A Network Blog by a Network Engineer

IOS XR – Cisco Videos and Training

Jeff Fry published on 2012-11-06 included in CCIE IOS XR

Ok, I know I said I was done with the IOS XR stuff, but just had to share this.
Cisco has posted some Videos on YouTube, they are below for your enjoyment.

Also, if you are looking for an IOS XR book – here is a link to the one on Amazon.

Introduction to IOS XR CLI and Configuration

[youtube=http://youtu.be/v16-jJE5_yA]

Junos – Password Recovery, Zeroize, and Loading a Configuration, and other basics

Jeff Fry published on 2012-11-05 included in How To Junos

Guess it is time to get the party started! Just a quick note, there is a vendor that I have used in the past to get hardware for labs, if you are interested in hardware, please let me know and I will put you in touch with them. You can deal with them directly so that you know you are getting their best price.

I am not going to cover how to recovery a lost root password, but if you need that information here is a link to the Juniper KB Article KB17565 below. This article is for Junos 10.x and higher.
http://kb.juniper.net/InfoCenter/index?page=content&id=KB17565
What I will cover though is getting your Junos device up and running after you recover the root password. First thing you will want to do is zeroize the device, this will erase all configuration information and reboot the device.
root@J1> request system zeroize
warning: System will be rebooted and may not boot without configuration
Erase all data, including configuration and log files? [yes,no] (no) yes
warning: zeroizing re0
root@J1> Waiting (max 60 seconds) for system process vnlru_mem’ to stop…done</span> <span style="color: #0000ff;">Waiting (max 60 seconds) for system process vnlru’ to stop…done
Waiting (max 60 seconds) for system process bufdaemon’ to stop…done</span> <span style="color: #0000ff;">Waiting (max 60 seconds) for system process syncer’ to stop…
Syncing disks, vnodes remaining…0 0 0 done
syncing disks… All buffers synced.
Uptime: 5m9s
Rebooting…
[— Removed the reboot cycle output for this document —-]
Once the device finishes rebooting, you will be at the Amnesiac prompt. This is the prompt the system give you when there is no configuration on the device. Almost like is it brand new, out of the box!
Amnesiac (ttyu0)
login: root
(Note: No prompt for a root password as the system is not yet configured)

Junos – Lab Topology and Hardware Specs

Jeff Fry published on 2012-10-29 included in How To IOS Junos

Well, the time has come to start posting some of the Junos stuff that I have been working on. What I have decided to do with this post is post the Hardware Information that I used for the lab. I will then reference this post in the posts to come so that anyone can see what was used. Below is a picture of the lab topology:

IOS XR – Workbook – all 105 pages of it!

Jeff Fry published on 2012-10-19 included in How To IOS XR

After many individual posts and changes on IOS XR, here is the Cisco IOS XR Training Workbook in its entirety.
The workbook is 105 pages long, so enjoy!

Cisco IOS XR Introduction Ver 1

It has been mentioned to me a few times that I should charge for some things, especially these large workbooks. I do not feel that way, I would rather share my knowledge so that I can continue to learn and grow. If you appreciate this information that I have provided and wish to give me some of your money, here is a donation button for that.

IOS XR – TACACS (default and non-default VRF)

Jeff Fry published on 2012-10-18 included in CCIE How To IOS XR

Ok, final post on IOS-XR before the workbook is published in its entirety.

So you want to secure your IOS-XR device using TACACS.
The first example I will use will be using the default VRF for TACACS authorization and the second will be using a different VRF. For these examples, the tacacs server is at IP 192.168.100.100 and the password is TacacsPassword
First up, we need to configure our source interface for TACACS, here we will use loopback0 and the default VRF.
RP/0/RSP0/CPU0:PE2(config)#tacacs source-interface Loopback0 vrf default
Now we can configure our TACACS server and Password
RP/0/RSP0/CPU0:PE2(config)#tacacs-server host 192.168.100.100
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#key 0 TacacsPassword
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#exit
RP/0/RSP0/CPU0:PE2(config)#
Time to create a local console authenticaion method, this way console does not rely on TACACS.
You may or may not want to do this, but I am showing it for these examples.
RP/0/RSP0/CPU0:PE2(config)#aaa authentication login console local
RP/0/RSP0/CPU0:PE2(config)#aaa authorization commands console none
Apply the console loging to the line console
RP/0/RSP0/CPU0:PE2(config)#line console
RP/0/RSP0/CPU0:PE2(config-line)#login authentication console
RP/0/RSP0/CPU0:PE2(config-line)#authorization commands console
RP/0/RSP0/CPU0:PE2(config-line)#exit
RP/0/RSP0/CPU0:PE2(config)#

