The tiles are in, my fist floating shelf and a dash of paint – check !
-
+
+
+
+
+
+
It’s been a couple of weeks now and the kitchen is slowly coming together 👍🏼
-
asa01# aaa-server LDAPSERVERS protocol ldap
asa01 (config-aaa-server-group)# aaa-server LDAPSERVERS ([interfacename]) host [ipaddress]
asa01 (config-aaa-server-group)# ldap-base-dn DC=somedomain,DC=com,DC=au
asa01 (config-aaa-server-group)# ldap-scope subtree
asa01 (config-aaa-server-group)# ldap-naming-attribute sAMAccountName
asa01 (config-aaa-server-group)# ldap-login-password *****
asa01 (config-aaa-server-group)# ldap-login-dn CN=VPN_Account,OU=Users,DC=somedomain,DC=com,DC=au
asa01 (config-aaa-server-group)# server-type auto-detectTo verify your configuration:
asa01 (config-aaa-server-group)# test aaa-server authentication LDAPSERVERS host [IPAddress] username [someone] password [password]
This will return an INFO: Authentication Successful 🙂
-
+
+
+
+
+
+
Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 4.0
Configure AnyConnect Secure Mobility Client with Split Tunneling on an ASA – Cisco
Troubleshooting using DART
-
+
+
+
+
+
+
A multi function device failure in the far reaches of Australia requiring a quick re-route of the line from ISDN in to PSTN out and ‘boom’ we’re up and running again.
From:
dial-peer voice 1001 pots
description *** Site Fax Number
destination-pattern 0001
port 0/2/0
forward-digits allTo:
dial-peer voice 1001 pots
trunkgroup ISDN_OUT
description *** Forwarded to PSTN (used to be port 0/2/0)
destination-pattern 0001
forward-digits 0
prefix 91234567 [<< the new number] -
A memory jogger for me, to view a failed call on the ISDN line. Disconnect Codes
term mon
debug isdn q931
-
Another option for your WLC on a VM 🙂
-
+
+
+
+
+
+
Every now and then you’ll have to use this command to verify Power Supply and other system environmental status.
ROUTER#sh environment all
SYSTEM POWER SUPPLY STATUS
==========================
Internal Power Supply 1 Type: AC
Internal Power Supply 1 Input Status and 12V Output Status: FailInternal Power Supply 2 Type: AC
Internal Power Supply 2 12V Output Status: NormalSYSTEM FAN STATUS
=================
Fan 1 OK, Low speed setting
Fan 2 OK, Low speed setting
Fan 3 OK, Low speed setting
Fan 4 OK, Low speed setting
Fan 5 OK, Low speed settingSYSTEM TEMPERATURE STATUS
=========================
Intake Left temperature: 25 Celsius, Normal
Intake Right temperature: 24 Celsius, Normal
Exhaust Right temperature: 24 Celsius, Normal
Exhaust Left temperature: 26 Celsius, Normal
CPU temperature: 55 Celsius, Normal
Power Supply Unit 2 temperature: 27 Celsius, NormalREAL TIME CLOCK BATTERY STATUS
==============================
Battery OK (checked at power up)SYSTEM POWER
===============
Motherboard Components Power consumption = 100.8 WPower consumption =
NM/SM slot 4 43.1 W
Total System Power consumption is: 143.9 WEnvironmental information last updated 00:00:20 ago
-
+
+
+
+
+
+
Logical Construct of a Multi Tenant VxLAN EVPN with a Single Tenant in a VRF on a Nexux 9k
One VLAN maps to one Layer-2 VNI Layer-2 VNI per Layer-2 segment
A Tenant can have multiple VLANs, therefore multiple Layer-2 VNIs
Traffic within one Layer-2 VNI is bridged
Traffic between Layer-2 VINs is routed1 Layer-3 VNI per Tenant (VRF) for routing
VNI X’ is used for routed packetsInitial Config – Per Switch
Enable VXLAN and MP-BGP EVPN Control Plane
feature nv overlay
[enables VXLAN]
feature vn-segment-vlan-based
[enables VLAN-based VXLAN]
feature bgp
[enables BGP]
nv overlay evpn
[enables EVPN control plane for VXLAN]Other features that may need to be enabled
feature eigrp
[enables EIGRP if that is the choosen underlay IGP]
feature pim
[enables IP PIM multicast routing in the underlay network]
feature interface-vlan
[enables VLAN SVI interfaces if the VTEP needs to be IP gateway and route for the VXLAN VLAN IP subnet]EVPN Tenant VRF (create VXLAN tenant VRF)
vrf context evpn-tenant-1
[create a VXLAN Tenant VRF]
vni 39000
[Specify the L3 VNI for VXLAN rotuing within the VRF]
rd auto
[define VRF RD (route distinguisher]
address-family ipv4 unicast
route-target import 39000:39000
route-target export 39000:39000
route-target both auto evpn
[define VRF Route Target and import/export policies in address-family ipv4 unicast]Example of a 2nd tenant in a VRF
