<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Usual Technology Blog featuring Cisco Networking</title>
	<atom:link href="http://www.usualtech.net/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.usualtech.net</link>
	<description></description>
	<pubDate>Sat, 08 May 2010 13:49:15 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
	<language>en</language>
			<item>
		<title>Control Plane Policing</title>
		<link>http://www.usualtech.net/?p=638</link>
		<comments>http://www.usualtech.net/?p=638#comments</comments>
		<pubDate>Sun, 25 Apr 2010 14:26:01 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[control plane]]></category>

		<category><![CDATA[control-plane policing]]></category>

		<category><![CDATA[icmp]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=638</guid>
		<description><![CDATA[Here is our scenario.
Currently, when pinging any interface on Router2 with 50 packets 100bytes each from Router1, the result is 100%. Change it so the success rate is always 96%.
Assuming FastEthernet Interfaces.
Router1 - Router2
&#8212;Configure control plane policing on Router2
access-list 110 permit icmp host [Router1] host [Router2] echo
class-map ICMP
match access-group 110
policy-map ICMP
class ICMP
police rate 80 pps
control-plane
service-policy [...]]]></description>
			<content:encoded><![CDATA[<p>Here is our scenario.</p>
<p>Currently, when pinging any interface on Router2 with 50 packets 100bytes each from Router1, the result is 100%. Change it so the success rate is always 96%.</p>
<p>Assuming FastEthernet Interfaces.</p>
<p>Router1 - Router2</p>
<p>&#8212;Configure control plane policing on Router2</p>
<p><strong>access-list 110 permit icmp host [Router1] host [Router2] echo</strong></p>
<p><strong>class-map ICMP</strong></p>
<p><strong>match access-group 110</strong></p>
<p><strong>policy-map ICMP</strong></p>
<p><strong>class ICMP</strong></p>
<p><strong>police rate 80 pps</strong></p>
<p><strong>control-plane</strong></p>
<p><strong>service-policy input ICMP</strong></p>
<p>Then from Router1 do a ping:</p>
<p>ping 2.2.2.2 size 100 repeat 50</p>
<p>Sending 50, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:<br />
!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!.!!<br />
Success rate is 96 percent (48/50), round-trip min/avg/max = 1/3/9 ms</p>
<p>Enjoy!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=638</wfw:commentRss>
		</item>
		<item>
		<title>OSPFv3: Cannot see ourself in hello from</title>
		<link>http://www.usualtech.net/?p=634</link>
		<comments>http://www.usualtech.net/?p=634#comments</comments>
		<pubDate>Sun, 18 Apr 2010 18:56:40 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[ipv6]]></category>

		<category><![CDATA[ospfv3]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=634</guid>
		<description><![CDATA[I ran into a weird problem the other day where my IPv6 OSPF adjacency kept flapping every 40 sec(dead timer) and then reestablishing.
Before you go crazy trying to troubleshoot this problem, check this:
1. Check to see if there is a switch in between your IPv6 routers, make sure this switch supports IPv6! if there is [...]]]></description>
			<content:encoded><![CDATA[<p>I ran into a weird problem the other day where my IPv6 OSPF adjacency kept flapping every 40 sec(dead timer) and then reestablishing.</p>
<p>Before you go crazy trying to troubleshoot this problem, check this:</p>
<p>1. Check to see if there is a switch in between your IPv6 routers, make sure this switch supports IPv6! if there is a switch in between, try disabling mld snooping or ipv6 routing all together and see if it fixes the problem.</p>
<p>2. Setup the interfaces as non-broadcast and do neighbor statements to the link-local bypassing the Ipv6 multicast for OSPF.</p>
<p>3. If you changed the IPv6 OSPF router-id. Make sure you remove the OSPF process totally, clearing may not help. Then clear out the neighbor OSPF process so that neighbors accept new Router-id and do not have stale information. Check this by doing # show ipv6 ospf database</p>
<p>This is what I had to do to maintain stability.</p>
<p>Cheers!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=634</wfw:commentRss>
		</item>
		<item>
		<title>Inject default route into IGP based on IP SLA response</title>
		<link>http://www.usualtech.net/?p=630</link>
		<comments>http://www.usualtech.net/?p=630#comments</comments>
		<pubDate>Mon, 01 Mar 2010 23:58:52 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[default route]]></category>

