ASA Site to Site VPN (PATed)

If you ever needed to hide multiple systems behind a single IP address you would use PAT. (Port Address Translation) besides using this to connect to the internet when using an RFC 1918 address, you can configure PAT for VPN connections. The benefit is the same, hide multiple systems behind a single IP address with the advantage being you can have many systems on one side of the VPN tunnel all using that single IP.

Continue reading

Advertisements

Cisco VIRL and Windows VMs

VIRL-logo-eOne of the neat features of Cisco VIRL is it runs on an open platform, with OpenStack as the orchestration program running on top of an Ubuntu operating system. This gives VIRL additional flexibly by being able to run third-party VMs with KVM begin the hypervisor. In this guide I’ll walk through some of the steps I took to get Windows XP up and running in VIRL. 🙂 Continue reading

Don’t get stuck with “speed-groups”

I was working with a Cisco 9372TX switch, and on it I had two 40Gbps uplinks that we where using out of the available four. Talking with our VAR because we where planning on connecting in additional equipment that only supported SFP+ interfaces. So the solution was to connect to this switch  with QSFP to SFP+ adapters. Thinking this would be a simple change because we are just plugging in additional adapters on the QSFP ports we planned our maintenance window and rollback plans but I wasn’t expecting a rollback for this one 🙂   Continue reading

Factory Reset Firepower 4100 & 9300

I got my hands on some Cisco Firepower 4100 units and after playing around with them I wanted to reset them to factory settings, essentially erase the “startup-config” on the FXOS. The Firepower units act a little differently than your normal Cisco IOS or ASA and you can’t just erase startup-config and reload the device, that would be too easy. I was able to find that if you do a password recovery on the unit it erases the configuration  and that’s as close as I got for a factory reset. Continue reading

Passed the 640-916 DCICT

It’s been a little more than year in the making since I passed my last Cisco exam the 640-911 but I finally did it and passed the 640-916. I can now call myself CCNA Data Center Certified. 🙂 If you ever get the chance to take go up Data Center route it really is interesting of all the products and services Cisco has in their portfolio. Cisco UCS, OTV, Fabicpath and FCoE are just really cool technologies to learn about. The main studying tool I used was the Cisco Official Certification Guide and I poked around the Cisco Learning Network on the Data Center study group.

So what’s next for me? Well I think its time to take another step forward and climb up to the professional level of Cisco Certifications. I don’t know when I want to start that but it’ll probably be sooner rather than later.

It’s been a little more than five years of when I passed my first Cisco certification. After finishing the Cisco Network Academy I was able to tackle the ICND1 and looking back at the ICND1 its changed curriculum twice since I took it, which is a common theme in this industry. 😉