Marco Rizzi Blog

Closing the blog: starting a new life!

2011-09-24T14:07:00.000+02:00

Hi all, after a lot of inactivity, I decided to officially close the blog, the next week I will also resign from my current job and various collaborations, and shortly start a new life. New country, new home, language to improve, new car, new collegues, new job responsabilities, MacOs to learn... so don't think to have time and the energy necessary to blog anymore. I would like to thank all

Mini-Lab Challenge: 6 simple tasks

2011-07-23T15:43:00.002+02:00

Hi all, after an intense home-working week, I decided to challenge my readers and the Project Avatar group "CCIE mini-lab challenges" members with a small lab: The restrictions here are: -don't use Policy based routing -don't use static routes TASKS: 1- Configure interfaces and IGPs as per diagram 2- Propagate a default route to R1 and R4 using summarization 3- Configure R1 and R4 as stub 4

TSHOOT, the funny side

2011-07-08T22:14:00.000+02:00

Sometimes happens, you volunteer or someone else try to volunteer you to solve some "strange issues" of networking devices. Nothing bad, in my opinion it's always a good tshoot exercise, here a collection of the funniest tshoot issues I recently played with. 4th place for: "BGP doesn't work" that was a nice trouble, trying to get bgp working on an old netscreen. The ScreenOs documentation at

IP Telephony first steps with Packet Tracer

2011-06-14T12:24:00.001+02:00

Hi all, I'm so bored today... that I started moving my first steps into the magic wonders of IP Telephony! :-) The only tool I have at the moment is the great Packet Tracer, as I'm a Networking Academy instructor and Alumni. Well, I have to admit that I'm completely a newbie on IP Telephony, so like every CCNA, I started using Packet Tracer to simulate a simple multisite CME installation.

World IPv6 day: looking for results

2011-06-09T11:52:00.000+02:00

Hi all, as network engineer I'm excited to see results and analisys of the yesterday's World IPv6 Day. First of all, like a technician does, I looked at the graphs provided by Arbor Networks. Seems that the IPv6 traffic has been increased yesterday, reaching the 0.04% of all internet traffic, according to their measurements points. (Is this data exciting? Need to search more in depth!)

World IPv6 day: last minute suggestions

2011-06-03T07:55:00.000+02:00

Hi all, I read THIS interesting post written by Ivan Pepelnjak about the last minute preparation for the World IPv6 day. Take a look on the slides shared by Ivan, they are very interesting! Getting ready for World IPv6 Day ... in 6 days View more presentations from Ivan Pepelnjak Marco

NX-OS Redistribution: what's different?

2011-05-26T11:25:00.005+02:00

Hi all, following the Nexus training course I teached last weeks, I would like to talk a little bit about IPv4 redistribution in NX-OS. As you may have noticed, the redistribution between routing protocols in NX-OS follows a different logic comparing to IOS, let's try to clarify what is different using a simple two protocols topology. If you have traditional IOS routers, in this topology you

Still alive

2011-05-24T15:49:00.000+02:00

Hi all, some of my readers mailed me or chatted to know if I still alive, well, thanks a lot, I'm actually breathing, but I was busy on various projects in the last 3 months. I started developing CCIE R&S products for IPExpert Inc, I hope you will see my name listed on the IPExpert web site and my insane labs in their workbooks soon. That's why I stopped posting labs on the blog, I was using

Cisco announces Cisco Learning Labs

2011-04-13T13:30:00.002+02:00

Hi all, as probably most of you know, Cisco has announced yesterday a new service: the "Cisco Learning Labs" based on IOU, IOS on Unix. You can read all the details on the Cisco Learning Network Store I found also a very interesting this post of Keith Barker: https://learningnetwork.cisco.com/blogs/vip-perspectives/2011/04/12/cisco-ios-on-unix-labs-are-available-now (nice to see the Cisco

Got new gadgets

2011-03-24T13:53:00.006+01:00

Hi all,I have received two new gadgets today :-)The plaque is very nice and elegant! I'm so extremely busy on projects that haven't even responded to the previous comments, I apologize with readers about that.I hope to restart blogging very soon and add some amazing news, can't say anything... :-)cheers Marco

CCIE LAB Exam result: PASS!

2011-02-07T11:07:00.007+01:00

Hi all, I did the ccie lab exam on Friday 4th, I got the result this morning:PASS and CCIE #28129 The journey was long, starting on 2005 with CCNA, CCNP (2008) and CCIP (2009).On september 2009 started the CCIE preparation with a written course (at EuropaNetworking), after a while I did the written on dec 2009.Then, the lab preparation was long and hard, I did approx every evening 2/3 hours

Today's review lab: MPLS L3 Vpns

2011-01-21T20:31:00.004+01:00

Hi all, today I did a review lab on mpls vpns.Here is the topology, a nice pyramid form:and here is the .net file, you may adapt it to your ios path..net file [+/-]autostart = False[localhost:7200] workingdir = /tmp udp = 10000 [[3725]] ghostios = True image = /opt/IOS/c3725-adventerprisek9-mz.124-15.T10.bin ram = 256 sparsemem = True idlepc =

Administrative Distance Mini-Labs

2011-01-13T10:20:00.000+01:00

Days ago a friend asked me some clarifications about administrative distance during a redistribution task.I suggested him to take the time and test administrative distance in a simple topology, then finished to test myself too and to propose 3 mini labs to my readers.Here is the topology: simply 4 routers with two loopbacks to redistribute as external.Minilab 1: EIGRP and OSPF redistribution.