IOS XR – Loading Configs and Replacing Configs

Jeff Fry published on 2012-10-16 included in CCIE How To IOS XR

One last IOS XR post and then it will be time to post the IOS XR workbook.
Ok, let’s quickly look at loading a configuration from the disk and overwriting an existing configuration.
I have copied a config to disk0a: called newconfig.txt. What I want to do is install this configuration as the running config on the router.
1626 -rwx 204 Wed Oct 17 01:21:30 2012 newconfig.txt
So to start, lets delete the existing configuration
RP/0/RSP0/CPU0:R1(config)#commit replace
Wed Oct 17 01:21:43.406 UTC
This commit will replace or remove the entire running configuration. This
operation can be service affecting.
Do you wish to proceed? [no]: y
RP/0/RSP0/CPU0:ios(config)#
RP/0/RSP0/CPU0:ios(config)#exit
Ok, so now we are at an unconfigured device. Now we can load the config on the disk to the running config.
RP/0/RSP0/CPU0:ios(config)#load disk0a:/newconfig.txt
Loading.
204 bytes parsed in 1 sec (203)bytes/sec

IOS XR – HSRP and VRRP

Jeff Fry published on 2012-10-08 included in CCIE How To IOS XR

Next Hop Resolution Protocol comes in two fashions on the IOS XR. The first is Cisco proprietary and called Hot-Standby Router Protocol or HSRP and the other is the industry standard called Virtual Router Redundancy Protocol or VRRP.
This is something that many customers use in order to maintain the availability of a default gateway on the network. If your customer uses a static route to a next hop, you might be using this as well.
Like everything else with IOS XR, NHRP is handled a little differently. With IOS, you configure your standby commands under the interfaces; in IOS XR you use ROUTER HSRP or Router VRRP.
For this lab we will use interface Te0/1/0/0 and a subnet of 150.1.12.0/24.
First up R1:
RP/0/RSP0/CPU0:R1(config)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:R1(config-if)#ip add 150.1.12.1/24
RP/0/RSP0/CPU0:R1(config-if)#no shut
RP/0/RSP0/CPU0:R1(config-if)#commit
RP/0/RSP0/CPU0:R1(config-if)#
Now R2:
RP/0/RSP0/CPU0:R2(config)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:R2(config-if)#ip add 150.1.12.2/24
RP/0/RSP0/CPU0:R2(config-if)#no shut
RP/0/RSP0/CPU0:R2(config-if)#commit

IOS XR – L2VPN

Jeff Fry published on 2012-10-04 included in CCIE How To IOS XR

Ok, now it is time for some L2VPN. Here we will use the same diagram as before, but instead of providing MPLS VPN between CE1 and CE2, we are going to create a L2VPN so that CE1 and CE2 think that they are directly connected to each other. This lab builds off the previous post, so the routers where already configured.

First up, CE1
CE1(config-if)#int f0/0
CE1(config-if)#ip add 10.1.34.3 255.255.255.0
CE1(config-if)#int l0
CE1(config-if)#ip add 10.1.3.3 255.255.255.255
CE1(config-if)#router ospf 1
CE1(config-router)#net 10.0.0.0 0.255.255.255 a 0
CE1(config-router)#
Now CE2
CE2(config-if)#ip add 10.1.34.4 255.255.255.0
CE2(config-if)#int l0
CE2(config-if)#ip add 10.4.4.4 255.255.255.255
CE2(config-if)#router ospf 1
CE2(config-router)#net 10.0.0.0 0.255.255.255 a 0
CE2(config-router)#

A Junos workbook in the works…

Jeff Fry published on 2012-10-03 included in Junos

You may have noticed on my twitter feed that I have been interacting with some Junos pros over the past few months, they have been helping me with a small guide that I am working on. Below is information on that guide:

I am currently working on a “workbook” I have subtitled “A Junos Guide by an IOS Guy” and I am intending to publish it throughout October and November as individual posts. Once all the individual posts are published, the guide will be available in PDF format as a single download. This is the same process I am doing with IOS XR – all the IOS XR posts will be available as a single PDF download – just like I did for the Nexus 7000
It is my intention for this “workbook” to help those of us who know Cisco IOS to learn and understand Juniper Junos. I will admit that I was initially intimidated by the look of the Junos configuration, but as time has gone on I have learned to understand it and actually like it. As they say, the more you work with something, the more comfortable you feel with it.

IOS XR – MPLS VPN

Jeff Fry published on 2012-10-02 included in CCIE How To IOS XR

Next up is MPLS VPN; actually VPNv4 routes are what these actually are since we are only passing IPv4 traffic in this example.
So we have this diagram below – CE1 and CE2 are the customer routers and both are running OSPF in Area 0. They need to talk to each other but do not have a direct connection available, so they have contracted us to provide connectivity via MPLS between them. What we will now do is build a pseudo MPLS network between PE1 and PE2, establish an iBGP peering, create the associated customer VRF and then peer with the customer via OSPF Area 0.

So, first up lets configure CE1 using an IP of 10.3.3.3/32 for the loopback and 10.1.13.3/24 for the link facing PE1.
CE1#conf t
Enter configuration commands, one per line. End with CNTL/Z.