Related Posts:

• Are You Working On Your CCNA?
• New and Exciting Announcement!
• A New Version of GNS3 has been released.
• CCNA Routing Protocol Comparison Chart Revised
• CCNAVideo.net Webinar Slides and Video.

We can begin with the initial configuration. It may seem like there is a bit of a difference here. In IPv6 there is no “network” command so OSPF is enabled on the interface. Also, the Router ID needs to be defined since it’s still a 32-bit identifier. So globally you need to enable the process and define the router-id, then you enable the protocol on the interface. I’ve done that here:

ipv6 router ospf 1
 router-id 1.1.1.1
 log-adjacency-changes
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
 ipv6 address 2001:DB8:1:2::1/64
 ipv6 enable
 ipv6 ospf 1 area 0

Related Posts:

• Learning IPv6 with QEMU
• Configuring Site-to-Site IPsec for IPv6 using Static VTI
• Link Round-Up 09/24/2010
• IPv6- Is it more Secure than IPv4
• ipexpert section 16 issue.

In the above figure traffic from Host A will be copied by the Hub device to Host B as well as the Sniffer. This is great as we can see the entire conversation between A and B.

Now we fast forward in time to the days of switches. If you have a basic understanding of how switches work you know that they make forwarding/filtering decisions. This means that traffic from A to B will NOT be sent to the sniffer, rather its forwarded only to the ports where the destination MAC address exists. This makes it problematic for me when I want to have traffic sent to the sniffer, unless I know how to use SPAN.

SPAN Overview

SPAN is handy in that it allows a Network Administrator to copy traffic from one interface to another, or even take traffic seen on one VLAN and send it to an interface where our Sniffer is at.

In the following configuration I have told my switch to take all the traffic off of g0/1 and copy it to g0/10 where my sniffer is located. I did this by creating a monitor session.

Begin by defining what traffic you want to mirror.

SWITCH#configure terminal
SWITCH(config)#
SWITCH(config)#monitor session 1 source interface G0/1

And then define where you want the traffic mirrored to.

SWITCH(config)#monitor session 1 destination interface G0/10

The following figure shows the end result. The traffic coming in G0/1 from Host A that is being sent to Host B on G0/2 is also being mirrored to G0/10.

You can verify the configuration as well:

SWITCH#show monitor session 1


Session 1

Source Ports:
    RX Only:       None
        TX Only:       None
        Both:          Gi0/1
Destination Ports: Gi0/10
SWITCH#

For now this works great and we can start to sniff traffic and learn how things work. In the next article of this series I will address the issue of mirroring traffic from a port of VLAN on one switch to a destination on another switch.

Related Posts:

• IEV issues: Solved!

Todays Training Tips come from Cisco Press Author Kevin Wallace. Kevin lays down a few tips for the TSHOOT exam and SWITCH exam and also discusses his pursuit of the CCIE Voice. You can listen to the audio here, and read the transcript of course, or if you prefer to you can subscribe to the podcast at http://podcast.globalconfig.net or using iTunes where it’s posted as well.

Download audio file (KevinWallace_Mixed.mp3)

The Kevin Wallace Interview transcript.

This transcription is "as-is" and may not accurately represent the audio interview.  In other words, its best to listen to the audio.

Related Posts:

• Interview with Russ White
• Training Tip Tuesday: Take Good Notes
• iPad for Technical Studies? A Definite Maybe!
• Training Tip Tuesday
• Update on my progress.

1. Make them look the same!!! I’m talking about the interfaces here. Check them next to each other. I’ve seen too many broken configurations where they just didn’t match up.
2. Set the same speed and duplex. Don’t let the IOS decide for you. Hard code it so you know it’s done.
3. All ports in an EtherChannel DO NOT have to be next to each other or even on the same module.
4. SPAN ports can’t be in an EtherChannel
5. Sometimes you need to shut down both sides and let them negotiate again.

I know there are other items that I could bring out on the list. These are just some of the ones I remember off hand. How do you make sure the EtherChannel works? Add a comment on this post to tell others about it.

Find more information on Cisco EtherChannel technologies on the Cisco Support Wiki.

You can also download the Kindle version of the Quick Reference sheet. If you do, make sure you get the kindle app for the iphone!

Related Posts:

• VLAN 1 on a Cisco Switch
• Configuring Etherchannel on Cisco ASA 8.4
• A New Version of GNS3 has been released.
• Getting Busy with BGP
• IPv6- Is it more Secure than IPv4

• The Document recommends that you not use VLAN 1 for inband management traffic. Instead you should pick a different that you will dedicate to keeping management traffic separate from user data and protocol traffic.
• Prune VLAN 1 from all the trunks and from all the access ports that don’t require it (including not connected and shutdown ports).

