Posts for: #Networking

NSX-T Concepts

VMware NSX-T does not support VXLAN!

NSX-T Segments

a VM is connected to a segment.

  • is a layer-2 domain.
  • invokes a transport zone.
  • once the transport zone configured, you can no longer edit it later.
  • VLAN-based segments are equivalent to VLAN IDs
  • VLAN-based segments are not permitted to connect to Tier-0 or Tier-1 gateways.

require VLAN transport zones. A single Edge Uplink segment can be used more than once.

[Read]

Inserting firewall packet inspection services in Cisco ACI data paths without offloading the gateway service off the fabric

PBR in two-arm design, the PBR Node Interfaces are in the same VRF

sc1

#QA In the SGR in Go-To in Two-arm design, how does IP routing on the firewall scale when we have dozens of (Provider, Consumer) pairs? #QA How cumbersome is the management of the static IP routes related to the SGR on the service device? #QA Is BD2 the IP default gateway for EPG Web endpoints? #QA Which component takes the role of IP default gateway of the firewall: BD1 or FW-Out BD?

[Read]

ACI Bridge Domains

Bridge Domains and Subnets

A bridge domain can be configured with an IP subnet; it is then called a layer-3 bridge domain. The BD subnet is aka ACI internal subnet.

The IP address that we configure under the bridge domain is the IP default gateway of the IP subnet. The IP address is configured using a CIDR notation.

Subnets configured under bridge domains are added to the leaf’s routing table as static routes.

[Read]

NX-OS boot sequence stuck in loader prompt

Path in Cisco Documentation

cisco.com/go/support –> Switches –> Nexus 9000 –> Troubleshooting Guides –> (select NX-OS release) –> “Cisco Nexus 9000 Series NX-OS Troubleshooting Guide, Release …” –> Troubleshooting Installations, Upgrades and Reboots –> Chapter Contents –> Troubleshooting Software System Reboots –> Recovery from the loader> Prompt.

Assumption 1: NX-OS File in Bootflash

Loader> dir
<you see for example nxos.9.3.13.bin NX-OS file in the bootflash>
Loader> boot nxos.9.3.13.bin

The system should boot the image. When you get the normal prompt, make sure to set the bootvariable to that NX-OS image:

[Read]

SSH

SSH on Cisco devices

SSH Terminal-Line Access Feature

replaces reverse Telnet feature that was typically configured on terminal services routers.

provides secure console access for servers physically connected to a terminal services router.

introduces the concept of ‘rotary’.

Remember that each physical Async port has an associated logical line to it.

Each router line (not the Async ports) must be configured with a unique rotary number.

Number of rotaries == number of lines

[Read]

Basic MPLS L3 VPN Concepts

VPN Advantage

A VPN is a network where private network services are provided to one or more customers over a public network, Internet, or a private network. 

A VPN consists of one or more VPN tunnels! 

VPN connects sites of a same customer together.  A set of “policies” determine which sites communicate with each other and which not;  

In one scenario, the customer itself defines and implements them, in collaboration with the SP. The customer may for example want to force traffic from site S1 to traverse site S2, because the latter has a firewall installation. 

[Read]

Scheduling a VMware Exam

There’s an info on the Internet that says it’s possible to pass Vmware VCA certs for free. It’s been a while now and Vmware retired this offer.

However, there are some folks that say they could get around and pass without spending a penny. They say it’s a matter of combining promo codes.

I’ve been trying all the codes. Pearson Vue warned me that they’re going to shut down my account if I do another attempt.

[Read]

Uploading IOS image with Cisco LMS

In this tutorial we’ll learn :

  • How to push an IOS image into a switch flash disk, using Cisco LMS,
  • How to verify that the IOS image has been loaded correctly

Pushing the IOS image

  1. On the LMS home page, click on the Resource Manager Essentials link.

  2. Click on Software Distribution Software Distribution

  3. Choose a distribution method. By default, I use “by device”. That’s the simplest one Software Distribution

  4. Check the device for which you want to upgrade the IOS and click Next Software Distribution

[Read]

VMware Datacenter Virtualization VCA-DCV

Today I successfully passed the exam. I got a score of 420. Alhamdulillah.

How I studied for the exam: I watched the Vmware E-learning fundamental videos, took notes, reviewed them with a big mind map, then registered and sat for it. I sat studying in many small sessions.

It’s great to sit for an exam and pass it from home :) it’s also great to see there are other folks out there who are sharing the same experience.

[Read]