. i’ve tried to assign an IP address on an interface before i type in that command, and the switch is quite smart enough to notify that IP addresses may not be configured on L2 links… hmmmm…

Read Full Post »

This weekend i’ve charged my eager mind watching Quickbooks Pro 2010 complete tutorial by lynda.com.. luckily i’ve used quicken home and business for a while now (wow almost 4yrs already!), so i’m more or less able to quickly get myself familiarized into the GUIs and functions the software can deliver.. i haven’t finished watching though.. still.. a whole bunch of new realm untapped.. typical manufacturing / service business process, accounting methods, taxation, goods and services, concept of accounts, business intelligence, web integrator, etc..  hopefully i still have time to go and explore.. i was thinking to become one of their reseller based in Indo and provide professional service as to market it to lots of SMEs, as well as to provide expert advise / customization / training..  I’ve also recently discovered yet another opensource software installed in my CentOS & Ubuntu for SMEs, but i’ve not reached the point of familiarity as i faced difficulties installing / customizing.. Hmmm… *pondering mind*

Read Full Post »

今天又跟大老闆開會講些題目更新, 記載並寫下了他所言, 覺得句句深入人心.. 他似乎能提出咱們沒想過的簡單問題呢..能夠想到那麼批判性思維並不容易啊.. 的確要有時間和正確的環境培養.. 有些事,在平時想想也許會覺得不難,但是如果天分不夠而又經驗不足的話,當事情出現時,往往會因為手忙腳亂,或者在頭腦一片空白之下尷尬的結束…

唯一的解決方法是什麼呢?實踐.. 只有經過不斷的練習和磨練,才能得到關鍵時刻的鎮定和從容,而我們從小需要開始鍛煉的就是這個東西… 不管從什麼途徑,使用什麼方法,只要能達到所需要的目的就是成功的,想想自己的希望,自己的喜怒,喜歡什麼,想追求什麼,到哪裡去旅行,遇見什麼樣的人,得到什麼樣的經驗,如同這一切形成了我們的未來,也同樣會展現出最適合我們自身的能力。我覺得也只有這樣,才能真正做到那種一直嚮往的境界…

Read Full Post »

This afternoon i’ve been busy learning & configuring basic cisco ACL to prevent users accessing / telnetting to particular a router. (in this case is R1), so far i’ve been introduced to the standard & extended access list and i find it quite easy to configure, but quite difficult to actually design and decide where to put the ACL. As a standard guide, i’ll need to put the ACL closer to the target destination interface, as compared to the extended ACL, it’s exactly the opposite. (closer to source interface)

To block connection to R8 from Host1, if i’m using standard ACL, i’ll need to put access-list 1 deny 192.168.20.1 and permit any other connection.. after creating the ACL, i’ll just need to apply the access-group to the particular interface either in from Serial int S0/0, or preferably out fa1/0 on R3..

For the extended access list, the only advantage is the modifying list function and perhaps re-sequencing feature .. the command in config mode would be ip access-list extended xxx (previous extended ACL number which might be ranged from 100-199)… i find that the IOS help command is truly useful when you can’t remember what to put as some of the command requires you to put either subnet mask or wildcard bits.. The ACL also can be attached on the VTY lines using access-class command..

Read Full Post »

鳴謝以下人士賜下卑今年紅包:

第一: 當然是我父母親啦! 雖然小子上班了過後從未給予您們錢過, 但心裡卻想盡孝為先. 知道您們掙錢比我還多, 我倒想存下錢, 將來我就不用再跟您們要錢了. 謝謝你們的一百萬.
第二: 我嫂嫂, 哥哥是第一個給我紅包的人. 感謝你們, 希望蒼天賜你們倆終生富貴, 變成越來越成功, 有錢的人. 再次謝謝你們的五十萬.
第三: 我姊姊, 姊夫. 謝謝你們的五十萬, 還有感謝你們倆邀請我跟你們家人一起吃頓豪華的晚飯.
第四: 我姊夫家人, 雖然我跟你們不太熟悉, 因距離關係而未常見面, 但是你們卻給我最龐大的三個紅包, 一共數目高達 一百二十五萬.
第五: 我師父, 林敏捷; 是我爸爸最好, 最久朋友之一. 我小時候還記得他每次給我生日禮物, 玩具等什麼的.. 當他要來咱們家時, 我有點不好意思呆著在家, 因為我想他一定會給我紅包.. 想出門但是我好久沒看他了, 所以不得不留一起跟我父母坐禪. 師父對我家人龐大的恩典, 我肯定要報答.. 師父賜我二十萬塊錢.

送紅包是華人傳統習俗. 應該說紅包文化出了體現出華人注重禮尚往來外, 還有受惠不忘施予者, 也有不敢忘恩負義的心態..

Read Full Post »

再過兩天我就要回去了.. 時間過得超快, 想再留下來一會兒.. 前兩天我去朋友家探訪, 最後也不離賭博這兩個字來打發時間.. 哈哈.. 我基本上不會賭的人就被我朋友吃掉啦.. 禮拜五晚上我輸了16萬, 隔天我又輸了4萬… 少數目, 朋友享得, 所以心理不會太過難過. 算是個紅包禮物給我朋友吧! 我待會兒要去看電影..   而且如果時間還允許的話我就要買些衣服等生活用品.. 不夠時間的話就等明天再來買囉..

我今天好高興.. 全家人一起去吃午餐, 咱們去香港咖啡屋 (HK Cafe) 那裡慶祝我和我嫂嫂的哥哥生日.. 順便嘗試下食物如何. 發現雖然量少但是我覺得每樣東西都覺得好好吃.. 吃完了過後我哥姊們已經幫我買下了巧克力蛋糕吃.. 整個咖啡屋都吵鬧著我外甥們的大喊大叫啊.. 還好當時沒有那麼多人在.. 嘗試了過後我哥好像有跟經理講再過2-3個月會再來慶祝他孩子一歲生日而表示滿意.

Read Full Post »

Older Posts »