Tuesday, August 6, 2013

Expand Your VirtualBox VM Disk Size

VirtualBox ver: 4.2.10
Virtual Machine (VM): Windows 7 pro, guest additions installed
Requirements: Ability to run a command prompt and VirtualBox as administrator (the usual problem with accessing VBoxManage).

Scenario:
I have a Win7Pro Virtual Machine (VM) with a 20 GB dynamically allocated storage disk (VDI) which only has about 2 GB of space left. I need to install a program on the VM which requires 2.5 GB of disk space. In short, I cannot install this program unless I increase the disk size.

So, in this post I’m going to increase the same disk (disk 0 or drive C) from 20 GB to 30 GB. This will give me the space I need with room to grow.

Wednesday, May 22, 2013

Batching Find/Replace Using Notepad++

I did this a while ago when I was preparing a lot of config files (.txt) for use on my routers & switches. I needed to find interface numbers and replace them with interfaces that I had available or was using (i.e. s0/0/0 with s0/0, etc.). As I don’t use this feature very often, it is a prime candidate for a blog post.

Monday, May 13, 2013

Centralized Server-Based AAA Authentication (2 of 2)

PART 2:

Now that SRV is set up and running WinRadius we can configure DLS1 & DLS2 to use RADIUS on SRV for login authentication (telnet).

The configurations are straight forward and if you’d like to know more I’d suggest searching Cisco’s site.

Some of the key information we needed to take note of in Part 1 was the following:

Radius IP: 10.1.50.1
Radius Password (a.k.a NAS Secret): WinRadius
Radius auth-port: 2812
Radius acct-port: 2813
Our User: User1
& Password: CCnP

Centralized Server-Based AAA Authentication (1 of 2)

Part 1: Configuring the Radius Server

In this post we want to secure access to our devices and do so with a single authentication server. There are many reasons to do this; for example we can easily manage users and passwords without having to micromanage each device.

clip_image001
The topology is similar to the RSPAN post:

DLS1 VLAN 5 (MGT): 10.1.5.252
DLS2 VLAN 5 (MGT): 10.1.5.253

Thursday, May 2, 2013

RSPAN

For this post we want to focus on capturing and analyzing traffic on DLS2 fa0/18 VLAN 10 that connects to PCC. In essence, we want to monitor the traffic to and from PCC using RSPAN (Remote Switched Port Analyzer). SRV will monitor the traffic using Wireshark. For the end test we will send a ping from PCB to PCC and see the ICMP packets on SRV running Wireshark.

Topology
Topo2

Wireshark – Pimp my Filter

While monitoring an analyzer using RSPAN, I was getting a bunch of packets that I don’t care about. I don’t really want to filter based on just one packet but instead would like to filter out the packets I don’t want. Here you can see STP and HSRP packets being exchanged on the switched port I’m analyzing:
stp and hsrp packets

Wednesday, March 27, 2013

BGP RIB-failure

So, you’re following along in a lab configuring BGP and your “show ip bgp” reveals a RIB-failure…

R1 rib failure

Sunday, February 17, 2013

Squeeze Your Flash…

Can’t get rid of a file in flash?

Copying Multiple Config Files onto a Router

Topology

clip_image001

I have several config files (about 30) for each of 6 devices – that’s 180 configs files that I don’t want to manually move over. Not only would it be exhausting and error prone, I know it would take some time to do. I want to move these to the devices so I can quickly move through some TShoot labs without having to tftp each config file for each lab individually. Doing the later would also require each device to have connectivity to the tftp server at all times – it’s just not functional. So, instead, I’d rather have all the config files for each lab already installed in flash so I can quickly “configure replace” as I move through each lab.

Monday, February 11, 2013

HSRP Troubleshooting

From: GNS3 Vault (1) Thanks to Rene Molenaar for taking the time to post these practice labs on his site.

  • Router New York, New Jersey and LA are configured for HSRP so router Host has a virtual gateway IP address.
  • Fix HSRP so router NewYork, NewJersey and LA are in the same HSRP Group and form a single virtual gateway.
  • Each HSRP router should be able to become the active router and forward IP packets from the host to the ISP.

Sunday, February 10, 2013

DHCP Troubleshooting

DHCP Troubleshooting

From: GNS3 Vault (1) Thanks to Rene Molenaar for taking the time to post these practice labs on his site.

  • Router DHCPClient1 needs to obtain an IP address through DHCPServer on its fa0/0 interface
  • Router DHCPClient2 needs to obtain an IP address through DHCPServer on its fa0/0 interface
  • Only Router DHCPServer can hand out IP’s

Wednesday, February 6, 2013

Installing SDM on a Virtual Machine and 3725 Router (GNS3)

(as a personal reference dedicated to Nanook)

The router configs for this post came from “Installing SDM” (1) YouTube video posted by "Cisco Learning Institute" (CSSIAdotORG)

I'm installing SDM-V25 (Cisco’s Security Device Manager) on a c3725 in GNS3 from a WinServer 2008 VM. I’m sure you can use an XP VM to do this. Note that SDM is EoL (End-of-Life) and is replaced (?) by CCP (Cisco Configuration Professional)… but I believe, at this time, SDM is still in the CCNA Security curriculum (?). See: http://www.cisco.com/en/US/products/sw/secursw/ps5318/index.html

Tuesday, January 22, 2013

Switched network with external DHCP Server (WinServer 2008) Part 1

I wanted to setup an external DHCP server to:

  1. See if I could figure out how to do it
  2. Practice the security part of the Switch exam and
  3. See if I can introduce a rouge DHCP server… the plan is to have PC-2 go rouge.

Part 1 goes over the basic DHCP Server configurations (on WinServer 2008).

Switched Network with an External DHCP Server (WinServer 2008) Part 2

Part 2 continues with the switch configurations along with PC- 1 & 2 getting their IP address from the external server….

Tuesday, January 8, 2013

IP SLA on 2950s

Is not supported!

2950(config)#ip s?
security  source-route  sticky-arp  subnet-zero

Instead, to configure two 2950s as IP SLA responders, configure them as rtr responders. 

No Tclsh? No Problem!

I’m shocked and appalled to have just discovered my 3550’s don’t support scripting with tcl. Actually, the 3560’s don’t either. But, thanks to a posting on CCIE Pursuit Blog a macro can be used to substitute a tcl ping script. The macro needs to be run in global configuration mode so you’ll need to include the ‘do’ statement.