Powered by Max Banner Ads 

@fryguy

Archive for October, 2012|Monthly archive page

Junos – Lab Topology and Hardware Specs

In How To, IOS, Junos on October 29, 2012 at 08:29


Well, the time has come to start posting some of the Junos stuff that I have been working on.  What I have decided to do with this post is post the Hardware Information that I used for the lab.  I will then reference this post in the posts to come so that anyone can see what was used.  Below is a picture of the lab topology:

The hardware specs and base IP addresses are as follows:

R4 Cisco 831 router running IOS 12.4(25d)
4.4.4.4/32
Ethernet 0 connected to J1 – fe-0/0/7
192.168.14.4/24
J1 Juniper SRX210 running Junos 12.1R2.9
1.1.1.1/32
fe-0/0/7 connected to R4 E0
192.168.14.1/24ge-0/0/0 connected to J2 ge-0/0/0
192.168.12.1/24fe-0/0/2 connected to J3 fe-0/0/2
192.168.13.1/24
J2 Juniper SRX210 running Junos 12.1R2.9
2.2.2.2/32
ge-0/0/0 connected to J1 ge-0/0/0
192.168.12.2/24ge-0/0/1 connected to J3 fe-0/0/1
192.168.23.2/24
J3 Juniper SRX100 running Junos 12.12R2.9 — 3.3.3.3/32
fe-0/0/1 connected to J2 ge-0/0/1
192.168.23.3/24fe-0/0/2 connected to J1 fe-0/0/2
192.168.13.3/24

IOS XR – Workbook – all 105 pages of it!

In How To, IOS XR on October 19, 2012 at 08:30

After many individual posts and changes on IOS XR, here is the Cisco IOS XR Training Workbook in its entirety.

The workbook is 105 pages long, so enjoy!

 

Cisco IOS XR Introduction Ver 1

 

It has been mentioned to me a few times that I should charge for some things, especially these large workbooks.  I do not feel that way, I would rather share my knowledge so that I can continue to learn and grow.  If you appreciate this information that I have provided and wish to give me some of your money, here is a donation button for that.




IOS XR – TACACS (default and non-default VRF)

In CCIE, How To, IOS XR on October 18, 2012 at 08:04

Ok, final post on IOS-XR before the workbook is published in its entirety.

 

So you want to secure your IOS-XR device using TACACS.
The first example I will use will be using the default VRF for TACACS authorization and the second will be using a different VRF. For these examples, the tacacs server is at IP 192.168.100.100 and the password is TacacsPassword

First up, we need to configure our source interface for TACACS, here we will use loopback0 and the default VRF.
RP/0/RSP0/CPU0:PE2(config)#tacacs source-interface Loopback0 vrf default

Now we can configure our TACACS server and Password
RP/0/RSP0/CPU0:PE2(config)#tacacs-server host 192.168.100.100
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#key 0 TacacsPassword
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#exit
RP/0/RSP0/CPU0:PE2(config)#

Time to create a local console authenticaion method, this way console does not rely on TACACS.
You may or may not want to do this, but I am showing it for these examples.
RP/0/RSP0/CPU0:PE2(config)#aaa authentication login console local
RP/0/RSP0/CPU0:PE2(config)#aaa authorization commands console none

Apply the console loging to the line console
RP/0/RSP0/CPU0:PE2(config)#line console
RP/0/RSP0/CPU0:PE2(config-line)#login authentication console
RP/0/RSP0/CPU0:PE2(config-line)#authorization commands console
RP/0/RSP0/CPU0:PE2(config-line)#exit
RP/0/RSP0/CPU0:PE2(config)#

Read the rest of this entry »

%d bloggers like this: