Posts

Showing posts from 2010

Getting started with Cisco ASA

Image
Recently my Company gave a Cisco ASA box to play around.. so, let's get started I'm using Cisco ASA 5510 console to it, i would like to to start from zero.. so i'll reset it to default setting vpn-lab# conf t vpn-lab(config)# conf factory-default Based on the management IP address and mask, the DHCP address pool size is reduced to 253 from the platform limit 256 ...... ciscoasa(config)#wri mem ciscoasa(config)#reload this will reset to default-factory setting, remember to save to startup config and reload in the mean time, go to cisco.com to download lastest ASA and ASDM software here i downloaded ASA version 8.2(3) and make sure to download compatible ASDM software (you can read from the description), and save it to your TFTP server's folder let's upgrade it now, i have TFTP server at address 172.16.1.1 ciscoasa# copy tftp flash Address or name of remote host []? 10.239.131.3 Source filename []? asa823-k8.bin Destination filename [asa823-k8...

EIGRP route summarization, default gateway, variance and passive-interface

Image
this lab will cover route summarization, default gateway using network-default command, variance and EIGRP passive-interface concept R1 interface Loopback11  ip address 172.16.1.1 255.255.255.0 ! interface Loopback12  ip address 172.16.2.1 255.255.255.0 ! interface Loopback13  ip address 172.16.3.1 255.255.255.0 ! interface Loopback14  ip address 172.16.4.1 255.255.255.0 ! interface Loopback15  ip address 172.16.5.1 255.255.255.0 interface Serial0/0  ip address 30.30.12.1 255.255.255.252  clock rate 56000 interface Serial0/1  ip address 30.30.13.1 255.255.255.252  clock rate 56000 router eigrp 1  network 30.0.0.0  network 172.16.0.0  no auto-summary R2 interface FastEthernet0/0  ip address 30.30.23.1 255.255.255.0  duplex auto  speed auto ! interface Serial0/0  ip address 30.30.12.2 255.255.255.252  clock rate 2000000 router eigrp 1  network 30.0.0.0  no auto-summary R...

EIGRP filtering route - GNS3

Image
R1 router eigrp 1  network 10.0.0.0  network 30.0.0.0  no auto-summary R2 router eigrp 1  network 30.30.12.2 0.0.0.0  network 172.16.0.0  no auto-summary R3 router eigrp 1  network 30.30.13.2 0.0.0.0  network 192.168.0.0 0.0.255.255  no auto-summary *we didn't advertise direct link between R2 and R3, just let it be that way for now make sure show ip route on R1, R2 and R3 can show all the network advertised by all the 3 routers. Distribute List + Access list we'll start with filtering certain route that EIGRP receive on particular interface  let's stop 192.168.1.0 - 192.168.5.0 from being learned on Serial 0/1 on R1, R2 also should not see this since R2 learn it via R1 show current IP route R1#sh ip rou ... D    192.168.4.0/24 [90/2297856] via 30.30.13.2, 00:12:16, Serial0/1 D    192.168.5.0/24 [90/2297856] via 30.30.13.2, 00:12:16, Serial0/1 .. D    192.168.1.0/24 [90/2297856] via 30.30.13.2, ...

EIGRP metric

Image
prepare the config as below  R1 interface Loopback0  ip address 10.10.10.1 255.255.255.255 ! interface Loopback1  ip address 10.239.1.1 255.255.255.0 ! interface Loopback2  ip address 10.239.2.1 255.255.255.0 ! interface Loopback3  ip address 10.239.3.1 255.255.255.0 ! interface Loopback4  ip address 10.239.4.1 255.255.255.0 ! interface Loopback5  ip address 10.239.5.1 255.255.255.0 ! interface Loopback6  ip address 10.239.6.1 255.255.255.0 ! interface Loopback7  ip address 10.239.7.1 255.255.255.0 ! interface Loopback8  ip address 10.239.8.1 255.255.255.0 ! interface Loopback9  ip address 10.239.9.1 255.255.255.0 ! interface Serial0/0  bandwidth 128  ip address 10.1.12.1 255.255.255.252  clock rate 128000 ! interface Serial0/1  bandwidth 128  ip address 10.1.13.1 255.255.255.252  clock rate 128000 ! router eigrp 1  network 10.1.0.0 0.0.255.255  network 10.10.10.1 0.0.0.0  netwo...