Jeremy and VMWare ESX Server...Love at First Site!    |    Posted to Off-Topic

We take a break from our regularly scheduled Cisco programming to bring you this 'killer free-product' alert. I've now added VMWare ESX server (free) to my list of "programs that will change your life." I believe we actually have Microsoft to thank for making this product free since they're now trying to compete with VMWare by including Hypervising with MS Server 2008.

 If you haven't seen it, VMWare ESX allows you to do essentially the same thing VMWare Server does, but without running on a client operating system (well, technically there's a 32MB VMWare operating system it runs now). I know, it doesn't sound that cool, but I can't begin to describe the performance increase for all my virutal machines. About 3 weeks ago, I converted my Dell Poweredge 2900 server to this product...Suddenly, I got a raise, my dog stopped barking, my neighbor brought me chocolate chip cookies, and I found an extra 5 bucks I had forgotten in my shorts pocket months ago (I love it when that happens).

Seriosuly...VMWare ESX server cannot be explained; you must experience it for yourself.

 

Posted by JC at 7:52 PM | Comments (1) | TrackBack (0)

IOS 12.4(6) Turns Your Router Into an ASA    |    Posted to Direct from Cisco

Okay...maybe it doesn't do EVERYTHING the ASA does...but it's definitely a step forward in the Firewall Feature Set of the IOS. Routers running this version of code now support zone-based policies, which really helps with multi-interface restrictions (rather than just one outside & one inside interface with individual access list applications). Likewise, it now supports application inspection to catch those scandalous peer-to-peer programs.

Check out the whole scoop here.

Much thanks to Joshua Walton for sending me an email on this and slightly brightening the most dismal CiscoWorks installation day I've ever had. Oh look - CD #12 is done...on to 13.

Posted by JC at 3:11 PM | Comments (0) | TrackBack (0)

CiscoWorks LMS...Shoot me now.    |    Posted to Off-Topic

I am currently sitting in a sub-zero IT room on my 6th hour and 12th CD of a CiscoWorks Lan Management Solution (LMS) 2.6 installation/upgrade. This is the most pathetic, waste-of-time product I've ever worked with...and I haven't even finished the installation.

I will never agree to do a CiscoWorks LMS installation again.

Ever.

At least my fingers are numb so I can chew on them from boredom without feeling anything.

Posted by JC at 3:04 PM | Comments (5) | TrackBack (0)

CCIE Wireless?    |    Posted to Direct from Cisco

I just received a "general announcement" in my email about registering for the BETA CCIE Wireless written exam. Wow - yet another CCIE specialty arrives.

If you'd like to see the CCIE Wireless Written Exam blueprint, click here.

Posted by JC at 4:23 PM | Comments (5) | TrackBack (0)

GNS3 - The Full Story    |    Posted to GNS3 Related

It looks like someone has decided to write some awesome documentation / tutorials for GNS3. Answers plenty of the questions I had when I first got into it (installation, optimization, etc...).

Check it out here.

Posted by JC at 4:03 PM | Comments (5) | TrackBack (0)

Solarwinds Enters the NetFlow Fray...for Free?    |    Posted to GUI Utilities

Netflow has always been a topic of interest to me. It allows Cisco devices to track exactly how your network bandwidth is used. For example, using NetFlow allows me to see the applications (ports) using my Internet connection, how much bandwidth they are consuming, the source and destination IP addresses that are consuming the most traffic, and so on. Handy information!

Anyhow, Solarwinds has just released a new (free) tool that allows you to chart and graph all this information. This is definitely a plug for their enterprise Orion software which lets you manage bunches of devices...but hey, a free tool is still a free tool :).

Click here to check it out.

Posted by JC at 8:26 AM | Comments (5) | TrackBack (0)

Dynamic Failover with IP SLA    |    Posted to Routing

I just stumbled across this killer post on Shawn's Blog that describes how to set up IP SLA to allow a static route to failover if pings to a specified internet host should fail. This is really useful if you have two ISPs (and thus, two default routes) where the router cannot detect a link failure. This is really common if you have a cable/DSL modem or some type of wireless connectivity. Here's the basic config, taken directly from Shawn's Blog:

ip sla 1 < The number 1 here is arbitrary, used only to identify this sla. It is otherwise knows as the operation number>

icmp-echo 4.2.2.2 < 4.2.2.2 is a DNS server that responds to pings out on the internet>

timeout 500 < This is how long to wait for a response from the ping>

frequency 3 < This is the repeat rate for the SLA>

ip sla schedule 1 start-time now life forever < This command says "start SLA 1 now and keep it running forever>

track 1 rtr 1 reachability < This comand creates the track object "1" and monitors the SLA 1>

now for the routing, we need to change the default route and associate it with the tracker

no ip route 0.0.0.0 0.0.0.0 1.1.1.1

and then put it back with the tracking

ip route 0.0.0.0 0.0.0.0 1.1.1.1 track 1

Then we need to add our secondary route

ip route 0.0.0.0 0.0.0.0 1.1.1.2 10

Now when the ping to 4.2.2.2 fails the primary route is removed and the secondary route with the higher metric becomes the default. The route will be reinstated when the connectivity is restored.