vrf context evpn-tenant-2
vni 39010
rd auto
address-family ipv4 unicast
route-target import 39010:39010
route-target export 39010:39010
route-target both auto evpnLayer-3 VNI Per Tenant for EVPN Routing – How to Configure Layer-3 VNI per EVPN Tenant VRF Routing Instance
vlan 3900
name l3-vni-vlan-for-tenant-1
vn-segment 39000
[Create the VLAN for the Layer-3 VNI. One Layer-3 VNI per tenant VRF routing instance]
interface Vlan3900
description l3-vni-for-tenant-1-routing
no shutdown
vrf member evpn-tenant-1
[Create the SVI interface for the Layer-3 VNI Put this SVI interface into the tenant VRF context]
vrf context evpn-tenant-1
vni 39000
rd auto
address-family ipv4 unicast
route-target import 39000:39000
route-target export 39000:39000
route-target both auto evpn
[Associate the Layer-3 VNI with the tenant VRF routing instance]EVPN Layer-3 VNI Per Tenant for Routing Instance – Create SVI interface for Layer-2 VNIs for VXLAN routing
interface Vlan200
no shutdown
[Create SVI interface for a Layer-2 VNI. Associate it with the tenant VRF]
vrf member evpn-tenant-1
ip address 20.1.1.1/8
[All VTEPs for this VLAN/VNI should have the same SVI interface IP address as the distributed IP gateway]
fabric forwarding mode anycast-gateway
[Enable distributed anycast gateway for this VLAN/VNI]EVPN Distributed Gateway
fabric forwarding anycast-gateway-mac 0002.0002.0002
[Configure distributed gateway virtual MAC address One virtual MAC per VTEP All VTEPs should have the same virtual MAC address]
interface Vlan210
no shutdown
vrf member evpn-tenant-2
ip address 21.1.1.1/8
[Configure virtual IP address All VTEPs for this VLAN should have the same virtual IP address]
fabric forwarding mode anycast-gateway
[Enable distributed gateway for this VLAN]VXLAN Tunnel Interface Configuration – Configure VXLAN tunnel interface nve1
interface nve1
no shutdown
source-interface loopback0
[specify loopback0 as the source interface]
host-reachability protocol bgp
[Define BGP as the mechanism for host reachability advertisement]
member vni 20000
[Associate tenant VNIs to the tunnel interface nve1
Define the mcast group on a per-VNI basis
Enable arp suppression on a per-VNI basis]
suppress-arp
mcast-group 239.1.1.1
member vni 21000
suppress-arp
mcast-group 239.1.1.2
member vni 39000 associate-vrf
member vni 39010 associate-vrf
[Add Layer-3 VNIs, one per tenant VRF]interface loopback 0
ip address 10.1.1.11/32MP-BGP Configuration on VTEP
router bgp 100
router-id 10.1.1.11
log-neighbor-changes
address-family ipv4 unicast
[Address-family ipv4 unicast for prefix-based routing]
address-family l2vpn evpn
[Address-family l2vpn evpn for evpn host routes]
neighbor 10.1.1.1 remote-as 100
[Define MP-BGP neighbors. Under each neighbor define address-family ipv4 unicast and l2vpn evpn]
update-source loopback0
address-family ipv4 unicast
address-family l2vpn evpn
[Send extended community in l2vpn evpn address-family to distribute EVPN route attributes]
send-community extended
neighbor 10.1.1.2 remote-as 100
update-source loopback0
address-family ipv4 unicast
address-family l2vpn evpn
send-community extendedvrf evpn-tenant-1
[Under address-family ipv4 unicast of each tenant VRF instance, enable advertising EVPN routes]
address-family ipv4 unicast
advertise l2vpn evpn
vrf evpn-tenant-2
address-family ipv4 unicast
advertise l2vpn evpnMP-BGP Configuration on iBGP Route Reflector
router bgp 100
router-id 10.1.1.1
log-neighbor-changes
address-family ipv4 unicast
[Address-family ipv4 unicast for prefix-based routing]
address-family l2vpn evpn
retain route-target all
[Address-family l2vpn evpn for EVPN vxlan host routes Retain route-targets attributes]
template peer vtep-peer
[iBGP RR client peer template]
remote-as 100
update-source loopback0
address-family ipv4 unicast[Send both standard and extended community in address-family ipv4 unicast]
send-community both
route-reflector-client
address-family l2vpn evpn
[Send both standard and extended community in address-family l2vpn evpn]
send-community both
route-reflector-client
neighbor 10.1.1.11
inherit peer vtep-peer
neighbor 10.1.1.12
inherit peer vtep-peer
neighbor 10.1.1.13
inherit peer vtep-peer
neighbor 10.1.1.14
inherit peer vtep-peer
