Posts

Showing posts from June, 2018

How to configure OSPF on Palo Alto Networks Firewall?

Image
How to configure OSPF on Palo Alto Networks Firewall !! Steps: 1- Create Virtual Router. 2- Create three Zones (Site A – Site B – Site C). 3- Create security rule allow (ping) between Site A & Site C. 4- Create OSPF routing protocol on two firewalls. -------------------------------------------------------------------------------------------                                                                     PaloAlto - 1 1- Create Virtual Router (VR-1) PaloAlto-1 2- Create Zones PaloAlto-1: 3- Assign Interfaces PaloAlto-1: 4- Create rule allow (ping) and deny other 5- Apply OSPF between two interfaces (eth ½ - eth 1/1) Show routing table on Palo-Alto-1: ====================================================================      ...

How to understand MPLS protocol by example !!!

Image
How to understand MPLS protocol by example? 1- Using OSPF as routing protocol. 2- Apply MPLS LDP protocol. ------------------------------------------------------------ (R1): mpls label range 100 199 mpls label protocol ldp multilink bundle-name authenticated ! ! interface Loopback0  ip address 1.1.1.1 255.255.255.0 ! interface FastEthernet0/0  ip address 12.1.1.1 255.255.255.0  duplex full  mpls ip ! router ospf 1  network 1.1.1.0 0.0.0.255 area 0  network 12.1.1.0 0.0.0.255 area 0 ! mpls ldp router-id Loopback0 ! end ------------------------------------ (R2) mpls label range 200 299 mpls label protocol ldp multilink bundle-name authenticated ! interface Loopback0  ip address 2.2.2.2 255.255.255.0 ! interface FastEthernet0/0  ip address 12.1.1.2 255.255.255.0  speed auto  duplex auto  mpls ip ! interface FastEthernet0/1  ip address 23.1.1.2 255.255.255.0 ...

How to Configuration MPLS L2 VPN between two branches !!!

Image
How to Configuration MPLS L2 VPN  between two branches: encapsulation L2 of two branches into L3 MPLS by VC & pseudo wire. How to: 1-  R2(f0/0) not assign IP   R5(f0/1) no assign IP. 2- Apply routing protocol RIP v2 on R1 & R6 . 3- Apply  OSPF on R2-R3-R4-R5, but R2 (23.0.0.0 & 2.2.2.2) no route with 16.0.0.0  and    R6 the same. 4-  Company has two branches (16.0.0.1  -   16.0.0.6) 5-  MPLS not need know network of customers into PE & P each customer so not route network into core. ----------------------------------------------------- How to Configuration routing protocol and MPLS: R1: en conf t interface f0/0 no shutdown ip address 16.0.0.1 255.0.0.0 interface loopback 0 ip address 1.1.1.1 255.255.255.255 router rip network 16.0.0.0   network 1.0.0.0    version 2 no auto-summary end wr me -------------------...

How to Configure Cisco IPSec VTI?

Image
How to Configure Cisco IPSec VTI? IPSec VTIs (Virtual Tunnels Interfaces) simplifies the configuration of a VPN compared to using crypto maps or GRE IPSec Tunnels. A benefit of using VTIs does not require of tying a configuration to a physical interface, rather allowing bespoke configuration per VTI. You can use a dynamic routing protocol (EIGRP, OSPF etc) or QoS defined per VTI. The IPsec VTI allows for the flexibility of sending and receiving both IP unicast and multicast encrypted traffic on any physical interface, such as in the case of multiple paths.  Traffic is encrypted or decrypted when it is forwarded from or to the tunnel interface and is managed by the IP routing table. Using IP routing to forward the traffic to the tunnel interface simplifies the IPsec VPN configuration compared to the more complex process of using access control lists (ACLs) with the crypto map in native IPsec configurations. DVTIs function like any other real interface so that you can apply q...

SDN 101: Practical example for SDN Controller

Image
What is  software-defined networking (SDN) by practical example ? Requirement: 1- HP VAN SDN Controller. 2- Mininet emulation build openflow switches 3- Python HP SDK for build routing protocol 1- How to  Build Topology? Topology appear on SDN Controller after running Topology.py script. Using Mininet Emulation openflow switch: using python for draw topology: Topology.py =================================== """Custom topology example Adding the 'topos' dict with a key/value pair to generate our newly defined topology enables one to pass in '--topo=mytopo' from the command line. """ from mininet.topo import Topo class MyTopo( Topo ):     "Simple topology example."     def __init__( self ):         "Create custom topo."         # Initialize topology         Topo.__init__( self )         h1 = self.addHost( 'h1', ip='10.10.2.1/24', defaultRoute=...