Sunday, July 13, 2008

Frame relay Authenticaton by using Virtual template with PPP CHAP

Frame relay don't support Authentication by itslef and use PPP authentication with Virtual template.
Configuration

username ROUTER password 0 cisco
interface Virtual-Template1
ip address 100.100.100.1 255.255.255.0
ppp authentication chap
(virtual template is encapsulated with PPP, no need to add encapsualtion frame-relay)
interface Serial1/0.1 point-to-point
frame-relay interface-dlci 101 ppp Virtual-Template1

once configured the virtual-template interface, Virtual-access interface will come up

Router#show ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES manual administratively down down
FastEthernet0/1 unassigned YES manual administratively down down
Serial1/0 unassigned YES manual up up
Serial1/0.1 unassigned YES unset up up
Serial1/1 unassigned YES manual administratively down down
Serial1/2 unassigned YES manual administratively down down
Serial1/3 unassigned YES manual administratively down down
Virtual-Access1 100.100.100.1 YES TFTP up up
Virtual-Template1 100.100.100.1 YES manual down down
Virtual-Access2 unassigned YES unset down down

Take note that Access interface is up and Virtual template is in down state.

Router#show frame-relay pvc interface serial 1/0.1
PVC Statistics for interface Serial1/0.1 (Frame Relay DTE)
Active Inactive Deleted Static

Local 3 0 0 0
Switched 0 0 0 0
Unused 0 0 0 0

DLCI = 104, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.1

input pkts 55 output pkts 87 in bytes 3112
out bytes 3784 dropped pkts 0 in pkts dropped 0 out pkts dropped 0 out bytes dropped 0 in FECN pkts 0 in BECN pkts 0 out FECN pkts 0 out BECN pkts 0 in DE pkts 0 out DE pkts 0 out bcast pkts 7 out bcast bytes 2316
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec pvc create time 00:07:18, last time
pvc status changed 00:04:02
Bound to Virtual-Access1 (up, cloned from Virtual-Template1)

Router#show interfaces virtual-access 1
Virtual-Access1 is up, line protocol is up
Hardware is Virtual Access interface
Internet address is 100.100.100.1/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoFR vaccess, cloned from Virtual-Template1

Router#show interfaces virtual-access 1 configuration
Virtual-Access1 is a PPP over FR PVC (sub)interface
Derived configuration : 95 bytes
!
interface Virtual-Access1
ip address 100.100.100.1 255.255.255.0
ppp authentication chap
end

Thursday, July 10, 2008

Terminal Length

When need to copy the whole config to the notepad,
change the terminal length to 0 (no pausing)

#show run
no pasuing on the console and can copy the whole running config and can easily paste back on the router.
Without this, if your open terminal window size is small, cannot see all the config at 1 time.

R4#terminal length ?
<0-512> Number of lines on screen (0 for no pausing)

Loading balancing

Equal cost load balancing, default 4 entries on IOS
Uneuqal cost load balancing support on IGRP and EIGRP with the command variance.

LB on process switching is on a per-packet basis (CPU intensive but guarantess equal load across all links)
LB on fast switching is on a per-destination basis

To set per-packet load-balancing, enable process switching (disable fast switching),
Router# config t
Router(config)# interface Ethernet 0
Router(config-if)# no ip route-cache

Finished 1st step.

I passed my CCIE R&S written yesterday.
remember the first time I sit for the CCNA exam.
Its like CCNA (broad range of topics) only the diff is the no.of questions and topic.
Its not like CCNP exams which are specific topic for each subjects.
Anyway, got my candidate ID and it will boost my speed to work on LAB exam.

SR

Monday, July 7, 2008

EIGRP Timer/metric

EIGRP hello and hold time can be change under interface configuration mode.

#interface fa0/0
( )#ip hello-interval eigrp 100 30
( )#ip hold-time eigrp 100 120

100 - AS number
30 - seconds
120 - seconds

EIGRP Metric default
K1= 1, K2=0, K3=1, K4=0, K5=0
metric = [K1*bandwidth + (K2*bandwidth)/(256 - load) + K3*delay] * [K5/(reliability + K4)]

This K value can be changed under router eigrp 100
metric weights (tos)0 1 0 0 0 0 (change the K3 value to 0 )

If K value mismatched, neighbor will not form.

%DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 10.1.1.1 (Ethernet0/0) is down: K-value mismatch

Thursday, July 3, 2008

SPECIALIZED CCNA !!!

CCNA Security
Prerequisites - Valid CCNA
Exam - 640-553 IINS Implementing Cisco IOS Network Security (IINS)

CCNA Voice
Prerequisites - Valid CCNA
Exam - 640-460 IIUC Implementing Cisco IOS Unified Communications (IIUC)

CCNA Wireless
Prerequisites - Valid CCNA
Exam - 640-721 IUWNE Implementing Cisco Unified Wireless Networking Essentials (IUWNE)

Wednesday, July 2, 2008

ShortNotes for CCIE written exam - Frame Relay

Packet switch technology, work at the physical and data link layers of OSI model.
Devices attached to Frame Relay WAN - DTE, DCE
DTE - teminating equipment - routers/bridges/PC
DCE - Carrier-owned devices - provide clocking and switching - Frame Relay switch
Virtual circuit - PVC, SVC
SVC - temporary connections - Call setup, data transfer, Idle, Call termination
PCV - permantely established connections - data transfer, Idle

Data link conneciton identifier (DLCI)
Circuit identified by DLCI (assigned by service provider)
locally significance (unique in LAN but not necessarily in FrameRelay WAN)

Congestion Control mechanisms
BECN - Backward-explict congestion notification
FECN - Forward-explict congestion notification
DE - Discard Eligibility (Indicate that a frame has lower importance than other)
CRC - Frame relay error checking

Local Management Interface (LMI)
Global addressing
virtual status messages (syn between DTE & DCE, report status of PVC)
multicasting
LMI type - Cisco, ANSI , Q.933A

Configuration
Under main interface (by default, it's multipoint)
int S1/0
encapsulation frame-relay (Dynamically learn by Inv-arp)
frame-relay map ip 192.168.1.1 102 broadcast (static mapping)

Under subinterface
intS1/0.1 multi-point (use either dynamic or static)
frame-relay interface-dlci 102 (specifically assign DLCI)

Verificarion
#show frame-relay map
Serial1/0 (up): ip 192.168.1.1 dlci 102(0x191,0x6410), dynamic,broadcast,, status defined, active

#show frame-relay pvc
PVC Statistics for interface Serial (Frame Relay DCE)DLCI = 102, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0