Merry Christmas Lab

2010-12-25T10:04:00.007+01:00

I Wish you all a Merry Christmas, When you are relaxing in the evening on the pc/rack/dynamips, you may try to solve my gift-lab:Topology:Feel free to use your favorite IGP and ip addressing for all links, but there are also a list of nice tasks:-All routers will have 3 loopbacks interfaces: Lo0: 10.x.x.x/24 Lo192: 192.186.x.x/24Lo172: 172.61.x.x/32where x is the router number-R1 and R4 share

Design: does it really matter for a network engineer?

2010-12-06T20:50:00.016+01:00

A couple of days ago, I was using a demo account on Safari Books, released to my university library. It's nice and interesting to go through the whole Cisco Press catalog and look at titles and arguments that aren't strictly on my CCIE R&S track. There is always something that opens new ideas on my mind, something interesting and useful to read.I started reading a couple of pages of the "NX-OS

Today's work in a shot: configuring Lwapp AP 1252

2010-11-16T21:30:00.007+01:00

Hi all, here's a shot of this afternoon work :Looks like a solid wall of LWAPP 1252s ! But wait.... where is my collegue? here it is! :-)(just kidding)Marco

"vrf definition" command, how to survive

2010-11-14T19:23:00.006+01:00

Hi all, as you may know, the old vrf definition commands are useful only for ipv4 vrfs.for example:ip vrf OLD-FORMAT description old format for vrf definition rd 1:1 vpn id ABC:DEF route-target export 1:1 route-target import 1:1 route-target import 1:2Will create a ipv4 vrf only, you can see it with:Router(config-vrf)#do sh vrf detailVRF OLD-FORMAT; default RD 1:1; default VPNID ABC:DEF

CCIE Exam... delayed

2010-11-03T22:53:00.003+01:00

Hi all, this short one to inform all my readers that I have delayed my exam to 31 Jan 2011. Just to feel more prepared and more confident. I will work on speed and accuracy during this additional time, and as usual more lab and lab and lab...Thank you all for the previous encouraging mails and commentsMarco

Still alive... one month later

2010-09-13T20:35:00.002+02:00

Hi all, this short post is to assure my readers, I still alive, but in "radio silence" mode until the exam... the countdown is now -77 ! I'm passing my time doing small labs on dynamips and reading the doc cd... but I feel the time is passing so rapidly that I decided to keep blog on hold :-)sorry by the wayMarco

QoS on Cisco 3560 diagram

2010-08-13T20:08:00.003+02:00

Hi all, Reading the documentation about catalyst 3560 QoS, you may note that it's hard to understand the 3560 QoS model and how the various pieces will interact during the configuration and the operation of that platform.So I've decided to order the various things in my mind with a diagram, made with Dia as usual:Here the .jpg result of my understanding, feel free to suggest improvements or to

Playing with vlan.dat

2010-08-04T22:57:00.004+02:00

Hi all, today I'm a little bit insane (or better, not today only, but a little bit more than usual :-) )Today morning I've started my journey reading the Catalyst 3560 Configuration Guide on the train.It's nice discover every day new things, today I've heard about the "internal vlans" for the first time... Walking to the office, that internal vlans stuff has mixed up in my sleepy mind, so I've

Technology Crosswords

2010-07-26T17:32:00.003+02:00

Hi all, summer is time to relax and take a breath from our usual working and studying life, so what's better than doing crosswords at the pool side? at the bus stop? check out the challenging Europa Networking Technology Crosswords and Puzzles! You can use it online or print it! have fun! Marco

button pressed

2010-07-23T14:34:00.003+02:00

Yesterday I've pressed that button:let the countdown begin...Countdown To my CCIE R&S Lab exam:-)Marco

QoS: Policing mini-lab

2010-07-11T16:54:00.002+02:00

Hi all, here as promised the next mini-lab on Qos topics: today is the Policing lab :-)using the same topology as the last post, here is the .net file:autostart = False[localhost:7200] workingdir = /tmp udp = 10000 [[3640]] image = /opt/IOS/c3640-jk9o3s-mz.124-16.bin chassis = 3640 ghostios = True sparsemem = True [[ROUTER R1]] model = 3640

QoS: shaping mini-lab

2010-07-08T18:49:00.007+02:00

Hi all, using sone spare time on vacations, I'm reading the QoS exam certification guide to refresh qos topics.Here a little lab I did today to refresh the shaping features, that always confusing me:the .net file:autostart = False[localhost:7200] workingdir = /tmp udp = 10000 [[3640]] image = /opt/IOS/c3640-jk9o3s-mz.124-16.bin chassis = 3640 ghostios = True

Packing list for vacations

2010-07-01T20:55:00.004+02:00

Hi all, tomorrow I will start my vacations, 15 days of relaxing studies,this is my packing list:-Routing Tcp/IP vol.1 (to use on swimming pool side) -QoS exam certification guide, 2nd ed. (to use on the beach)-Laptop (hoping on an average wifi... maybe I can connect to the Lab, otherwise dynamips..)-a blank notebook and 3 colored pencils (for funny L2/L3/BGP/IPv6 diagrams)-yellow lan patch, 1

