NAT Extendable Notes

"Extendable" static translations:

The extendable keyword allows the user to configure several ambiguous static translations, where an ambiguous translations are translations with the same local or global address.Some customers want to use more than one service provider and translate into each provider's address space2 upstream service provider with 2 public IP address but same local IP

Cisco notes.

The software does not allow two static translations with the same local address, though, because it is ambiguous from the inside. The router will accept these static translations and resolve the ambiguity by creating full translations (all addresses and ports) if the static translations are marked as "extendable". For a new outside-to-inside flow, the appropriate static entry will act as a template for a full translation.

Sample config

ip nat inside source static 192.168.1.1 100.100.100.1 extendable

ip nat inside source static 192.168.1.1 200.200.200.1 extendable

Why you should hire a CCIE

• Maintenance of your network is fundamental to protect assets and to ensure seamless operations. The environment is growing more complex with operations conducted over VPNs, wireless, remote access and the Internet. You need proven experts to choose, implement and maintain the solutions required.


• Having certified staff can increase the confidence of your customers, investors and business partners, and thereby boost your organization’s credibility, reputation and value.


• Certified CCIEs are a highly-select group. Less than 3% of all Cisco certified individuals make it to the CCIE level, a tiny fraction of IT professionals worldwide.


• Passing the exams is not easy. Earning your CCIE requires passing a lab exam in a time pressured environment. Hands-on experience is the only way to prepare for the lab.


• CCIEs have invested a lot to expand their knowledge and further their careers. The average candidate spends thousands of their own dollars and at least 18 months pursuing certification. He or she will attempt the lab exam more than once before passing.


• CCIEs are committed to maintaining their expert skills. Keeping their status active requires passing a recertification exam every two years.

http://www.cisco.com/web/learning/le3/ccie/employers/index.html

CCIE labs changing from UniversCD to Cisco Documentation

On Sept 24 2008 CCIE labs will no longer support using the UniversCD documentation for the lab exam.

All labs are migrating to Cisco Documentation only. For those scheduled to take the CCIE lab prior to Sept 24 access will still be available for UniversCD.

The Cisco Documentation pages have the same information that currently resides on UniversCD, please refer to the links on the CCIE web pages to view these pages and become familiar with the new format.

After Sept 24 2008 only the Cisco Documentation web pages will be available for CCIE labs.

http://cisco.com/web/psa/products/tsd_products_support_configure.html

Cacti, the complete traffic monitoring

I've been using it for almost 2 years and it's really great tools for traffic monitoring.
I installed on Fedoara core 6 and after installation, i dont need to touch any configuration.
Just using web administration and add/remove devices to monitor.
Comapre to MRTG, it has SQL database inside and can store history data and its good for reporting.
Because of php frontend, its slighter longer than to view simple html on MRTG.
Build in user management and authentication features, I can easily specify use level, graph levels and permission
which are not so easy to do with MRTG and Apache.
The graph trees also useful for collecting groups of interfaces/devices under the same link.

The plug-in architecture will complete you more with lots of features.
I found 1 post in forum and list all the plug-in
http://forums.cacti.net/post-72427.html

can downloads those inside this.
http://cactiusers.org/downloads/

If you dont want to read about intallation and just want to use cacti, CactiEz is the right thing.
It comes with OS and just install OS by bootable CD. Once complte, can start to use cacti.

more details
http://www.cacti.net/

Installation notes/ manual
http://www.cacti.net/documentation.php
http://docs.cacti.net/

Installation notes on Ubuntu
https://help.ubuntu.com/community/Cacti?action=show&redirect=CactiHowTo

CAR configuration example.

In/Out rate-limiting (limit 15MB out of 45MB)

interface Hssi0/0/0
description 45Mbps to R1
rate-limit input 15000000 2812500 2812500 conform-action transmit exceed-action drop
rate-limit output 15000000 2812500 2812500 conform-action transmit exceed-action drop

Ratelimit by access list

access-list 101 permit tcp any any eq www
access-list 102 permit tcp any any eq ftp

interface Hssi0/0/0
description 45Mbps to R2
rate-limit output access-group 101 20000000 3750000 7500000 conform-action set-prec-
transmit 5 exceed-action set-prec-transmit 0
rate-limit output access-group 102 10000000 1875000 3750000 conform-action
set-prec-transmit 5 exceed-action drop
rate-limit output 8000000 1500000 3000000 conform-action set-prec-transmit 5
exceed-action drop

NBAR using MQC (sample from cisco)

must enable cef
ip cef

define class
class-map

define policy
policy-map

Apply the service policy
service-policy

Router# configure terminal
Router(config)# class-map cmap1
Router(config-cmap)# match protocol citrix

Router# configure terminal
Router(config)# policy-map policy1
Router(config-pmap)# class class1
Router(config-pmap-c)# bandwidth percent 50

Router# configure terminal
Router(config)# interface ethernet 2/4
Router(config-if)# service-policy input policy1

Done featuers rich BGP

Hard week to finish features rich BGP LABS. will have to practice some more labs from other work book.
Need to memorize regular expression for route filtering with regexp.
so far only remember :P
.
^
_
+
$
( )