Tag Archives: CCNP

My IPv6/Routing/Cisco Lab Rack (2019)

2019-06-24Memorandum, Off-Topic19", CCNA, CCNP, Cisco Router, Cisco Switch, Internet, Juniper SA, Juniper ScreenOS, Juniper SRX, Juniper SSG, Palo Alto Networks, PoE, Raspberry Pi, VPN, WebcamJohannes Weber

My lab rack of 2019 consists of multiple Cisco routers and switches, as well as Juniper ScreenOS firewalls for routing purposes, a Palo Alto Networks firewall, a Juniper SRX firewall, a server for virtualization and some Raspberry Pis. That is: This rack can be used for basic Cisco courses such as CCNA or CCNP, or for even bigger BGP/OSPF or IPsec VPN scenarios since those ScreenOS firewalls are perfect routers as well. Of course, everything is IPv6 capable. Having some PoE-powered Raspberry Pis you can simulate basic client-server connections. A Juniper SA-2500 (aka Pulse Connect Secure) for remote accessing the Lab rounds things up.

I am just writing down a few thoughts on why I have “designed” the rack in that way. It’s basically a reminder for myself. ;)

Continue reading My IPv6/Routing/Cisco Lab Rack (2019) →

My CCNP TSHOOT Lab: The Overall Picture

2018-11-12Cisco Systems, IPv6, RoutingAuthentication, CCNP, Cisco Router, Cisco Switch, Dynamic Routing, EEM, FHRP, GLBP, GRE, IPv6, MD5, NTP, prefix-list, route-map, VRRPJohannes Weber

During the last few weeks I published a couple of blogposts concerning routing protocols such as BGP, OSPFv3, and EIGRP. (Use the “Cisco Router” tag on my blog to list all of them.) They are all part of my current Cisco lab that I am using for my CCNP TSHOOT exam preparation. While I depicted only the details of the routing protocols in those blogposts, I am showing my overall lab with all of its Cisco IOS configs here. Just to have the complete picture. There are a couple of not-yet-blogged configs such as VRRP, GLBP, NTP authentication, embedded event manager (EEM), or route-maps and distribute/prefix lists though.

Continue reading My CCNP TSHOOT Lab: The Overall Picture →

EIGRP Capture

2018-11-01Cisco Systems, IPv6, RoutingAuthentication, CCNP, Cisco Router, Dynamic Routing, EIGRP, IPv6, MD5, pcap, ProfiShark, Profitap, WiresharkJohannes Weber

And again: Here comes a pcapng capture taken for the dynamic routing protocol EIGRP. If you want to dig into EIGRP messages, download the trace file and browse around it with Wireshark. Since I used both Internet Protocols (IPv6 and legacy IP), MD5 authentication, route redistribution, etc., you can find many different messages in it.

Continue reading EIGRP Capture →

Dual-Stack EIGRP Lab

2018-10-24Authentication, Cisco Systems, IPv6, RoutingAuthentication, CCNP, Cisco Router, Dynamic Routing, EIGRP, IPv6, key-chain, MD5, Redistribution, SummarizationJohannes Weber

Yet another routing protocol I played with in my lab. ;) This time: EIGRP, Enhanced Interior Gateway Routing Protocol, the ~~proprietary~~ distance-vector routing protocol developed by Cisco, which is now public available (RFC 7868). However, no third-party products in here but only Cisco routers. I am using named EIGRP for both Internet Protocols, IPv6 and legacy IP, along with MD5 authentication and redistribution from OSPF.

Continue reading Dual-Stack EIGRP Lab →

OSPFv3 with IPsec Authentication

2018-10-19Authentication, Cisco Systems, IPsec/VPN, IPv6, RoutingAH, Authentication, CCNP, Cisco Router, Dynamic Routing, IPsec, IPv6, OSPFv3, pcap, ProfiShark, Profitap, Redistribution, Security Association, SHA-1, Summarization, WiresharkJohannes Weber

Here comes a small lab consisting of three Cisco routers in which I used OSPFv3 for IPv6 with IPsec authentication. I am listing the configuration commands and some show commands. Furthermore, I am publishing a pcapng file so that you can have a look at it with Wireshark by yourself.

