Monday, September 28, 2015

How to configure EIGRP and Standard Access List (ACL) on Cisco Router


Junpier block traffic
The first term is set to match icmp-echo-request traffic destine for the IP address of 192.168.10.1/24.
The second term is to pass (or accept) all other traffic.
Without the second term all traffic not matching the first term would be dropped.
Lastly the filter is applied to an interface on the inbound direction.

R1#set firewall filter LAN-inbound term BLOCK from destination-address 192.168.10.1/24
R1#set firewall filter LAN-inbound term BLOCK from icmp-type echo-request
R1#set firewall filter LAN-inbound term BLOCK then log
R1#set firewall filter LAN-inbound term BLOCK then discard
R1#set firewall filter LAN-inbound term accept-all-else then accept
R1#set interfaces em1 family inet filter input LAN-inbound


How to configure OSPFv2 on Cisco Router




R1 connect to R2 via ethernet

R1#set interface em1 unit 0 family inet address 1.1.1.1/24
R1#set interface lo1 unit 0 family inet address 11.11.11.11/24
R1#set protocol ospf area 0.0.0.0 interface em1
R1#set protocol ospf area 0.0.0.0 interface lo1

R2#set interface em1 unit 0 family inet address 2.2.2.2/24
R2#set interface lo2 unit 0 family inet address 22.22.22.22/24
R2#set protocol ospf area 0.0.0.0 interface em1
R2#set protocol ospf area 0.0.0.0 interface lo2

show configuration
show ospf neighbor
show protocols ospf

How to configure inter-VLAN static route and RIPv2


Juniper inter-vlan
set interfaces em1 vlan-tagging
set interfaces em1 unit 10 vlan-id 10 family inet address 192.168.10.1/24
set interfaces em1 unit 20 vlan-id 20 family inet address 192.168.20.1/24


Monday, June 2, 2014

Friday, July 22, 2011

Ipv6 general -prefix

ipv6 general-prefix command is a great help when its come to configuration of IPv6 address. As we all know that when IPv6 address are 128 bits which is lengthy. When it comes to configuration of interfaces, we need to key in a long strings of hexadecimal digits. The command will make the configuration less tedious.


Take for example, ISP assigned you an IPv6 address 2003:abcd:1234::/48. Most of your interfaces on the router will most probabaly be configured within this prefix.


ipv6 general-prefix ISPIssued 2003:345:ABCD::/48


So if we want to assigned 2003:345:ABCD::1/64 to interface fa0/1


We just simply need to


int fa0/1
ipv6 address ISPIssued ::1/64


That's it. We don't have to worry that we will mistype the wrong prefix for the IPv6 addresses for all our interfaces. Noted that an interface can have more than one IPv6 addresses, so any mistype will need to be manually removed by the negate command.