ASA Lessons: Failover
In this post I will go through an example of setting up redundancy between a pair of ASA’s using one of the two methods of accomplishing this. The 2 methods are:
Failover Clustering This post is exclusively about the failover option.
So I have further evidence that I might be crazy:
I have decided to abandon any and all CCIE DC studies. Why you might ask? Simple: I dont have access to the required equipment continually so I can practice and reinforce any knowledge.
Enterprise Networking PVT
This week, I am attending Cisco’s EMEAR Enterprise Networking PVT in Amsterdam and I wanted to highlight some key takeaways.
Cisco is really doubling down on getting its software strategy in place. Everything, and I mean everything gets a mention in regards to what sort of software is enabling it (DNA Center/SD-Access/SD-WAN etc.
ASA Lessons: Static PAT
I decided a while back I would spend a bit of time learning about the Cisco ASA firewall. This is the first post surrounding some technologies I have explored during that time.
For some of you it might be easy stuff, but for others, including myself, might find it interesting for reference.
Im currently listening to an awesome book called Extreme Ownership. I wish to share some thoughts on its teachings as I think they are very valuable in any industry and particularly the IT industry.
First off, this is the book (im using the Audible service for audio-books):
Updated Learning Path
I am modifying my learning path for the year. Basically I will be focusing on automation, Python and Network API’s.
These are the courses/goals I will be trying to attain:
Course: PRNE (Completed) Course: NPDESI (Completed) Course: NPDEV (Completed) Book: Network Programmability and Automation (100% Done) With those 3 courses completed, I will have re-certified my CCIE’s and CCDE using the Continuing Education Program.
Just a quick update on the site migration process. Everything should be in working order now, including certificates and the image repository. As always, give me a shout if you find something broken.
The old VPS server is about to be taken down, which will be the final test for something cross-function that might be left behind.
Site Maintenance Update
A quick update on the site maintenance progress.
I have chosen to move away from Wordpress and instead using a CI/CD workflow using Hugo+Netlify+Github. Im still learning the ropes, so expect some mistakes here and there. Its a work in progress like anything else.
About the Author
My name is Kim Pedersen. I work as a senior network engineer/designer at a VAR/SP in Denmark.
For most of my life I have been very interested in a variety of technology areas. I started out my professional career as a software developer.
About the site
This site is my outlet for all the things on my mind. It contains alot of technical information, which I hope you will find useful.
If you find any errors or mistakes I have made, please reach out to me so I can get it fixed and/or sorted out.
I am performing some site maintenance in conjunction with a move to a new VPS server. (Thank you Hetzner (some irony may be involved)).
Hopefully everything should be reachable, but some minor UI tweaks may occur.
Thanks for understanding.
TFDx – Forward Networks
Forward Networks was one of the top presenters at TFDx at Cisco Live 2019 in Barcelona in my opinion. I really didn’t know much about what they were all about before we had the presentation. One thing I did notice was that they were really organized, even handing out agendas before beginning the presentation.
Time to say goodbye to Barcelona
As im sitting here in the hotel, waiting to leave for the airport, the only thing on my mind is: Wow.. what an amazing week this has been.
I have met so many old friends and made a bunch of new ones.
Thoughts before CLEUR 2019
In just 3 days time I will be leaving for Cisco Live 2019 in Barcelona. Im thinking about what sort of event it will be and what to expect in term of announcements.
Especially one thought keeps reappearing and thats the thought of the transformation of Cisco.
Tech Field Day @ CiscoLive Europe 2019
I am honoured to have been selected as a delegate for Tech Field Day during Cisco Live Europe 2019 in Barcelona!
Cisco Live Europe will take place from the 27th of January until Friday 1st.
I am really looking forward to this opportunity.
Cisco Champion 2019
I was fortunate enough to be selected as a Cisco Champion for 2019. Looking forward to alot of good information and cooperation from the program! 🙂
This post is all about OTV (Overlay Transport Virtualization) on the CSR1000v.
I wanted to create the post because there are alot of acronyms and terminology involved.
A secondary objective was to have a “real” multicast network in the middle, as the examples I have seen around the web, have used a direct P2P network for the DCI.
Useful links for Observium + Rancid
I recently decided that i would like to utilize Observium as well as rancid for configuration backups on my home network. To that effect, the following links really helped me out getting it all setup correctly:
Let me know if you run into anything i might help out with.
A quote from an Ex-Googler
I really like this paragraph, because almost everyone wants to imitate google. Why? well, the answer to that questions seems to be what everyone is missing!
Google’s solutions were built for scale that basically doesn’t exist outside of a maybe a handful of companies with a trillion dollar valuation.
Complicated Vs. Complexity
I am currently reading Team of Teams, an excellent book!
In it, it highlights an interesting fact that I think is very relevant for the networking world and that is the difference between something that is complicated versus something that is complex.
