• OSPF Authentication over FR

    -------------------------------------------------------------------------------- R1 (s0/0) -------------------R3 --------------------(s0/0) R4 1. R3 is Hub 2. R3 can use point-to-multipoint subinterface 3. R1 and R4 used physical interface only 4. o...

    2008-02-23 04:53:28

  • OSPF Point-to-point non-broadcast

    R3#sh ip route 40.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 40.1.1.0/24 is directly connected, FastEthernet0/0 O 40.1.1.4/32 [110/10] via 40.1.1.4, 00:18:24, FastEthernet0/0 135.1.0.0/32 is subnetted, 1 subnets O 135.1.1.4 [110/11] via 40....

    2008-02-23 04:53:28

  • 3550 per-port-per-vlan traffic classify

    class-map match-all test match ip precedence 5 match access-group 101 class-map match-all per-vlan match vlan 10 match class-map test policy-map test class per-vlan set cos 5 interface FastEthernet0/6 service-policy input test access-list 101 permit...

    2008-02-23 04:53:27

  • DMVPN-NHRP - spoke-to-spoke VPN IOS 12.2.15T

    hostname hub ! crypto isakmp policy 20 authentication pre-share crypto isakmp key cisco address 0.0.0.0 0.0.0.0 ! crypto ipsec transform-set test esp-aes esp-sha-hmac mode transport ! crypto ipsec profile test set transform-set test ! interface Loop...

    2008-02-23 04:53:27

  • 理解CATALYST 3550 多层交换机QOS基本概念

    本文着重讨论一些多层交换机qos的基本概念,以后将有相关内容的后续补充,希望能够帮助大家理解交换机的qos功能。 1. 理解qos 多层交换机使用InternetEngineering Task Force (IETF) DiffServ体系结构标准来实现qos. 这个体系结构在网络的边缘对进入的流量使用Layer 3 I...

    2008-02-23 04:53:26

  • DMVPN with NHRP

    hostname hub ! crypto isakmp policy 20 authentication pre-share crypto isakmp key cisco address 0.0.0.0 0.0.0.0 ! crypto ipsec transform-set test esp-aes esp-sha-hmac ! crypto ipsec profile test set transform-set test ! interface Loopback0 ip addres...

    2008-02-23 04:53:26

  • PIX 7.0 dynamic VPN using Digital Certificate with

    PIX Version 7.0(1) names ! interface Ethernet0 nameif outside security-level 0 ip address 172.29.6.1 255.255.255.0 ! interface Ethernet1 nameif inside security-level 100 ip address 172.29.131.1 255.255.255.0 ! interface Ethernet2 shutdown no nameif n...

    2008-02-23 04:53:25

  • PIX 7.0 dynamic VPN

    PIX Version 7.0(1) names ! interface Ethernet0 nameif outside security-level 0 ip address 172.29.6.1 255.255.255.0 ! interface Ethernet1 nameif inside security-level 100 ip address 172.29.131.1 255.255.255.0 ! enable password 90RBsEWodTGO2XFL encrypt...

    2008-02-23 04:53:25

  • 路由配置简化之道

    随着网络基础设施建设的快速增长,各个行业广域专网的链路技术也相应发生了较大的变化。传统的广域专网一般租用点到点的长途DDN专线来实现,存在建设周期长,维护困难等问题。随着MPLS技术的推广,业界开始流行采用BGP MPLS VPN技术解决方案来解决上述难题,成为了当前...

    2008-02-23 04:53:24

  • 小命令大作用:增加Router的安全

    在Router里有这样一条命令:auto secure,这个命令用起来比较方便,而且可以关闭一些不安全的服务和启用一些安全的服务。然后对这个命令做了一个总结。(注:ios版本为:12.3(1)以上才支持使用) 总结如下: 1、关闭一些全局的不安全服务如下: Finger PAD Small Servers...

    2008-02-23 04:53:24

2