Deep Tech

Before we start, lets once again make sure we fully understand what Bridge Domain is. The bridge domain can be compared to a giant distributed switch.

Read

December 2015

Cloud Sovereignty & Platforms OpenStackNetworkingCiscoVMwareVPCDeep Tech December 7, 2015

Can OpenStack Neutron really control the Physical Network?

This is a question I´ve been hearing a lot when we present the OpenStack to a new client, mostly from the guys who control the Networking infrastructure.

Read

December 2013

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech December 7, 2013

ADVANCED Access Lists (ACL) Configuration

It's enough to configure the extended ACL, and hit a question mark when you want to define a PORT, just to realize that there is an entire world of ACL configuration options that we never knew about.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech December 6, 2013

IP SLA - Monitor the Network Performance

Probably most typical usage of IP SLA is to measure the and UDP Jitter and Echo, to make sure that the path is good enough to send the sensitive VoIP traffic.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech December 1, 2013

The command for checking the current timers is also unintuitive, cause you need to add "details" to the end: sh ipv6 eigrp interfaces detail | i Hello Hello-interval is 10, Hold-time is 40 Hello-interval is 60,...

Read

November 2013

Cloud Sovereignty & Platforms CiscoNetworkingDeep Tech November 11, 2013

Configuring the DHCP Server

Using the DHCP Pool configured on a IOS device is somewhat obsolete, but in cases of smaller companies where this solution is inevitable (or in a case such as mine, preparations for a CCIE exam) - you should know how...

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech November 7, 2013

Scalability for Stateful NAT (SNAT)

Scalability for Stateful NAT feature allows Stateful Network Address Translation (SNAT) to control the Hot Standby Router Protocol (HSRP) state change until the NAT information is completely exchanged.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech November 7, 2013

Static NAT redundancy with HSRP

This approach is used when you want to configure NAT and integrate it with HSRP (enable the same NAT on all the routers that form the HSRP group).

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech November 6, 2013

PAR - When you need to implement traffic redirections using NAT

Make sure you understand how this command works, because it´s quite a complicated principle because it works a bit "upside down".

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech November 5, 2013

PAT (NAT Overload)

Port Address Translation (PAT) means using PORTS in order to NAT various Inside Local IPs to 1 Inside Global IP.

Read

October 2013

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech October 29, 2013

NAT - Dynamic NAT

Do not forget to configure the "ip nat inside | outside" on the appropriate interfaces!

Read

September 2013

Cloud Sovereignty & Platforms CiscoNetworkingDeep Tech September 5, 2013

AAA Authentication

Cisco Docs: Securing User Services ConfigurationAuthentication Authorization and Accounting http://www.cisco.com/en/US/docs/ios-xml/ios/sec\usr\aaa/configuration/12-4t/sec-cfg-authentifcn.html

Read

July 2013

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech July 26, 2013

uRPF - Unicast Reverse Path Forwarding

Cisco Docs: Cisco Docs: Secure DATA PLANESecurity Configuration Guide: Unicast Reverse Path Forwarding http://www.cisco.com/en/US/docs/ios-xml/ios/sec\data\urpf/configuration/12-4t/sec-data-urpf-12-4t-book.html

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech July 17, 2013

Zone Based Firewall

Cisco Docs: Secure DATA PLANESecurity Configuration Guide:Zone-Based Policy Firewall http://www.cisco.com/en/US/docs/ios-xml/ios/sec\data\zbf/configuration/12-4t/sec-data-zbf-12-4t-book.html

Read

May 2013

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech May 5, 2013

BGP Backdoor Route

When you need to prefer LESS the eBGP route - you need a way to tune it, because not many routing protocols "beat" the eBGPs Administrative Distance (20).

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech May 5, 2013

BGP peer-group

It's a simple concept, just a group of neighbors we want to configure with the same group of parameters.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech May 1, 2013

GRE Tunnel used as a OSPF Virtual-Link

GRE - Generic Routing Encapsulation, is a method of tunneling data from one router to another.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech May 1, 2013

OSPF Advanced Virtual Link configuration: Multiple Virtual-Link

At this level I suppose you know how to configure the Virtual Link, and what is it's purpose.

Read

January 2013

Cloud Sovereignty & Platforms CiscoNetworkingDeep Tech January 17, 2013

Cisco WAAS Part II: Configuration

Practical notes on cisco waas part ii: configuration — Cisco, Networking configuration, design, and troubleshooting guidance.

Read

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech January 11, 2013

QoS Part I: Classification and Marking

Quality of Service (QoS) is the ability to provide different levels of performance for individual applications and services that run over the networks.

Read

September 2012

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech September 17, 2012

VTP - Should we use it?

VLAN Trunking Protocol: most commands can be configured in PRIVILEGED, CONFIGURE or DATABASE mode

Read

July 2012

Cloud Sovereignty & Platforms NetworkingCiscoDeep Tech July 23, 2012

Dot1q Tunneling: 802.1q, QinQ Tunneling

\Take SPECIAL CARE about the MTU SIZE on Swithches (might need to increase to 1504 due to the ADDED 4 BYTES IN THE TUNNEL)

Read