Posts

Below are my findings regarding CAR. Please be advised that this is work in progress.

CAR is the ancient way of doing policing.

It is not configured using any of the new and fancy MQC style configuration.

It is an interface-based command set.

A couple of things i have found interesting this week.

The first one is that Intel is still in the game for making NIC’s. Even though they are doing some good ones in the server space, this batch seems to be targeted at the entry-level.

We are working with alot of customers having lots of small “sites”, meaning that each site range from having 1 to 20 devices. The devices can be a user workstation or it can be some sort of automatic equipment having a VPN tunnel back to the main headquarter.

Finally.

I have been using Things as my task management program for about 5-6 months.

Its been better than not using anything at all, but what has really annoyed me quite heavily is its inability to do “Cloud” synchronization. The only form of synchronization from Things is through your wireless network. And even so, just directly to your Mac, which then syncs to the other devices.

I own alot of books.

By books, i mean those paper things, that takes up alot of space and for which we chop down trees.

Recently, i have been shifting my reading onto my iPad. Its easy to carry around, it holds multiple books and pdf files. On top of that, i find its a great reading device. The fonts are rendered fantastically and they are easy on the eyes to read. I have no trouble reading on the iPad.

I stumbled across this blog post which i think most will find very interesting.

At least i think it contains some ideas that should be followed whenever you make a change to your own or your customers network.

Head on over and take a look: http://lamejournal.com/2011/12/07/guide-to-making-changes/

This will be the last post of 2011.

It’s been a very interesting year in a lot of different areas.

The most important for me personally has been the achievement of my CCIE. I have worked very hard for this and it finally paid off.

<div id="attachment_928" style="width: 548px" class="wp-caption aligncenter">
  <a href="http://www.packet-forwarding.net/wp-content/uploads/2011/12/topology.jpg"><img class="size-full wp-image-928" title="EIGRP Topology" src="http://www.packet-forwarding.net/wp-content/uploads/2011/12/topology.jpg" alt="" width="538" height="82" /></a>
  
  <p class="wp-caption-text">
    EIGRP Topology
  </p>
</div>

<br /> <strong>Configuration:</strong>

I have finally decided to clean up my Routing & Switching notes and more importantly moving them from Microsoft OneNote to Microsoft Word.

I know, I know, its still Microsoft, but even though OneNote has been okay for my needs, the lack of the program for Mac OS is annoying the crap out of me.

Lately i have been making it a goal of mine to watch a TED video a day.

I do this in order to expand my horizon and learn things that i normally wouldnt pay much attention to.

Something as foreign to me as a music conductor explaining how to perform a piece of music, what it takes and why he does it, makes me a more informed human being.

In this post i will shed some light on some spanning-tree info that has been floating around. But also an explanation why i choose a non-obvious answer to an IPexpert question.

Specifically 2 things.

The first one is the selection of ports and what _exactly_ selects the root port.

I am back from our company trip to Dubai.

Dubai is a fantastic place. Its my first time in the middle east and it left a great impression.

The whole city struck me as a proof-of-concept kind of city. They decided they wanted to do something great and they went ahead and did it. Even better, they did it without much red-tape.

It seems that everywhere i look, be it on twitter, google+ or my regular reading list of blogs, Openflow comes up alot.

What is Openflow?

Openflow is an initiative to create a protocol and an API infrastructure to improve overall functionality of your network.

One of my friends told me about a feature called SPD and whether i knew about it. I didnt so i decided to read a bit more about it.

SPD stands for Selective Packet Discard. As the name implies it has something to do with discarding packets. Something that is never good.

Lately theres been some fuzz in the corners about the need for NAT in the new world order of IPv6.

I think its a poor design choice and ill give my reason below.

One of the reasons why people seem to feel like they need NAT, is accessibility to IPv4 only content. While i agree this is certainly a concern, it is being rendered less and less important each day as more content providers run dual-stack (or some other form of proxying). Either way, you as a user can get directly to more and more IPv6 content by the day.

It seems like every day, there are some vulnerability or crack announced on the geek news-outlets.

For some reason, the recent publication of an exploit of a flaw in the SSL/TLS implementation in some versions, made me extra curious and it made me think a little harder about this whole security business.

Flex Links, otherwise known as the devil for your L2 network.

In all fairness, lets actually figure out what this feature

is used for.

The most important thing you need to know is the fact that

Flex links disable your spanning-tree process.

I just watched this great lecture from INE on multicast. Well worth sharing:

Lately i have been watching a Ted video each day. I find this fascinating as i learn stuff in areas i would not normally be looking.

I can highly recommend this to anyone in order to stay informed on whats going on in our world.