As far as the special VLAN for management purposes the document recommends the following:

• Don’t configure the management VLAN on any trunk or access port that doesn’t require it (including not connected and shutdown ports).
• When feasible, prefer out-of-band management to inband management.

There is certainly more that is discussed in the document and I think its a pretty good read.  Have a look for yourself!

Related Posts:

• 5 ways to make sure Etherchannels work.
• A New Version of GNS3 has been released.
• Getting Busy with BGP
• IPv6- Is it more Secure than IPv4
• Can you knock out half of the CCNP in a week?

At any rate, I sold my kindle in leu of an iphone. I love what the iphone can do, and have the “safari bookbag” from ciscopress on there so I can read my safari books. Well, yesterday I received the icing for my cake, that is, the Kindle App for the iphone. The App is free and once installed it allowed me to sync up all the books I purchased when I owned the kindle. It is really easy to read, and remembered what page I was on in all my books. Amazon also has what they call “whispersync” that will sync the iphone app to the kindle if you have both.

Now if IPexpert were to put their workbooks on a kindle, or better yet on an iphone, I would have it all! I’d rather carry the phone or a kindle with me when I travel versus a ton of workbooks! I say IPexpert because I have decided that I like their style and they are pretty much my vendor of choice now. Sorry IE, but I still think highly of you.

Well I MUST get back to my labs. Time is closing in on me….

Related Posts:

• No Related Posts

Lets begin with the announcement (all quotes from http://ipexpert.ccieblog.com):

Over the next few months you’ll begin seeing the following:A separate brand named “IPexpert Training” (at www.IPexpertTraining.com) that will be focused on CompTia, VMWare, CCENT, CCNA, CCDA, CCNP, CCSP, CCVP and MCSE training products.

My first thought was….wow!  If anyone can do it right it would certainly be IPexpert.  They did however mention the following”

These classes will *NOT* be Cisco authorized and neither business unit will endorse or offer the Cisco 360 CCIE Lab offering.  After understanding the 360 program, products and Cisco’s initiative – I have made the decision that the current CCIE Lab offerings we have (already shipping) are much more mature, proven, more up-to-date and more cost-effective for our clients.

This will make things interesting.  What about Cisco Learning Credits (CLC)?  Many people that take Cisco training have budgetary constraints and the CLC program helps alot.  Will IPexpert find a workaround?  Well, regardless I still think they can do it right.  Lets examine some more of the announcement:

These classes / products will include self-study materials (Blended Learning), lab workbooks, Audio, Video on Demand, eBooks, quizzers, iPhone applications, ILT (traditional classroom-based training), online mentoring and online training classes – and will be priced very competitively.  Students taking these classes will be eligible for a *significant* discount on all IPexpert, Inc. CCIE lab products as that will be their next progression (eventually).  These classes will be delivered during the week – as our CCIE Lab classes are (from IPexpert) – however, we will also have weekend and even classes available online and at various locations.

As a user of the IPexpert BLS I have to say that this will be sweet!  The CCIE BLS is a fantastic product.  I can only imagine that the lower level certs would be as well.

Next:

An online community for these students.

I don’t know how this will compare to the Cisco Learning Network, but I can tell you that the Cisco Learning Network doesnt let you blog there.  They do however cover ALL categories of Cisco Certification including the CCNA, NP, SP, VP, and IE.

While this sounds pretty cool I have to point out my favorite part of the announcement, and what I believe to be the best feature for a student:

Proctor Labs vRack rental for these certifications (Cisco and Microsoft – VMWare down the road in Q2).

I can’t stress enough how big of a gap this is for students.  Think about it, you take a class, work on the gear for a week, go back home and book study until you take the test.  Usually you lose the practical knowledge and end up with lopsided book knowledge.  If you can use the PL equipment to make a topology that supports ANY certification class you may have a corner on a market that is lacking.

Anyhow, it looks like it could be a great option for students, however I dont know how Cisco will handle it.  I’m sure that Learning @ Cisco folks are not happy about another “non-certified” solution but I do know that IPexpert takes care of their customers and will certainly produce a quality product.

You can read the entire announcement on the IPexpert blog.

And now back to my studies!  Cheers.

Related Posts:

• Change in Venue
• Another Great Announcement from IPexpert
• Time for an IPexpert announcement!
• Heading for the Hills
• Introducing the Podcast

Related Posts:

• No Related Posts

You may be interested in these courses in Bellevue, Wa.  Odds are I’ll be teaching them if they are a Security,   Wireless, or Routing and Switching class.

Related Posts:

• No Related Posts