With the 12.4 and higher releases the commands have changed slightly but the "?" is your friend. If I receive requests for the syntax I will post it as well, but it is pretty easy to convert.

Here is the reference to the Cisco IP SLA documentation

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080441845.html

Posted by JC at 1:36 PM | Comments (7) | TrackBack (0)

Best Cisco Laptop?    |    Posted to Off-Topic

I've been a "quasi-apple fan" for years...When they came out with the MacBook Pro, I bought the 17" giganto-screen model and have been using it to configure Cisco devices ever since. Recently, I was at a client site...he pulled out an old Dell X200 12" laptop to configure a Cisco router. I suddenly found myself being jealous over a thin laptop (2.9 pounds) that cost 1/10th what my behemoth MacBook did. I'm thinking I'll hit Ebay to pick one of these up for a couple hundred bucks (they're older), but before I do...does anyone know of a better super-thin, small, lightweight laptop to use for base Cisco configs? Nothing fancy, just needs to run a terminal window.

I thought this might start a good thread for "Cool ultra-portable Cisco-configuration laptops" everyone (including me) can use.

UPDATE: I've settled on the Dell D400 since it has a built-in serial port.

Posted by JC at 10:33 AM | Comments (25) | TrackBack (0)

Automatic Err-Disable Recovery    |    Posted to Switching

Someone showed me a great feature today. One of the constant pains in the network is when you get a port err-disabled on the switch. Regardless of how many times I see it, it always seems to be the last thing I check. There's a little-known feature in the IOS called "err-disable recovery" which automatically turns a err-disabled switchport back on after 5 minutes (by default). The good news is that this command allows you to choose specific reasons where you'd like to re-enable the port, such as re-enabling ports disabled because of a port-flap instance but keeping mac-address security violations error disabled. Here's the syntax to make it happen:

Continue reading "Automatic Err-Disable Recovery"

Posted by JC at 1:19 PM | Comments (0) | TrackBack (0)

VUE Releases Testing "Enhancements"    |    Posted to Direct from Cisco | General

These were rumored at the end of last year...looks like they have finally arrived! VUE Testing enhancements:

• Photo on Score Report and Web - On completion of a certification exam at the test center, candidates will receive preliminary score reports imprinted with their photos and unique authentication codes. The authentication code can be used to access a candidate's official score online at Pearson VUE's website usually within 72 hours of the examination. The online score report will also display the candidate's photo. Candidates may share access to their online records with employers or other third parties.

• Forensic Analysis - Exam results and other testing data will be continuously analyzed by forensic software to detect aberrant testing behavior and to flag suspect exams for further investigation.

• Preliminary Score Report - All paper score reports will be preliminary, pending the results of forensic analysis, until official exam scores are posted to the Web usually within 72 hours of exam completion. Once the exam scores are official, candidates may use the authentication codes on their score reports to access the Pearson VUE website for score and photo verification.

That "Forensic Analysis" section looks pretty interesting. I wonder if they're looking for the TestKing brain dump-style tests? I'm very curious!!!

Posted by JC at 4:58 PM | Comments (5) | TrackBack (0)

Another Great Resource    |    Posted to Off-Topic

Here's another great blog/website resource to add to your list:

http://www.packetlife.net

The site is well organized into interesting sections. I especially like the cheat sheet (for technology, not exams) and Network Monitoring / Utilities categories.

Posted by JC at 5:21 PM | Comments (2) | TrackBack (0)

Scheduling Periodic Config Backups in IOS    |    Posted to General

Pretty cool article talking about using kron jobs on a Cisco router to schedule periodic configuration backups.

http://supportwiki.cisco.com/ViewWiki/index.php/Tech_Insights:Periodical_Configuration_Save_of_Cisco_Devices

Posted by JC at 10:40 AM | Comments (7) | TrackBack (0)

CCNA Voice Exam Debrief    |    Posted to CCNA

Alright, this afternoon I took the CCNA Voice exam (aka Implementing Cisco IOS Unified Communications, 640-460). While I completely loathe brain dumps, I am all for getting a good idea of focus areas and the general feel for the exam, so that's what I'll give you here.

Continue reading "CCNA Voice Exam Debrief"

Posted by JC at 7:56 PM | Comments (8) | TrackBack (0)