		<category><![CDATA[ip sla]]></category>

		<category><![CDATA[route-map]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=630</guid>
		<description><![CDATA[Here&#8217;s a little trick I learned on how to inject a default route into  the network only if the IP SLA probe comes back with a success  response. IP SLA is a way to check reachability for a given router or  layer 3 device.
Network Topology:
RouterA - RouterB -  RouterC
First lets lets [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a little trick I learned on how to inject a default route into  the network only if the IP SLA probe comes back with a success  response. IP SLA is a way to check reachability for a given router or  layer 3 device.</p>
<p>Network Topology:</p>
<p>RouterA - RouterB -  RouterC</p>
<p>First lets lets create an IP SLA to monitor RouterC  from RouterA.</p>
<p><strong># ip sla monitor 1<br />
# type echo protocol ipIcmpEcho 3.3.3.3<br />
# timeout 2000<br />
# frequency 5<br />
# ip sla monitor schedule 1 life forever start-time now</strong></p>
<p>Lets  setup tracking for this IP SLA</p>
<p><strong># track 1 rtr 1</strong></p>
<p>Now  lets create a dummy route and make sure it is entered into the routing  table if the IP SLA succeeds.</p>
<p><strong># ip route 12.12.12.12 255.255.255.255 null0 track 1</strong></p>
<p>Lets  create a prefix-list that matches this route</p>
<p><strong># ip prefix-list  PR_CHECK_STATIC permit 12.12.12.12/32</strong></p>
<p>Next we create a  Route-map that looks for this static route in the routing table.</p>
<p><strong>#  route-map RM_CHECK_STATIC</strong></p>
<p><strong># match ip address prefix-list  PR_CHECK_STATIC</strong></p>
<p>Lastly we apply it to our IGP Router process  and originate a default route</p>
<p><strong># default-information originate  route-map RM_CHECK_STATIC</strong></p>
<p>Done!</p>
<p>Basically, if the IP SLA  fails, then the route is never entered into the routing tables which  causes the route-map to fail with the prefix lookup and the end result  being that no default route is advertised into the network.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=630</wfw:commentRss>
		</item>
		<item>
		<title>What Layer 3 MPLS is all about&#8230;.</title>
		<link>http://www.usualtech.net/?p=624</link>
		<comments>http://www.usualtech.net/?p=624#comments</comments>
		<pubDate>Mon, 01 Feb 2010 00:16:28 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[mpls]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=624</guid>
		<description><![CDATA[The key to understanding the general idea of how MPLS VPNs work is to focus on the control plane distinctions between PE routers and P routers. Both P and PE routers run LDP and an IGP to support unicast IP routing. However, the IGP advertises routes only for subnets inside the MPLS network, with no [...]]]></description>
			<content:encoded><![CDATA[<p>The key to understanding the general idea of how MPLS VPNs work is to focus on the control plane distinctions between PE routers and P routers. Both P and PE routers run LDP and an IGP to support unicast IP routing. However, the IGP advertises routes only for subnets inside the MPLS network, with no customer routes included. As a result, the P and PE routers can together label switch packets from the ingress PE to the egress PE.</p>
<p>PEs have several other duties as well, all geared toward the issue of learning customer routes and keeping track of which routes belong to which customers. PEs exchange routes with the connected CE routers from various customers, using either EBGP, RIP-2, OSPF, or EIGRP, noting which routes are learned from which customers. To keep track of the possibly overlapping prefixes, PE routers do not put the routes in the normal IP routing table—instead, PEs store those routes in separate per-customer routing tables, called VRFs. Then the PEs use IBGP to exchange these customer routes with other PEs—never advertising the routes to the P routers.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=624</wfw:commentRss>
		</item>
		<item>
		<title>Optimizing OSPF and BGP on EDGE Devices</title>
		<link>http://www.usualtech.net/?p=614</link>
		<comments>http://www.usualtech.net/?p=614#comments</comments>
		<pubDate>Fri, 29 Jan 2010 02:25:59 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[bgp]]></category>