Continue reading OSPFv3 with IPsec Authentication →

OSPFv2 Capture

2018-10-11Authentication, Cisco Systems, RoutingAuthentication, CCNP, Cisco Router, Dynamic Routing, MD5, OSPF, pcap, ProfiShark, Profitap, Redistribution, SummarizationJohannes Weber

I already had an OSPFv2 for IPv4 lab on my blog. However, I missed capturing a pcap file in order to publish it. So, here it is. Feel free to have a look at another small lab with three Cisco routers and OSPFv2. Just another pcapng file to practise some protocol and Wireshark skills.

Continue reading OSPFv2 Capture →

MP-BGP Capture

2018-10-03IPv6, RoutingAuthentication, BGP, CCNP, Cisco Router, Dynamic Routing, Follow TCP Stream, FortiGate, Fortinet, IPv6, MD5, MP-BGP, Palo Alto Networks, pcap, WiresharkJohannes Weber

For those who are interested in analyzing basic BGP messages: I have a trace file for you. ;) It consists of two session establishments as I cleared the complete BGP session on two involved routers for it. Refer to my previous blog post for details about the lab, that is: MP-BGP with IPv6 and legacy IP, neighbouring via both protocols as well, with and without password. The involved routers were 2x Cisco routers, one Palo Alto Networks firewall, and one Fortinet FortiGate firewall.

Continue reading MP-BGP Capture →

Basic MP-BGP Lab: Cisco Router, Palo Alto, Fortinet

2018-09-24Authentication, Cisco Systems, Fortinet, IPv6, Palo Alto Networks, RoutingAuthentication, BGP, CCNP, Cisco Router, Dynamic Routing, FortiGate, Fortinet, IPv6, Loopback, MD5, MP-BGP, Palo Alto Networks, Password, RedistributionJohannes Weber

While playing around in my lab learning BGP I configured iBGP with Multiprotocol Extensions (exchanging routing information for IPv6 and legacy IP) between two Cisco routers, a Palo Alto Networks firewall, and a Fortinet FortiGate firewall. Following are all configuration steps from their GUI (Palo) as well as their CLIs (Cisco, Fortinet). It’s just a “basic” lab because I did not configure any possible parameter such as local preference or MED but left almost all to its defaults, except neighboring from loopbacks, password authentication and next-hop-self.

Continue reading Basic MP-BGP Lab: Cisco Router, Palo Alto, Fortinet →

Wireshark Layer 2-3 pcap Challenge Answers

2017-05-18NetworkCCNP, DEC-MOP, Follow UDP Stream, LOOP, WiresharkJohannes Weber

A few weeks ago I published a pcap file along with many challenges in order to invite anyone to download and to solve it. Though there are not that many answers posted in the comment section I hope that the trace file will help many people understanding the layer 2/3 protocols or to work with it during CCNP exam preparation.

Following are my answers to the 46 challenges I posted back then. I’ll not only give you the mere results but many Wireshark screenshots with some notes on how to get them. Here we go:

Continue reading Wireshark Layer 2-3 pcap Challenge Answers →

Basic Cisco Configuration

2017-05-09Cisco Systems, Design/Policy, TemplateACL, bogons, CCNP, Cisco Router, Cisco Switch, CLI, DHCP, From Scratch, IPv6, NAT, NTP, PAT, SNMP, SSH, Syslog, Template, uRPF, vtyJohannes Weber

Following is a list of the most common Cisco device configuration commands that I am using when setting up a router or switch from scratch, such as hostname, username, logging, vty access, ntp, snmp, syslog. For a router, I am also listing some basic layer 3 interface commands, while for a switch I am listing STP and VTP examples as well as the interface settings for access and trunk ports.

This is not a detailed best practice list which can be used completely without thinking about it, but a list with the most common configurations from which to pick out the ones required for the current scenario. Kind of a template. Of course with IPv6 and legacy IP.

Continue reading Basic Cisco Configuration →

CCNP SWITCH Lab show commands

2017-04-19Cisco Systems, SwitchingAdjacency, ARP, CCNP, CDP, Cisco Router, Cisco Switch, DHCP, DTP, EtherChannel, HSRP, IP SLA, LACP, LLDP, MAC Address, NTP, PoE, Port Security, SDM, SNMP, STP, TCAM, UDLD, VLAN, VTPJohannes Weber

Second post of this little series. While I was using my CCNP SWITCH lab for testing many different protocols, I “showed” and saved the output of those protocols as well. Refer to the lab overview of my last post in order to understand those outputs.

