#cisco networking

Back to certification study — CCNA this time. I need to re-occupy my mind with some actual technical things and get some relief from management/leadership stuff.

Kvroii>enable

Kvroii#conf t

Kvroii(config)# banner motd #

I went as Cisco Packet Tracer for Halloween #

Uploading CCIE lab configurations & using config replace to save time

This post will contain two major parts; Getting configurations onto Cisco IOS switches via TFTP, and utilizing config replace to replace configurations quickly for different labs. The first part, loading configuration files via TFTP, is really only needed on devices that don’t have USB ports such as the 3650 platform.

The first step is to archive all of your configuration files for each…

DVTI LAB Topology

Today I have configured a practice DVTI setup. The routing used was OSPF, there are static routes on the PC1 and PC2 devices. Remember to enable redistribution for static.

See below configuration for R1 the server and R2 the Remote client as per above Topology.

R1(config)#crypto isakmp policy 1 R1(config-isakmp)#authentication pre-share R1(config-isakmp)#encryption 3des R1(config-isakmp)#hash sh R1(config-isakmp)#group 2 R1(config-isakmp)#exit R1(config)# R1(config)#crypto isakmp client configuration group admin R1(config-isakmp-group)#key admin R1(config-isakmp-group)#pool admin R1(config-isakmp-group)#acl stacl R1(config-isakmp-group)#exit R1(config)# R1(config)#ip local pool admin 192.168.100.100 192.168.100.254 R1(config)# R1(config)#ip access-list extended stacl R1(config-ext-nacl)#permit ip 192.168.101.0 0.0.0.255 any R1(config-ext-nacl)#exit R1(config)# R1(config)#crypto isakmp profile isakmp_pro R1(conf-isa-prof)#match identity group admin R1(conf-isa-prof)#client configuration address respond R1(conf-isa-prof)#client authentication list default R1(conf-isa-prof)#isakmp authorization list default R1(conf-isa-prof)#virtual-template 1 R1(conf-isa-prof)#exit R1(config)# R1(config)#crypto ipsec transform-set ez esp-3des esp-sha-hmac R1(cfg-crypto-trans)#mode tunnel R1(cfg-crypto-trans)#exit R1(config)# R1(config)#crypto ipsec profile cisco R1(ipsec-profile)#set transform-set ez R1(ipsec-profile)#set isakmp-profile isakmp_pro R1(ipsec-profile)#exit R1(config)#interface virtual-template 1 type tunnel R1(config-if)#ip unnumbered serial 0/0 R1(config-if)#tunnel source serial 0/0 R1(config-if)#tunnel mode ipsec ipv4 R1(config-if)#tunnel protection ipsec profile cisco %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON R1(config-if)#exit R1(config)#aaa new-model R1(config)#aaa authentication login default local R1(config)#aaa authorization network default local R1(config)#username cisco privilege 15 secret cisco

R2(config)# R2(config)#crypto ipsec client ezvpn ccc

R2(config-crypto-ezvpn)#username cisco password cisco R2(config-crypto-ezvpn)#mode client R2(config-crypto-ezvpn)#peer 101.1.1.100 R2(config-crypto-ezvpn)#group admin key admin R2(config-crypto-ezvpn)#connect auto R2(config-crypto-ezvpn)#int f0/0 R2(config-if)#crypto ipsec client ezvpn ccc inside R2(config-if)#int s0/1 R2(config-if)#crypto ipsec client ezvpn ccc outside R2(config-if)# *Mar  1 00:36:23.671: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON

A Request to enter in the command (crypto ipsec client ezvpn xauth) will be generated. You will then be prompted for username and password this will be cisco and cisco as per my configuration above.

The configuration will now be completed.

  My biggest fear is not to fail at college but to fail the people I know. I told everyone I would give college another try and that I would try my hardest this time and I have so far. No one believes that I am because of how badly I’m doing but they don’t understand and never will. But that’s okay. I’m not going for them. I’m going for me. That being said, I know I can get a job in web development or anything computers without a degree. I just went back to school to say “yes sir, I have a degree in...” but it’s looking to be another failed attempt.

  So I’m becoming less worried about failing but more worried about failing others. I get that that’s unhealthy and I should only be going for me and that I shouldn’t have such shitty people in my life but I do. I have no choice but to keep going and if it gets bad enough, I WILL drop out and focus 100% on web development. If I have to break up with my girlfriend and leave my family for a new home to drop out and go after a web development job, I will. I love them but if none of them love me enough to acknowledge that I went back for a second try and that I wouldn’t go through all the trouble I went through just to get signed back up, just to not try, I’ll leave and find people who are actually good for me. My girlfriend is one of those people who believe that you can’t have a good life with good pay without going to college but she also doesn’t know much about web development. In the end, I’ll do what I want with my life and if the people in my life don’t like it, they can simply leave.

I just published a quick read on VLAN User distribution with 802.1X and ISE. Go check it out!

In this blog post, I will be going over 802.1x VLAN User Distribution (sometimes referred to as “VLAN Groups”) in Cisco IOS and a use case scenario that involves Cisco ISE (Identity Services Engine).

First, some background around VLAN Groups. Based on my research it seems there are two major types of VLAN Groups: The Firewall Service Module (FWSM) on the 6500 and on Cisco IOS & IOS XE Switches.…