		<category><![CDATA[ospf]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=614</guid>
		<description><![CDATA[
Both ASBR1 and ASBR2 advertise defaults into the network, expecting to have the capability to route to the Internet through BGP-learned routes. In this case, ASBR2 is already up, fully converged. However, if ASBR1 reloads, when it comes back up, OSPF is likely to converge faster than BGP. As a result, ASBR1 will advertise its [...]]]></description>
			<content:encoded><![CDATA[<p align="left"><a href="http://www.usualtech.net/wp-content/uploads/2010/01/ospf-bgp.jpg"><img class="aligncenter size-full wp-image-615" title="ospf-bgp" src="http://www.usualtech.net/wp-content/uploads/2010/01/ospf-bgp.jpg" alt="" width="403" height="269" /></a></p>
<p>Both ASBR1 and ASBR2 advertise defaults into the network, expecting to have the capability to route to the Internet through BGP-learned routes. In this case, ASBR2 is already up, fully converged. However, if ASBR1 reloads, when it comes back up, OSPF is likely to converge faster than BGP. As a result, ASBR1 will advertise its default route, and OSPF routers may send packets to ASBR1, but ASBR1 will end up discarding the packets until BGP converges.</p>
<p>Using the stub router feature on the ASBRs solves the problem by making them advertise infinite metric routes (cost 16,777,215) for any transit routes—either for a configured time period or until BGP convergence is complete. To do so, under router ospf, the ASBRs would use either the <strong>maxmetric router-lsa on-startup announce-time</strong> command or the <strong>max-metric router-lsa on-startup wait-for-bgp</strong> command. With the first version, the actual time period (in seconds) can be set. With the second, OSPF waits until BGP signals that convergence is complete or until 10 minutes pass, whichever comes first.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=614</wfw:commentRss>
		</item>
		<item>
		<title>Setting up frame-relay switching</title>
		<link>http://www.usualtech.net/?p=608</link>
		<comments>http://www.usualtech.net/?p=608#comments</comments>
		<pubDate>Thu, 14 Jan 2010 22:36:44 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[frame-relay switching]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=608</guid>
		<description><![CDATA[Frame-relay switching is simple to configure. In this example we have 2 serial ports and we want to be able to switch dlci&#8217;s between them. Serial port 1/0 connects to customerA using DLCI 100 and Serial 1/1 connects to customerB using DLCI 200. Both customers need reachability to eachother.
Simply enable frame-relay switching on your router.
# frame-relay switching
Then [...]]]></description>
			<content:encoded><![CDATA[<p>Frame-relay switching is simple to configure. In this example we have 2 serial ports and we want to be able to switch dlci&#8217;s between them. Serial port 1/0 connects to customerA using DLCI 100 and Serial 1/1 connects to customerB using DLCI 200. Both customers need reachability to eachother.</p>
<p>Simply enable frame-relay switching on your router.</p>
<p><strong># frame-relay switching</strong></p>
<p>Then enable the ports for frame-relay</p>
<p><strong># int ser1/0</strong></p>
<p><strong># encapsulation frame-relay</strong></p>
<p><strong># int ser1/1</strong></p>
<p><strong># encapsulation frame-relay</strong></p>
<p>We need to specify these ports to be DCE even though they may be DTE interfaces.</p>
<p><strong># int ser1/0</strong></p>
<p><strong># frame-relay intf-type dce</strong></p>
<p><strong># int ser1/1</strong></p>
<p><strong># frame-relay intf-type dce</strong></p>
<p>Now we have two options. We can use the old school route method or the modern connect method.</p>
<p>Old School: under interface</p>
<p><strong># int ser1/0</strong></p>
<p><strong># frame-relay route 100 interface serial1/1 200</strong></p>
<p><strong># int ser1/1</strong></p>
<p><strong># frame-relay route 200 interface serial1/0 100</strong></p>
<p>Modern: Global config</p>
<p><strong># connect custA_custB serial1/0 100 serial1/1 200</strong></p>
<p>As you can see the modern &#8220;connect&#8221; method is much simpler and uses less config. And don&#8217;t forget to put in the clock-rate if they are indeed DCE interfaces.</p>
<p>Cheers.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=608</wfw:commentRss>
		</item>
		<item>
		<title>BGP Regular Expressions</title>
		<link>http://www.usualtech.net/?p=568</link>
		<comments>http://www.usualtech.net/?p=568#comments</comments>
		<pubDate>Wed, 23 Sep 2009 13:10:26 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[bgp]]></category>