I recently completed the entry level Juniper certification. I thought it would be a good idea to study for something other than the mighty Cisco, so Juniper’s JNCIA-Junos seemed like a good choice.
It was a very fair exam I can highly recommend.
VxLAN on the CSR1Kv
By now, VxLAN is becoming the standard way of tunneling in the Datacenter.
Using VxLAN, i will show how to use the CSR1Kv to extend your Datacenter L2 reach between sites as well.
First off, what is VxLAN?
It stands for Virtual Extensible LAN.
ISIS Authentication types (packet captures)
In this post i would like to highlight a couple of “features” of ISIS.
More specifically the authentication mechanism used and how it looks in the data plane.
I will do this by configuring a couple of routers and configure the 2 authentication types available.
Progress update – 10/07-2017
Im currently going through the INE DC videos and learning a lot about fabrics and how they work along with a fair bit of UCS information on top of that!
Im spending an average of 2.5 hours on weekdays for study and a bit more in the weekends when time permits.
New Lab Server & random updates
So I just completed a purchase off eBay for a new server for my lab purposes.
For a while now I’ve been limited to 32Gb of memory on my old ESXi server, which is really more like 20Gb when my regular servers have had their share.
Onto the next one…
Yesterday I passed the CCNA-W exam. Now onto the next partner certification I need to do before summer.
Its called 500-452 ENCWE – Enterprise Networks Core and WAN Essentials and a large part of it involves iWAN, which im not too familiar with.
So whats next?
I’ve had a little time readjusting after my exam and I’ve given some thought on what to keep me busy next.
Basically I have 3 projects to keep me busy for the next foreseeable future.
My boss came to me a week ago and tasked me with this.
CCDE – A different Journey
Wednesday the 22nd of February, in a testing center in the middle of London, my journey towards achieving the CCDE certification, finally ended in me passing this beast of an exam.
This learning journey was a very different one than either of my CCIE’s.
A look at Auto-Tunnel Mesh Groups
In this post I would like to give a demonstration of using the Auto-Tunnel Mesh group feature.
As you may know, manual MPLS-TE tunnels are first and foremost unidirectional, meaning that if you do them between two PE nodes, you have to do a tunnel in each direction with the local PE node being the headend.
Happy New Year
Hi Everyone, I wish you all a Happy New Year! Currently im very busy studying for my 2nd attempt at the CCDE Practical exam.
I have it booked for the next slot, which is February 22nd in London. Thankfully there are more and more material available for the CCDE than just a year ago.
Snippet: The story of the EFP
For a while now, the concept of EVC’s (Ethernet Virtual Circuits) and EFP’s (Ethernet Flow Points), has eluded me. In this short post, i will provide you with a simple example of a couple of EFP’s. In a later post i will discuss the MEF concept of EVC’s.
New practice lab(s) available…
In case you are serious about going for the CCDE certification, I highly recommend you check out my friend Martin Duggan’s new lab(s) on Leanpub. His writing style is very good and its easy to follow along and i look forward to hitting this lab myself.
Practical DMVPN Example
In this post, I will put together a variety of different technologies involved in a real-life DMVPN deployment. This includes things such as the correct tunnel configuration, routing-configuration using BGP as the protocol of choice, as well as NAT toward an upstream provider and front-door VRF’s in order to implement a default-route on both the Hub and the Spokes and last, but not least a newer feature, namely Per-Tunnel QoS using NHRP.
1st Attempt – No Dice
So I just got back from my first attempt at the CCDE practical, and unfortunally I didnt pass it.
It was a very different exam than the CCIE and it takes a little while to become used to the interface and exam style.
Cisco Live US! 2016
I am fortunate enough, to be able to goto Cisco Live US! again this year.
Last year was such an experience, that my hopes are really high for this year as well.
I will be arriving on Friday the 8th and leaving on the 15th.
A couple of weeks ago I had the good fortune of attending Jeremy Filliben’s CCDE Bootcamp.
It was a great experience, which I will elaborate on in another post. But one of the technology areas I had a bit of difficult with, was GETVPN.
February – A busy month indeed!
Wow, what a busy month this has been!
So I started my new job on February 1st and thus far, everything has been really great.
My new coworkers are very friendly and helpful.
I’ve spent the better part of february, trying to get to grips with the SP network I will be focusing on from now on.
Doing right in the VAR role!
This post is my follow-up on a recent discussion on twitter.
Working for a VAR (Value Added Reseller) is not always the glamours life some make it out to be.
Working as a consultant, what you are really doing, is being the CEO of your own service company.
Passed the CCDE written. Now what?
I was fortunate enough to finally pass the CCDE written exam yesterday morning.
That begs the question of “Now What?”
Well, I will spend a couple of days putting together a study strategy, based on where I am now compared to where I need to be in order to pass the exam.