Playing with Spanning Tree MST on multiple regions

2010-06-20T21:15:00.010+02:00

Hi all, This weekend I was playing with MST in a (undocumented :-( ) lab, and I want to share some tests I've done hoping this will help you to better feel with MST.In particular, I will focus on what happens when we have multiple MST regions, like in this topology:I used the INE topology, as usual, but with only two links enabled between switches, just to simplify, then I created 10 vlans, here

Weekend Lab vol.3

2010-06-05T00:30:00.007+02:00

woops? another week ended? woah! time for a new Weekend Lab! here it is, always using the INE topology, without initial configs:This time I'll practice some security topics studied during the week:-on R1 use CBAC to protect the inside ospf domain from the outside vlan 1256-on R2 use reflexive acls to do the same as R1-on R6 use ZBF, with 3 zones: outside1 on vlan 1256, outside2 on FR to BB1 and

Weekend Lab Vol.2

2010-05-28T23:20:00.011+02:00

Hi all, after an intensive studying and working week, what's best than relaxing with a full weekend lab?:-)Here is my Weekend Lab Vol.2, as usual based on INE world famous topology and without any initial configuration (for BBs you can use INE initial config).This lab is mpls based, with a confusing design:L2-L3 topology:IGPs:BGP:Goals:-create L3 vpns between customer sites (=all non mpls enabled

Understanding the %OSPF-4-CONFLICTING_LSAID Error

2010-05-17T16:13:00.007+02:00

hi all,during my weekend lab I've found an interesting ospf error, and now I'm trying to reproduce and explain it.Here the topology:The config is really simple, rip is running between R2 and R3, ospf is running between R1 and R2.The only particular thing is that the serial link has encapsulation PPP set, and it's using a /31 subnet (192.168.0.0/31) with the ".0" ip on R3.Here the initial config:#

Weekend Lab Vol.1

2010-05-15T18:04:00.007+02:00

Hi all, this weekend I want to share my homeworks with all my readers... so, this is the insane lab I have in progress now, the physical cabling is the world famous Internetwork Expert topology (See here..) without the BBs:L3 logical topology:IGP diagram:BGP peering:I don't provide any initial config, but some of requirements that buzzing in my head are:-spanning tree MST with 2 instances-use

Cisco Nightmare vol.2

2010-05-10T13:38:00.005+02:00

Hi all, today Cisco Nightmare is....Support page unavailable! ... and then, after a little while, as usual, restored: Have a nice day! Marco

Today's work in a shot: load balancers installation

2010-05-06T20:04:00.004+02:00

Today's work was the Alteon/Radware load balancer installation and configuration.Thanks to Massimo Cereda and his collegue (omg I forgot his name again...) for the balancers config, I've done the server configuration on CentOS, the rack mounting and cabling and the Juniper SRX rules.(look at "my" cabling versus the other mess :-) )More fun with all this stuff will follow in the next daysMarcoPS:

Multicast Basics Lab#3: PIM Sparse-mode with Static RP

2010-04-25T20:50:00.001+02:00

Hi all, here another small lab about multicast basics, just to refresh pim sparse-mode using the previous lab topology (see: Multicast Basics Lab #1: PIM-DM )So the topology still the same (mmm next time I have to change it):And the initial config still the same as the previous labs too.Let's start recalling that every PIM sparse-mode router need to know a rendezvous-point, that is used to manage

birthday present

2010-04-09T10:16:00.005+02:00

Hi all, well, today it's my birthday....(that's me in dyna-metabolism)...and what's the best present for a CCIE candidate?maybe to be the 5th winner of the "CCIE Flyer Challenge" ?!?!?!of course! (unbelivable!) :-)I'm so happyyyyy! Marco

Multicast Basics Lab #2: PIM sparse-dense-mode

2010-04-07T20:13:00.000+02:00

Hi all, This is my second lab about multicast, here we will play with pim sparse-dense-mode on the previous lab topology (see: Multicast Basics Lab #1: PIM-DM )So the topology still:And the initial config still the same too, but this time we will configure the serial interfaces to use pim sparse-dense-mode.We have to say that pim sparse-dense-mode is a sort of hybrid mode, that uses first sparse

Multicast Basics Lab #1: PIM-DM

2010-03-29T23:50:00.001+02:00

Hi all,last week I've tryed to solve the great Dan Shechter's Troubleshooting Challenge( http://dans-net.com/Blog/files/TS_Challenge_is_on.html ), I have to admit that was really difficult and challenging for me, at least the second half of the trouble tickets, I've spent a lot of time on it.I have to thanks a lot Dan for wasting his time reading my configurations THREE times, because I have sent

DIY point-and-click like on the CCIE Lab exam

2010-03-28T00:01:00.004+01:00

Hi all, after reading several posts on GroupStudy about the point-and-click interface on the lab exam, I've start thinking on how to emulate it, or at least how to obtain something similar.Basically I need a topology diagram with clickable routers, and a putty window that opens and connect to the clicked router... so what's better of the old HTML image maps?I've tryed with this online tool: http:

Dual stack lab: OSPFv2/v3 virtual link

2010-03-15T21:55:00.000+01:00

Hi all, after a nice working week, I've started refreshing some small things like Virtual Links.As you guys may know, virtual links are used for two main purposes:-allow an area to reach the area 0 through another area-repair (or provide a fallback) for a discontiguous area 0Just simply remember that a Virtual Link belongs always to area 0, and requires at least one side connected to an area 0

Today Cisco Nightmare

2010-03-05T09:42:00.007+01:00

Hi all, today, starting my browser, I've seen something strange.... my browser starting page is Cisco Support - Select product.... looks like a nightmare:Note the page title "Internal Server Error" !!!!?!?!short later it was solved...ahh much better, it looked like a worse start :-)Marco

BGPFLAP: a simple tcl script to flap an interface

2010-02-28T15:36:00.003+01:00

Hi all,today I was trying the bgp dampening feature, and I wrote this simple tclsh script to flap an interface during my lab tests:first, configure an interface with the route to flap:R3#sh run int lo 10 | beg intinterface Loopback10 ip address 10.10.10.10 255.255.255.0endthen configure the network statement for that route under the bgp process: R3#sh run | sec router bgprouter bgp 300 no

eBGP peering with Loopbacks: AD problems

2010-02-26T12:40:00.004+01:00

Hi all,while I'm 3 days at home ill, I've started reading the great "Routing TCP/IP Vol.II" from Cisco Press, and playing a little with bgp to refresh my knowledge on that.During my tests I've encountered some small interesting and funny things: eg: eBGP issues peering with Loopbacks and announcing loopback on bgp itselfThe topology is really simple, I used the same of my old rip lab: Here the .

System Management: do and don't

2010-02-19T23:58:00.003+01:00

Well, I'm working on system management this we, I've suspended blogging about my ospf labs (no time.. sorry), anyway, here are my suggestions about system management:1) DON'T start the system management labs without reading the "Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.4T" it's full of tricky small commands, easy to forget...2) DON'T try terminal padding (at least not

OSPF on Frame Relay

2010-02-11T21:11:00.001+01:00

Hi all, last week I've studied eigrp, now it's the turn of OSPF...the first issue for me was using OSPF on frame-relay hub and spoke, I really have to keep in mind the various combinations of network ospf types and/or frame relay interface types.So I hope this post will help anyone with my same problems.The topology here is really a classic hub and spoke frame relay:here the .net dynamips file:

WCS server: a great management tool for WLCs

2010-02-04T11:13:00.009+01:00

Hi all,finally today I've found the time to play with our new WCS server, freshly installed on a Win2003 virtual machine.I have the WCS version 6.0.170.0 with base feature set and 500 AP limit.The first impression really positive, this tool looks like extremely useful to manage configuration changes across multiple wireless lan controllers and for multiple Lightweight Access Points.In addition,

Wism installation on 6509E

2010-02-01T19:55:00.007+01:00

Hi all, today a new Wism module has been inserted and configured on our 6509E.Here the log at the insertion time:Feb 1 11:07:33: %C6KERRDETECT-SP-2-SWBUSSTALL: The switching bus is experiencing stall for 3 secondsFeb 1 11:07:34: %C6KERRDETECT-SP-2-SWBUSSTALL_RECOVERED: The switching bus stall is recovered and data traffic switching continues00:00:02: BaseBoard Index:24200:00:02: DaughterBoard

Playing on PPP

2010-01-29T22:25:00.002+01:00

Hi all, today I'm playing on PPP using Dynamips and a simple topology:Let's start from basics, configure R0 - R1 link using simple encapsulation ppp, then look at the debug ppp output:!---- on R0R0#sh run int ser 1/0 | beg intinterface Serial1/0 ip address 10.10.0.1 255.255.255.252 encapsulation ppp serial restart-delay 0 clock rate 128000end!--- on R1 we first enable debug ppp negotiation...R1#

RIPv2 route filtering

2010-01-24T19:38:00.016+01:00

Hi all, this weekend I'm studying RIPv2.With RIPv2 there are several methods to filter routes received and advertised to other neighbors.Here a brief explaination of the different ways, I have considered as filters all the tricks that allows to control how to install prefixes in the routing tables, including:-Filtering using passive interface-Filtering using prefix-lists-Filtering using Standard

I'm alive

2010-01-23T14:18:00.004+01:00

hi all, long time passed since my last post, I'm still alive, doing a world famous exercise workbook.Args tested on lab:-Frame Relay-Spanning Tree and switching in general-RIP (hope I'll finish it this we)As final lab of my RIP preparation, I'll do the great Narbik free RIP lab (as posted on GroupStudy.com) This week I have also tested "live" the Junos SRX-650, It looks like a great firewall,

Frame Relay, last call

2010-01-11T21:00:00.004+01:00

Hi all,I realized that I have to speed up a lot my lab preparation to fit my calendarized intentions.... so here is one of the topology that I realized to play with FR.No time to describe it too much, but just figure out what you can do with this one ;-)You can do it with GNS3 or with phisical routers, the main difficult thing here was for me to configure the frame-relay switches correctly. I was

Frame Relay Part 3: interface types

2010-01-02T19:25:00.001+01:00

Third part of my frame-relay tour, here we will talk about interface types.Topology still unchanged from the previous parts, here the picture:There are several interface types on frame-relay, according on how you configure your serial interface and on what is the purpose you will archive:1) physical interface2) subinterface multipoint3) subinterface point-to-pointLet's talk about each type..1)