Using L2 tunnel protocol version 3, you can accomplish what so many scientists are working on. A Wormhole!

Granted, this wormhole is just through your L3 network, so it might not raise as many eyebrows, but its still a nifty tool in your toolbox.

In this small post i want to clarify the use of the “ip verify” command.

There has been some confusion on the usage of this command, especially in conjunction with the access-list parameter. I would like to clarify this here.

Being a network consultant means getting access to lots of customers using a range of different equipment.

One thing thats common for almost all of them, is the fact that the time is not in sync throughout their devices. As you may know, this is a real issue when you are trying to sort out a problem.

Some time has passed since i got my CCIE number.

I have spent the time reflecting on the time that has passed since starting my CCIE journey. I will write down my journey in more detail later on for those who are interested.

Hi everyone,

I am happy to announce that this week i passed the R&S CCIE lab exam. CCIE #29189.

Its been a long journey for me. Working full time, not taking any dedicated time off work to do so, has been challenging.

In this article i will try and setup a very simple example using Cisco IOS IPS (Intrusion Prevention System).

As before, a simple topology consisting of 3 routers will suffice.

They are configured as follows:

R1 will act as our source host. From this machine i will simulate an attacker trying to gain access to R3 through R2. This means R2 will be the device where we will be configuring the IPS functionality.

My take on the Microsoft purchase of Skype.

Only last week i attended a mandatory briefing of Lync, Microsofts all-in-all wonder for communicating.

Basically its a PBX, IM-server, Video-conferencing, Outlook-Integrator kind of a product.

Basically they have taken alot of code from alot of different half-done products and thrown them into one big pile and put alot of marketing money behind it.

Warning: The following is primarily a rant! You might not find it applicable in your situation, or you might simply not care. You have been warned 🙂

Having been a consultant for a while now, i am constantly amazed at how solutions are made up and what is sold simply because it has a buzz-word in its title or description.

I am going through the detailed blueprint, one item at a time and verifying that there are no surprises. Especially IP services and security is something i havent paid enough attention to in the past.

Anyways, there are lots of items on that darn list and going through them all takes alot of time.

Link optimization on frame-relay.

Using frame-relay, bandwidth is especially a concern.

It is possible to optimize this bandwidth in several ways.

I will concentrate this post about compression and fragmentation.

First off, with compression on frame-relay there several methods of accomplishing this.

As promised, here is a couple of photos of the final layout.

<p class="wp-caption-text">
  Total Layout
</p>

<p class="wp-caption-text">
  More detailed view
</p>

So I modified the previous layout a bit.

The concern i voiced about the 3640 was enough to make me figure out a way to have that one as the bottom piece of equipment.

This is what i ended up with:

I need to start cabling all of this gear into place. I have made a layout which i think i will try out.

The only thing that concerns me is the weight of the 3640 router. Its a heavy baby.

I have received the rest of my routers (1841s), I have also received the memory and flash upgrades for them all (256meg memory and 64mb flash). The guy who sold them to me was very helpful and it turned out he had the cables that i needed as well (some Smart-serial to Smart-serial, as well as some DB60 ones).

So i have decided to extend my rack functionality.

I have the nessecary switching capacity, but what i need are the “correct” routers.

Because of that, i have so far purchased 4x 1841 + a 2811. I still need 3 more before its in order. On top of that i need more memory and flash for them all.

NTP is one of those things that really keeps messing with my head.

To break it down, what does it do for us?

Simple. It provides the correct time of the day.

How does it accomplish this? Now this is where it gets interesting.

I want to point everyones attention at this blog post made by Marko over at IPX. Its a good read and i think you will all enjoy it!

http://blog.ipexpert.com/2011/01/19/old-ccie-myths-vlan-1/

Welcome to 2011.

I hope that you have had time to enjoy the holidays and all the festivities that come with it.

Personally i have been doing alot of work stuff. Moving data centers is no small task when the customers want constant uptime. Of course for some customers this couldnt be done as they dont have fully redundant systems to switch over to. However a large part could be done very fast, but they all needed to be done at night and preferably during the weekends.

The month of December has been crazy for me.

A ton of work related stuff has been going on. Our HQ move has taken its toll on everybody. Ive been working through every weekend, putting in some 20 odd hours on some days.

My understanding of IRB:

I did another Volume 1 lab yesterday. Again i hit my head against the infamous IRB feature.

IRB stands for Integrated Routing and Bridging. Below is my understanding of the technology. I could be very wrong about this, so please correct me if i state something completely incorrect.

Its been just over two weeks since my lab attempt.

I have basically done no studying at all during that time.

Time has come to get back in the game. I do have alot of work to do in the near future, but i will still try and do all the studying i can squeeze in.