I basically saved them as a reference for myself in case I am interested in the information revealed by them. I won’t explain any details of the protocols nor the outputs here. Just many listings. Fly over them and reflect yourself whether you would understand anything. ;) Here we go:

Continue reading CCNP SWITCH Lab show commands →

Wireshark Layer 2-3 pcap Analysis w/ Challenges (CCNP SWITCH)

2017-03-29Cisco Systems, Routing, SwitchingARP, CCNP, CDP, Challenge, Cisco Router, Cisco Switch, DHCP, DNS, DTP, HSRP, ICMP, ICMPv6, IP SLA, IPv6, LACP, LLDP, MAC Address, NTP, pcap, RIP, SNMP, SSH, STP, Syslog, TFTP, UDLD, VLAN, VTP, WiresharkJohannes Weber

While preparing for my CCNP SWITCH exam I built a laboratory with 4 switches, 3 routers and 2 workstations in order to test almost all layer 2/3 protocols that are related to network management traffic. And because “PCAP or it didn’t happen” I captured 22 of these protocols to further investigate them with Wireshark. Oh oh, I remember the good old times where I merely used unmanaged layer 2 switches. ;)

In this blogpost I am publishing the captured pcap file with all of these 22 protocols. I am further listing 46 CHALLENGES as an exercise for the reader. Feel free to download the pcap and to test your protocol skills with Wireshark! Use the comment section below for posting your answers.

Of course I am running my lab fully dual-stacked, i.e., with IPv6 and legacy IP. On some switches the SDM template must be changed to be IPv6 capable such as sdm prefer dual-ipv4-and-ipv6 default .

Continue reading Wireshark Layer 2-3 pcap Analysis w/ Challenges (CCNP SWITCH) →

OSPFv3 for IPv6 Lab: Cisco, Fortinet, Juniper, Palo Alto, Quagga

2015-09-14Cisco ASA, Fortinet, IPv6, Juniper Networks, Palo Alto Networks, Quagga, RoutingCCNP, Cisco ASA, Cisco Router, Dynamic Routing, FortiGate, Fortinet, IPv6, Juniper ScreenOS, Juniper SSG, OSPFv3, Palo Alto Networks, pcap, Quagga, WiresharkJohannes Weber

Similar to my test lab for OSPFv2, I am testing OSPFv3 for IPv6 with the following devices: Cisco ASA, Cisco Router, Fortinet FortiGate, Juniper SSG, Palo Alto, and Quagga Router. I am showing my lab network diagram and the configuration commands/screenshots for all devices. Furthermore, I am listing some basic troubleshooting commands. In the last section, I provide a Tcpdump/Wireshark capture of an initial OSPFv3 run.

I am not going into deep details of OSPFv3 at all. But this lab should give basic hints/examples for configuring OSPFv3 for all of the listed devices.

Continue reading OSPFv3 for IPv6 Lab: Cisco, Fortinet, Juniper, Palo Alto, Quagga →

OSPF Visualizer

2015-09-08Quagga, RoutingCCNP, Dynamic Routing, OSPF, Plot, Quagga, VisualizationJohannes Weber

While reading the OSPF chapter in the Cisco CCNP ROUTE learning guide, I was interested in how to visualize an OSPF area. Since every router in the same area has a complete view of all routers and networks, it should be easy to draw a map. So, I searched through the web for this kind of OSPF plotter and found two different approaches. While none of them worked out of the box, I was able to run one of them with an additional software router (Quagga) inside my OSPF area which finally drew a map. Yeah. Here we go:

Continue reading OSPF Visualizer →

OSPF for IPv4 Test Lab: Cisco Router & ASA, Juniper SSG & Palo Alto

2014-08-21Cisco ASA, Cisco Systems, Juniper Networks, Palo Alto Networks, RoutingCCNP, Cisco ASA, Cisco Router, Juniper ScreenOS, Juniper SSG, OSPF, Palo Alto NetworksJohannes Weber

I tested OSPF for IPv4 in my lab: I configured OSPF inside a single broadcast domain with five devices: 2x Cisco Router, Cisco ASA, Juniper SSG, and Palo Alto PA. It works perfectly though these are a few different vendors.

I will show my lab and will list all the configuration commands/screenshots I used on the devices. I won’t go into detail but maybe these listings help for a basic understanding of the OSPF processes on these devices.

Continue reading OSPF for IPv4 Test Lab: Cisco Router & ASA, Juniper SSG & Palo Alto →

Weberblog.net

IT-Security, Networks, IPv6, VPN, DNSSEC, NTP