Frame Relay Part 2: encapsulation and inverse arp

2009-12-28T22:00:00.002+01:00

Hi all, here the second part of my frame-relay studies. In the last post we have seen the frame relay switches configuration and some details about lmi.The topology still the same:The frame relay switches are already configured, I've just added some DLCIs to introduce some enthropy to enhance our inarp experience ;-)Let's begin talking about encapsulation. In Frame Relay interfaces the ip, ipv6

Frame Relay Part 1: preparing the frame-relay switches

2009-12-26T13:29:00.019+01:00

Hi all, I'm starting my CCIE R&S Lab preparation with a "classic" argument and a lot of good proposals for this new year... (first of all: more accuracy on my labs, I'm trying to get my digits!)So let's take a look to my frame-relay topology and then we can start labbing and understanding how this old-times technology works.As you can see, it's a 4 routers topology with two frame relay switches,

Happy Holydays

2009-12-20T13:09:00.004+01:00

Happy Studying Holydays to all networkers! I'll pass studing too! ;-)Marco

Back to office: New Fw ... new platform to learn!

2009-12-16T16:16:00.009+01:00

Hi all, after an intense study-week today I'm back to office with a "preliminary score report" in my hand (... and can't say nothing about it until confirmed ;-) ).Anyway, after a strong Cisco exam, and the CCNA CCAI Instructor Course, I was a bit surprised when I see the new firewall waiting on my desk at office.... It's a new Ju(hemhemmmm) a new Juniper SRX-650 !!the nice thing is that I feel

Today's work in a shot: switch installation in a new building

2009-12-05T00:00:00.005+01:00

Hi all,today was my last working day before holydays.I'll spend the next 10 days studying on written topics (exam planned on Dec 16th) and trying to become a CCNA instructor (CCNA CCAI course by Europa Networking Bg)So what's better than finish your week with a simple 4 switches installation?here are two shots:The white one is obviuosly not mine (wrong vendor ;) )Ehehe too few cables here... I'll

Today's work in a shot: initial Lwapp Access Points config

2009-11-27T23:21:00.004+01:00

Nice to have 6 radios turned on on my desk ;-)Today I have prepared 6 x 1242 Lwapp access points (not much config to do... just name and something else).Marco

STP Root and a simple trick

2009-11-18T22:35:00.006+01:00

Hi all, today I was playing with some switches and I realized this strange STP output:3560-48#sh spann vlan 10VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 24586 Address 0015.facf.0000 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 24586 (priority 24576 sys-id-ext 10)

BGPGEN: a simple TCL script to generate BGP prefixes

2009-11-09T17:04:00.006+01:00

hi all, during my courses at Europa Networking (BG, Italy) I've always heard Rocco Tessicini talking about a script to generate BGP prefixes on Cisco routers. Suddently I haven't found one ready to download, so today I've decided to write my own (the simpler, the better)Here the resulting script:#################################################################################### Tclsh BGPGEN

AUX back-to-back: poor man's connection

2009-11-06T15:31:00.011+01:00

Hi all, today I have focused my attention on the Aux port, the only free I have in my old 2600's lab....So, first I have found some old docs on Cisco.com explaining clearly how to connect two routers back-to-back using the AUX port:Connecting Routers Back-to-Back Through the AUX Ports (Document ID: 10365 )and then was time to try it:1) use an old rollover RJ-45 cable to connect AUX ports (pins 1-

Another spaghetti rack

2009-10-26T12:57:00.003+01:00

I was in a building last week, for some troubleshooting tasks.When I entered the wiring closet to find a switch port for my laptop, it looked like...one of the best spaghetti rack ever seen! and here I found my port ;-)(2nd switch from above, port 0/45...) Marco

Tip-of-day: ip access-list resequence

2009-10-22T10:07:00.008+02:00

Hi all,today's trick is access-list resequence. Consider an access-list with ugly sequence numbers, maybe derived from several configuration changes, eg:R6# sh access-listsExtended IP access list test 1 permit tcp any any eq www 2 permit tcp any any eq 443 3 permit tcp any any eq domain 4 permit tcp 172.16.0.0 0.0.255.255 any eq telnet 5 permit tcp 172.16.0.0 0.0.255.255 any eq ssh

Mpls Vpn review

2009-10-14T12:27:00.016+02:00

Hi all, I'm completely busy on studying CCIE R&S written but I want to share a mpls vpn lab for reviewing mpls arguments.Here is the topology: Task list for this lab is:-R1-R2-R3-R4-R5-R6-R7 (ISP) cannot elect any DR/BDR to speed up convergence-Any OSPF area 0.0.0.0 neighbor fault must be detected within 1 second or less (NOTE: if you use dynamips, this requirement can be skipped or "relaxed"...,

Today's work in a shot

2009-09-17T20:01:00.009+02:00

Several boxes are waiting me since a week... today I've unpacked two 4948 and several 2950, here the shots (only one 2950 already out of box)! And the 4948s with redundant power supply:

Back from vacations

2009-09-13T20:11:00.006+02:00

Hi all, I'm just back from our fabulous vacations... any idea about the location?Look:... right! it's San Franciscooooo!!! ;-)and what's better to take a shot like this when you pass near San Jose? ,-)ehehe I hope one day to enter the Cisco Headquarter (ah dreaming.... )Well, the good news is that from Sep. 20 2009 (it's sunday, I know...) I'll start the great CCIE R&S written course in Bergamo (

WVIC 1MFT-E1 back-to-back for frame relay labs

2009-08-14T19:58:00.012+02:00

Hi all,after my old post "WVIC 1MFT-E1 back-to-back" I've tryed to configure a back-to-back connection between two MFT-E1 in order to use it to emulate a serial connection for frame relay studies.Obviously, you don't need crossover serial cables, but a crossover Pri cable (RJ-45) as described in the old post ("WVIC 1MFT-E1 back-to-back")Quick refresh of pins:1 RX Ring - -> 4 TX Ring -2 RX Tip + -

Summer Lab 2009 vol.1

2009-08-12T19:40:00.010+02:00

To prepare for vacations, what's better than a lab?To refresh routing protocols, here is a new topology, named like a disco compilation ;-)SummerLab 2009 vol.1And here is the BGP part...Happy labbing! ,-)

Today's work in a shot

2009-08-05T16:15:00.007+02:00

Hi all, today's work included the configuration of two brand new 2960 PoE-24.Here's the shot on my office desk ;-)They are really quiet!Here the final impact, not bad, but without a vertical cabling management system ;-)

Configuring Server Load Balancing

2009-08-04T23:35:00.010+02:00

Hi all, at my workplace, we're considering the purchase of a load balancer to provide better redundancy and services availability to our customers.Well, a load balancer with decent performances will cost a lot! So my attention it's focused on the ip slb feature that it's present on 12.1 and 12.2 Ios.First read the IOS "Server Load Balancing Feature in IOS Release 12.2(18)SXF" document on cisco

sunday's tip: Disabling DTP on access ports

2009-07-26T11:50:00.005+02:00

Hi all, this sunday morning I'm changing the spanning-tree mode for some switches (from pvst to rapid-pvst) and I noticed that DTP was enabled on several access ports.Remember that DTP (Dynamic Trunking Protocol) is used to negotiate trunks between switches, so it's not a good idea to keep it enabled on access ports, especially if access ports are in public places...This is the configuration I've

Monitoring 6500 switch fabric, trying to understand switching mode

2009-07-15T11:02:00.014+02:00

Hi all, last week I had an informal meeting (also called a beer) with Nicola Modena CCIE #19119 (thanks buddy)!During the long and interesting conversation, he asked me what was the utilization of my 6500s...I answered someting like "Cpu is under 5%", and he said "well, but traffic isn't process switched, what's about the fabric?"Good point Nic! So today I've read the "Configuring a Supervisor

Private Vlans

2009-07-12T11:08:00.010+02:00

Hi all, I've started to read the Wendell Odom's book "CCIE R&S Exam Certification Guide" and I was a little surprised that Private Vlans on chapter 2 are only explained in theory, without configuration examples.Maybe that topic is not so relevant for R&S exam... but enough to stimulate my brain to do a lab ;-)Well, I've started reading the "Configuring Private Vlans" guide for 3750s, but

QoS settings for ATA 186

2009-07-09T11:08:00.005+02:00

Hi all, Playing with Qos on switches today, I've found a small configuration mistake with ATA 186 ports.This is the config I've found:interface FastEthernet0/10 description ATA 186 switchport access vlan 4 switchport mode access priority-queue out mls qos trust device cisco-phone mls qos trust cos spanning-tree portfastendWell, we must recall that ATA 186 it's NOT a cisco-phone, so with this

configuring QoS on 3560

2009-07-06T17:05:00.024+02:00

Hi all, after a little break used to pass the QoS exam and become CCIP certified, I started "playing" with qos on my production lan.So, For each platform I'm trying to think about qos.Let's start with 3560 platform... we use Cisco Ip phones with pcs connected to the phones switched port.Carefully read the following documents:-Catalyst 3560 Switch Software Configuration Guide, 12.2(20)SE -

Monitoring configuration changes

2009-06-15T16:56:00.013+02:00

Hi all,I'm back to tell you a small tip on how to monitor configuration changes on cisco routers.Let's read the "Configuration Change Notification and Logging" article.and try to configure it on our favorite Cisco toys ,-)router(config)#archive !-- enters the archive configlog config !-- enters the archive log configlogging enable !-- enables log on config changeslogging size 200 !-- sets the

Configuring IPv4 Multicast on Campus Lan

2009-05-20T19:14:00.002+02:00

Hi all, this week I have to configure IPv4 multicast on my campus lan, first as usual I read this cisco doc:/12_4/imc_12_4_book.html">Cisco IOS IP Multicast Configuration Guide, Release 12.4Then I made a lab to understand how to configure sparse-mode pim:The goal here is use multicast "private" groups (239.0.0.0/8) inside the campus lan and use the Isp's RP for global groups (224...)Here the most

Mpls Lab#5: Frame mode MPLS TE

2009-04-28T16:01:00.013+02:00

Hi all,Here another Mpls Lab I used to troubleshoot TE problems with lab#4 (see previous post: Mpls Lab #4: using Mpls with cell-mode ATM )The main goal here is configure PE - PE Traffic Eng tunnels with explicit paths.First let's read the "Implementing an MPLS VPN over TE Tunnels" document on CiscowikiIt's a simple mpls vpn topology with a single vrf "custA".P-R1 has no need of MP-BGP, acts only