		<category><![CDATA[regex]]></category>

		<category><![CDATA[regular expressions]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=568</guid>
		<description><![CDATA[Autonomous system path filtering with regular expressions
String matching—A string of characters in the regular expression matches any equivalent substring in the autonomous system path; 29 has three matches in &#124; 210 291 1296 29 &#124;, for example.
String matching alternatives—The pipe symbol (&#124;) means “or.”
String matching ranges and wildcards—Brackets ([ ]) can be used for ranges, [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Autonomous system path filtering with regular expressions</strong></p>
<p><strong>String matching</strong>—A string of characters in the regular expression matches any equivalent substring in the autonomous system path; 29 has three matches in | 210 291 1296 29 |, for example.</p>
<p><strong>String matching alternatives</strong>—The pipe symbol (|) means “or.”</p>
<p><strong>String matching ranges and wildcards</strong>—Brackets ([ ]) can be used for ranges, and the period (.) can match any single character.</p>
<p><strong>String matching delimiters</strong>—The caret (^) matches the beginning of string, the dollar sign ($) matches the end of the string, and an underscore (_) matches any delimiters.</p>
<p><strong>String matching grouping</strong>—Parentheses can group smaller expressions into larger expressions.</p>
<p><strong>String matching special characters</strong>—You can use the backslash (\) to remove the special meaning of the character that follows.</p>
<p><strong>String matching repeating operators</strong>—An asterisk (*) means the expression preceding repeats zero or more times, a question mark (?) means the expression preceding repeats zero or one time, and a plus sign (+) means the expression preceding repeats one or more times.</p>
<p><strong>_200_ </strong>- All routes going through autonomous system 200<br />
<strong>^200$</strong> - Directly connected to autonomous system 200<br />
<strong>_200$ </strong>- Originated in autonomous system 200<br />
<strong>^200_. </strong>- Networks behind autonomous system 200<br />
<strong>^[0-9]+$</strong> - Autonomous system paths one autonomous system long<br />
<strong>^([0-9]+)(_\1)*$</strong> - Networks originating in the neighbor autonomous system<br />
<strong>^$</strong> - Networks originated in local autonomous system<br />
<strong>.*</strong> - Matches everything</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=568</wfw:commentRss>
		</item>
		<item>
		<title>Classifying Discard Eligible Traffic on Frame-Relay Interfaces</title>
		<link>http://www.usualtech.net/?p=520</link>
		<comments>http://www.usualtech.net/?p=520#comments</comments>
		<pubDate>Fri, 18 Sep 2009 00:30:57 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Uncategorized]]></category>

