EEM is an amazing thing. It’s flexibility and power can really help us out in times of need, even when we accidentally shut down a port that can kill our connection to a router or switch.
Let’s say I want to make sure that in the event of a port getting shut down, we want to bring it straight back up to minimise downtime and make sure that we can get to the switch.
Continue reading
Who’s actually got the time to find who is wasting precious bandwidth?
We can stop hosts from wasting resources by policing traffic.
This is a fairly strange lab, well strange in that it’s a band-aid solution.
Firstly, here are the list of restrictions and requirements:
Here’s a common scenario:
You have R1 at your site, R5 at your remote site and you need multicast traffic flowing between them.
The routers in the light blue area are to be considered as routers that are out of your control, you cannot enable multicast routing at all.
So how do we do it:
Here’s a fairly simple example of route leaking.
Goals:
There are plenty of sites that go into depth for this topic so much better than I will here, but I’d like to share this tidbit:
Let’s assume that you wish to allow port 22/tcp from the Internet to one of your hosts.
You can simply do the following:
object network SSHServer
host 192.168.1.1
nat (inside,outside) static interface service tcp 22 22
Then just amend your ACL that is applied to the outside interface as normal, such as:
access-list 101 extended permit tcp any any eq 22
I know a lot of people balk at the idea of NAT without ASDM on ASA 8.4, though I find it to be simpler to work with than NAT on older ASA images.
This quick lab is about securing areas in OSPF.
The requirements:
The video will begin with all routers using no authentication, we’ll then add it.
If you want to use a Cisco ASA on a BT Infinity connection, connect the ASA to the OpenReach box then configure the ASA to
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group BTINFINITY
ip address pppoe setroute
!
vpdn group BTINFINITY request dialout pppoe
vpdn group BTINFINITY localname bthomehub@btbroadband.com
vpdn group BTINFINITY ppp authentication chap
vpdn username bthomehub@btbroadband.com password ***** store-local
The password specified as ***** can be changed to anything.
This is something that comes up fairly often, with VPN amendments and if things don’t sort themselves out, sometimes you have to step in.
Continue reading
I get asked this fairly often and it’s always a good question to give to someone who is learning how to subnet.