Configuring multiple PPTP dialin on vrfs

2009-04-22T16:43:00.013+02:00

Hi all, I spent a lot of time this week trying to change our unstables pptp "servers" (3 x PIII linux blackboxes), merging into a single Cisco 2811.First I have read as usual some docs:- Shivlu's great post "IP Dialing From PC To LNS" - Cisco IOS Dial Technologies Configuration GuideThen I made a configuration like this using vrfs to keep the different services isolated:Click here to view the

Mpls Lab #4: using Mpls with cell-mode ATM

2009-04-06T16:47:00.032+02:00

Hi all, I've built this lab with GNS3 to trying mpls over LC-ATM (so called "cell mode"). In real life you will never find routers with ATM interfaces connected back-to-back, usually routers are connected with ATM switches... but it's the only way to test LC-ATM with GNS3, so this lab don't represents a real scenario. note that all "red" links are ATM connections.... main goals of this lab

Note for Service Providers or Cisco Partners across UK: trainee internship needed!

2009-03-24T22:44:00.004+01:00

I'm looking for a trainee internship within a service provider or a Cisco Partner in UK.My project is to have a huge exposure to Cisco equipment for a month (maybe september 2009?), the plan is simply a "learn from the best" ;-) If you are interested, please send me an email marco [dot] rizzi [dot] com [AT] gmail [dot] comthnks Marco

Mpls Lab #3: playing with MPLS VPN

2009-03-24T22:08:00.021+01:00

Hi all,after a week of serious hardware issues ;-( it's now time to start a mpls vpn lab (see my previous post about basic mpls vpn lab )Here as usual the topology:Main goals:1) configure point-to-point links on all routers2) configure ospf area 0 and area 1 on ISP routers3) configure MP-BGP on isp routers using R7 and R8 as Route Reflectors4) provide connectivity to CUST-A sites using bgp as

Mpls Lab #2: playing with LDP

2009-03-03T23:01:00.020+01:00

The topology for this second MPLS lab is a "paper boat" ;-)Main pourpose is establish LDP sessions with these rules/steps:1) use a single-area OSPF as IGP2) use Loopback 0 as Ldp router-id for all routers3) use a single ldp session for R0 <-> R1 and for R4 <-> R54) establish a targeted session between R0 and R5 with session protection of 60s5) enable mpls synchronization for all routers6) use ldp

Mpls Lab #1 : Basic Mpls configuration

2009-02-22T17:03:00.012+01:00

Hi all, after a successful BGP exam, now it's time to start with MPLS... nothing better than a basic lab to practice the configurations and show commands.Here the topology, most of my lab routers doesn't support mpls (2600 series) that's why I used GNS3 with 3600s...STEP 1: configure all point to point links and use EIGRP with various AS to route all links and loopbacks. Ensure that you can ping

WVIC 1MFT-E1 back-to-back connection

2009-02-13T19:55:00.008+01:00

After I spoke with Stefano Messia days ago, I would try to connect back-to-back two WVIC 1MFT-E1 to emulate an analog PSTN Pri for testing and lab purposes.(Altrough I'll start studying CCVP only on july 2009...)First of all, I need a back-to-back Pri cable, I found this useful post by Conwyn Flavell on the Cisco Learning Network site and cabled a 10 cm ethernet cable with two Rj-45 connectors as

Wism Upgrade from 4.1.181.0 to 4.2.176.0

2009-02-11T20:23:00.017+01:00

Today we have finished the upgrade of our two Wireless Lan Controllers Wism Modules from 4.1.181.0 version to 4.2.176.0 ... (Thanks to Stefano Messia ;-) )Some tips, tricks and problems:Read carefully the "Wireless LAN Controller (WLC) Software Upgrade" guide, follow the instruction for software upload via tftpKeep in mind that the upgrade instructions are for a single controller, if you have

Lenovo Thinkpad R400 Linux Drivers

2009-01-29T19:18:00.005+01:00

Lol ! my first non-Cisco post! What's happening?....Today I'm wasting my time installing drivers on my new Lenovo (IBM) Thinkpad R400 with CentOs Linux. Obviously there aren't Linux drivers on Lenovo site, so I watched on the various vendors:1) Ati Radeon HD 3400 video: go to the Ati site and install the proprietary drivers, they will work, but remember to disable the graphical boot, or u will

BGP Lab: Confederations and Route Reflectors

2008-12-28T19:47:00.020+01:00

Hi all, here's my final lab for the BGP exam preparation:There are 3 BGP Autonomous systems, the biggest one, AS 885 is divided into 2 confederations and has 4 Route Reflectors (RR).In the first version of this lab, I've decided to put CON3 outside the confederation... but I had to modify it because it's impossible, every router in a confederated AS must be in a confederation itself.Main goals

Wism Uptime

2008-12-15T23:47:00.005+01:00

Back home, trying slowly to return to my "normal" life...Now it's Time to reboot our other Wism controller (at 23.45... off peak) !I have seen the same issue that we have experienced in October with webauth portal, here the uptime screenshot as usual:Well, system on both our Wism Controllers is a little bit outdated, we have 4.1.181.0 software version, I guess now it's actual the 5.2....(and

Freezed?