		<category><![CDATA[de bit]]></category>

		<category><![CDATA[frame-relay]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=520</guid>
		<description><![CDATA[Here is a quick way to set the DE (Discard Eligible) bit on specific traffic exiting a frame-relay interface.
We want to set the DE on all IP Precedence routine and priority traffic exiting serial0/0/0 on DLCI 202
&#8212;Match the traffic in an ACL
# access-list 101 permit ip any any precedence 0
# access-list 101 permit ip any [...]]]></description>
			<content:encoded><![CDATA[<p>Here is a quick way to set the DE (Discard Eligible) bit on specific traffic exiting a frame-relay interface.</p>
<p>We want to set the DE on all IP Precedence routine and priority traffic exiting serial0/0/0 on DLCI 202</p>
<p>&#8212;Match the traffic in an ACL</p>
<p><strong># access-list 101 permit ip any any precedence 0</strong></p>
<p><strong># access-list 101 permit ip any any precedence 1</strong></p>
<p>&#8212;Create a Discard Eligible list</p>
<p><strong># frame-relay de-list 1 protocol ip list 101</strong></p>
<p>&#8212;Apply this list to the Frame-Relay interface on DLCI 200</p>
<p><strong># int ser0/0/0</strong></p>
<p><strong># frame-relay de-group 1 202</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=520</wfw:commentRss>
		</item>
		<item>
		<title>Three easy ways to influence OSPF routing decisions</title>
		<link>http://www.usualtech.net/?p=487</link>
		<comments>http://www.usualtech.net/?p=487#comments</comments>
		<pubDate>Sat, 12 Sep 2009 21:29:43 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Uncategorized]]></category>

		<category><![CDATA[ospf filtering]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=487</guid>
		<description><![CDATA[Here are three ways to tell an OSPF router which path it should take to reach a destination.
1. Use the bandwidth command to change the metric for an interface.
2. Use the cost command to change the metric for an interface.
3. Filter out the route from an advertising router. First create an ACL to match the [...]]]></description>
			<content:encoded><![CDATA[<p>Here are three ways to tell an OSPF router which path it should take to reach a destination.</p>
<p>1. Use the <strong>bandwidth</strong> command to change the metric for an interface.</p>
<p>2. Use the <strong>cost</strong> command to change the metric for an interface.</p>
<p>3. <strong>Filter out</strong> the route from an advertising router. First create an ACL to match the advertising neighbor. Secondly, create an ACL to match the route in question. Thirdly, match the &#8220;ip next-hop&#8221; ACL of the neighbor and match the ACL of the route. Lastly, apply this route-map with a distribute-list inbound.</p>
<p>Easy huh?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=487</wfw:commentRss>
		</item>
		<item>
		<title>Sequence Numbers for Syslog messages</title>
		<link>http://www.usualtech.net/?p=468</link>
		<comments>http://www.usualtech.net/?p=468#comments</comments>
		<pubDate>Wed, 09 Sep 2009 00:45:26 +0000</pubDate>
		<dc:creator>ralph</dc:creator>
		
		<category><![CDATA[Cisco Networking]]></category>

		<category><![CDATA[syslog sequence numbers]]></category>

		<guid isPermaLink="false">http://www.usualtech.net/?p=468</guid>
		<description><![CDATA[Yes there is such a thing and its called sequence numbers. Anytime you want to add sequence numbers to your syslog files you can simply enable:
# service sequence-numbers
This way you can more easily keep track of when and where events have occurred on your Cisco routers &#38; switches. This is a very useful command for [...]]]></description>
			<content:encoded><![CDATA[<p>Yes there is such a thing and its called sequence numbers. Anytime you want to add sequence numbers to your syslog files you can simply enable:</p>
<p><strong># service sequence-numbers</strong></p>
<p>This way you can more easily keep track of when and where events have occurred on your Cisco routers &amp; switches. This is a very useful command for logging to syslog server. Its a must use!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.usualtech.net/?feed=rss2&amp;p=468</wfw:commentRss>
		</item>
	</channel>
</rss>
