Archive for the 'Networking' category

Inter-AS MPLS and MTU

Djerk | 2 Jun 2009 14:18

Type-2 interconnects are fun, but mtu issues are not. When faced with migrating subnets  from one MPLS cloud to another -different AS numbers you see- the three common inter-AS types were taken off the shelf and dusted off…

Show me more… »

DNS on IOS

Djerk | 12 Apr 2008 10:19

I’ll leave the debate to others about running services on routers. As usual ymmv and all that, though besides the obvious objections I think it’s quite cool of my little c877 to proxy DNS and serve what it has locally. Imho, my home DNS config is not heavy enough to warrant rigging up DNS on my Samba server.

My first google tonight led me to an article on the excellent ios hints and tricks site (ioshints.info). Though this is for a full public DNS server it was a little overkill for me, please read this article as well if you do plan to go that route.

My goal was to have my DSL router serve local IP’s for a few public and local domain names. For example this allows me to use sip.djerk.nl as my proxy address in my soft-phone both at home and away.

The following code is what I ended up with.

Show me more… »

No ezvpn please!

Djerk | 31 Oct 2007 23:44

Had a nice piece of homework cut out with getting site-to-site ipsec working between a relatives Netgear and my Cisco 877. UniverCD once again provided to be crucial in my understanding and working out what should go where. Thanks to Ilya for reminding me to browse that site rather than just search it.

Show me more… »

Debian Lenny snmpd IP binding

Djerk | 12 Oct 2007 15:09

Yet another non CCIE post ;)

It appears that Debian Lenny by default only binds to 127.0.0.1 (localhost). I had to add the following two lines to snmpd.conf to get snmpd to listen to external requests.

interface eth0
agentaddress 217.195.248.251:161

I eventually found the solution at debianhelp.org.

No IP unreachables (and Cacti)

Djerk | 11 Oct 2007 15:49

*Sigh* Took me an hour or two to figure this one out. Cacti now does a ping before actually polling a device for stats. I’m running a small cacti site which had been neglected for a long time. After updating cacti and cleaning up some mess I was confused why one router did get polled and the other’s graphs remained a dumb “nan”.

I debugged and pinged, even installed hping3 to do UDP pings. I don’t want to run cacti as root, especially not on a vhost. So the UDP ping had to work. The pings arrived but still no replies.

Getting sidetracked I noticed that the one router that did work was being hit by SSH login attempts and it’s cpu was spiking. An ACL took care of the break-in attempts but then I noticed that directed broadcasts were made to my server’s segment. So I nailed that down plus proxy-arps when I noticed that the router which had worked before now was causing errors in Cacti as well.

Tracking back I noticed that the UDP ping ‘replies’ were unreachables rather than ICMP replies (doh, how obvious!) . I enabled IP unreachables on both routers again and I was done. It’s amazing how blind one can be at times to the blatantly obvious…

Static routes since 12.3

Djerk | 31 Aug 2007 10:56

Since 12.3 (T?), static routes pointing to interfaces will be advertised by RIP and EIGRP as these static subnets are assumed to be part of the interfaces on which RIP and/or EIGRP is activated.

ip route prefix mask {ip-address | interface-type interface-number [ip-address]} [dhcp] [distance] [name next-hop-name] [permanent | track number] [tag tag]

Show me more… »

Networkers EMEA 2008

Djerk | 14 Jul 2007 21:46

Last weeks news: Networkers EMEA 2008 will be in Barcelona. For the diary: Monday Jan 21st – Thursday 24th.

I’m counting on being there, though untill my manager gives approval and it’s been booked I will not know fur sure… :)

Cisco EMEA Networkers2007

Djerk | 7 Dec 2006 15:24

Just a quick note to say that I’m going to Networkers2007.

If you’re going as well and want to meet me then drop me a line, with a suggestion of when you’re free. I don’t think I’ll be able to intentionally run into anyone there, my schedule is way too busy for that.

Suggestions for surviving Networkers are welcome as I’ve never been before.

Testing test equipment

Djerk | 8 Jun 2006 09:02

Got some pictures of Ixia and Spirent equipment in the lab, so check out the gallery if you’re interested.

A remote xmodem IOS upgrade…

Djerk | 29 Mar 2006 01:30

Right, it’s loading and due to the baud rate of 115200 currently at 13% so I’ve got some time to write this little “note to self”. If anyone else finds this useful then I hope you’re not working away like me at 0:48 in the night.

Show me more… »

Unused protocol features (ip options)

Djerk | 18 Feb 2006 21:34

Anyone ever heard of ‘Strict Source Routing’ or ‘Loose Source Routing’?

Well it’s in IPv4, CLNP and IPv6, but no-one seems to use it. Please leave a comment if you think I’m wrong! It could be ever so usefull for network monitoring and reporting if one could specify the route a packet should take. One could test, monitor or report on links / paths which one can’t do now due to SFP (Shortest Path First) routing, if only… Sigh

Hint: http://www.iana.org/assignments/ip-parameters

Show me more… »

200 bald men fighting over 6 combs

Djerk | 17 Feb 2006 17:11

I’m glad Radia Perlman manages to scatter some funny anecdotes into her book “Interconnections”, this one is about the 6 TOS bits in the IP header (page 244):

Some people have affectionately referred to the -IETF Differentiated Services- working group as “200 bald men fighting over 6 combs”.

It’s funny to see the history as she’s describing the future in her book which shows how fast it’s dated. She wrote “Interconnections” in 2000 but it’s still a great ook explaining fundamental issues in a comprehensive manner, my print is a 7th edition from March 2005. Definetely a book to use as network protocol reference due to the many explanations why things are the way they are.

Priority

Djerk | 9 Feb 2006 21:10

I have decided to add a new category: “Networking quotes”. Here’s the first one, ‘Interconnections, 2nd edition’ page 181:

Priority is an attempt to implement the principles of jealousy and envy in computer networks.
- Tony Lauck

Network monitoring by sound?

Djerk | 20:50

http://it.slashdot.org/article.pl?sid=06/02/09/1325225&from=rss

Sheridan College Institute of Technology and Advanced Learning has created software that translates network and server activity into music.