2008-11-26T18:12:00.002+01:00

But what happened with my blog?Actually is "Freezed" because I am on vacation in London UK, looking around for contacts and opportunities....so be patient, more labs, BGP and MPLS oriented will follow very soon!stay tuned! ;-)Marco

BGP Lab 2

2008-11-11T20:24:00.003+01:00

After a little delay, now it's time to do another BGP lab! Here the topology:Each ISP declare only his own /16 network and must suppress more detailed routes coming from customers. With this lab we can try different Customer configuration, let's start with: 1) CUSTOMER1 (CON14):Static routing with ISP2. (Easy!)on Client side, no special configuration is required, just a default route to the ISP

BGP Lab

2008-10-21T22:06:00.013+02:00

Hi all,I started studying for CCIP certification, 642-661 BGP will be the next goal, so yesterday I created a lab for "Configure basic BGP" practice:Finally a protocol that is supported by all mylab equipment! ;-)Here some configuration principles that I used:-used Loopbacks for iBGP neighbors and a IGP protocol with redistribution of connected interfaces and passive interface as default-for the

Wism mobility configuration

2008-10-16T16:17:00.013+02:00

Today we have experienced some Wireless Lan Controller issues: we have a Wism module with 2 controllers and an external web authentication page. Well several users today had troubles with web auth, after entering the correct password, they aren't redirected to their requested page, but always return to web auth page, without error messages. So I tryed with my own pc and see that our Wism "A"

MPLS VPN Lab

2008-10-02T22:12:00.009+02:00

After a little break, used to complete my last CCNP exam, I'm back with another lab...Now playing on MPLS VPN!First, read Reggie Nolasco's document "Understanding How Routes are propagated in an MPLS VPN"Then I made a sample topology like this: here we have a service provider (SP) with 3 points of presence (CON6, CON7, CON8) and two different customers.Service Provider:-runs OSPF and MBGP AS

ISCW Lab (and BSCI review )

2008-09-17T10:35:00.018+02:00

NOTE: this is a ISCW lab only, it uses basic mpls setup, I agree that a real ISP will implement mpls vpn instead of direct routing the customers prefixes...Well:A new lab for practice ISCW arguments, thanks to Luca Moretti for partecipating.Here the topology:Scenario:Acme Gmbh is a trading company that have a central office named "Hannover"(CON6 and CON7) and two branches (CON8 = branch "Bergamo"

Configuring a Cisco Adsl router acting as PPTP CLIENT

2008-09-11T17:55:00.024+02:00

At work we have a PPTP Access Server for remote dial-in users.Why PPTP? Because it's very easy to configure for users, and don't require any software installation on win Pcs....Well at home for me it's a bit annoying to bring up the pptp connection every time I need and set-up static routes on my pc... so I realized that my poor outdated Cisco 827 maybe can act as PPTP client.First I tryed to

Today's work in a shot: cleaning switches after 5 years of continuous service

2008-09-02T18:50:00.008+02:00

Today is "tha cleaning day": i cleaned about 15 3550/3500XL inline power and 2 2970.The 3550s where in production for about 5 years without cleaning or power off...Inside's dirt......and the full stack cleaned and storedWell... incredible, only one 3550 has a failed fan, all the others still (noisly a bit) working ;-)For cleaning i used a small portable air compressor and a 150h stud. (thanks

Connecting a NetApp Fas3020 to Cisco 4948 switches

2008-08-26T20:00:00.011+02:00

Well, today i'll consider the connection between two switches Cisco 4948 and two Storage Systems NetApp Fas3020.This is a real situation happened during our recent switch migration....we have:2 storage systems: Fas3020 A <-> Fas3020 Band 2 Cisco 4948 dedicated to storage networkingOk what happens when we must connect all toghether to provide the best redundancy as possible?we follow the NetApp

connecting Cisco 7911G into the wiring closet for initial configuration

2008-08-25T16:26:00.004+02:00

Today's work in a shot:Here the 7911(s) are connected into the wiring closet to provide initial configuration, after this step, we distributed the phones into their respective offices/desks.Installed and configured:2 x 3560G PoE 24 ports switches1 x 3560G 48 ports switchunpacked and configured about 30 x 7911G ip phones.justafunnywork;-)

Reusing OLD DCE-3 for Lab serials

2008-08-18T08:00:00.013+02:00

For my lab, i've finished the DCE-female serial cables. I think to buy another 3, but first i tryed to reuse-recycle old Teleco's DCE-3.Italian Telecom always leaves by customers the dismissed line's equipment, specifically the old 2Mbps DCE-3 modems.During the years we have collected about 15 Old Dce-3s... so i tryed with the most "new" and used the following models:Teleco TD 604T Modem DCE-

Expanding my lab

2008-08-14T19:05:00.003+02:00

Well, during those hot summer days, i've decided to expand my lab with additionals old-fashioned Cisco Routers, so i go down at work, finding ANY dismissed material.The result is this expanded lab (now something about 18 Rack U) ;-)Old 2601s with only one Ethernet are not so useful for routing labs, but i'll use for tunnels and as mpls "customers" ;-)