policy-map global_policy
class inspection_default
inspect icmp
--
Using asdm.
1- Go to configuration, firewall, Service Policy rules
2- Select Inspection_default, and clic on edit
3- Clic on the rule Actions tab
4- check icmp
5- clic ok and apply
Monday, April 20, 2009
Monday, March 23, 2009
Setting the clock of a cisco device with NTP
important commands:
WAN_RTR# configure terminal
WAN_RTR(config)# ntp server 64.209.210.20
WAN_RTR(config)# clock timezone ARIZONA -7
WAN_RTR(config)# clock summer-time CA1_DST recurring 2 sunday March 02:00 1 sunday
November 02:00
WAN_RTR# configure terminal
WAN_RTR(config)# ntp server 64.209.210.20
WAN_RTR(config)# clock timezone ARIZONA -7
WAN_RTR(config)# clock summer-time CA1_DST recurring 2 sunday March 02:00 1 sunday
November 02:00
Thursday, March 19, 2009
How to see existing eigrp hello timer
The command to see the existing hello timer with eigrp is :
sh ip eigrp int detail
PR1_3640#sh ip eigrp int detail
IP-EIGRP interfaces for process 1
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Et0/0 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/14 Un/reliable ucasts: 18/16
Mcast exceptions: 1 CR packets: 1 ACKs suppressed: 4
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is md5, key-chain is "CONGO"
Et0/1 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/17 Un/reliable ucasts: 20/7
Mcast exceptions: 1 CR packets: 0 ACKs suppressed: 2
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is not set
Lo0 0 0/0 0 0/1 0 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/0 Un/reliable ucasts: 0/0
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Authentication mode is not set
The command to see the existing hold timer is:
sh ip protocol | i hold
PR1_3640#sh ip proto | i hold
EIGRP NSF-aware route hold timer is 240
sh ip eigrp int detail
PR1_3640#sh ip eigrp int detail
IP-EIGRP interfaces for process 1
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Et0/0 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/14 Un/reliable ucasts: 18/16
Mcast exceptions: 1 CR packets: 1 ACKs suppressed: 4
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is md5, key-chain is "CONGO"
Et0/1 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/17 Un/reliable ucasts: 20/7
Mcast exceptions: 1 CR packets: 0 ACKs suppressed: 2
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is not set
Lo0 0 0/0 0 0/1 0 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/0 Un/reliable ucasts: 0/0
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0
Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Authentication mode is not set
The command to see the existing hold timer is:
sh ip protocol | i hold
PR1_3640#sh ip proto | i hold
EIGRP NSF-aware route hold timer is 240
Wednesday, March 18, 2009
Microsoft office 2007 can't save to network drive
The cause of the problem is the your antivirus (CA in my case). You must disable "protected network drive" under CA antivirus.
Tuesday, March 17, 2009
Subinterfaces on ethernet port
I am setting up my lab for the ccnp training and it seems like you cannot configure subinterfaces on an ethernet port.
I am able to configure it without any problem on Fastethernet.
BR2_2611XM#conf t
Enter configuration commands, one per line. End with CNTL/Z.
BR2_2611XM(config)#int fa0/0.34
BR2_2611XM(config-subif)#encap dot
BR2_2611XM(config-subif)#encap dot1Q 34
BR2_2611XM(config-subif)#desc CBT_PR1
BR2_2611XM(config-subif)#ip address 10.1.34.1 255.255.255.252
BR2_2611XM(config-subif)#int fa0/0.24
BR2_2611XM(config-subif)#encap
BR2_2611XM(config-subif)#encapsulation dot
BR2_2611XM(config-subif)#encapsulation dot1Q 24
BR2_2611XM(config-subif)#desc CBT_PR2
BR2_2611XM(config-subif)#ip address 10.1.24.1 255.255.255.252
BR2_2611XM(config-subif)#
I am able to configure it without any problem on Fastethernet.
BR2_2611XM#conf t
Enter configuration commands, one per line. End with CNTL/Z.
BR2_2611XM(config)#int fa0/0.34
BR2_2611XM(config-subif)#encap dot
BR2_2611XM(config-subif)#encap dot1Q 34
BR2_2611XM(config-subif)#desc CBT_PR1
BR2_2611XM(config-subif)#ip address 10.1.34.1 255.255.255.252
BR2_2611XM(config-subif)#int fa0/0.24
BR2_2611XM(config-subif)#encap
BR2_2611XM(config-subif)#encapsulation dot
BR2_2611XM(config-subif)#encapsulation dot1Q 24
BR2_2611XM(config-subif)#desc CBT_PR2
BR2_2611XM(config-subif)#ip address 10.1.24.1 255.255.255.252
BR2_2611XM(config-subif)#
Friday, March 13, 2009
PASSED CISCO CCNA VOICE
Whaooo - I am done with the projet. I am now CCNA VOICE certified. I passed my test last monday. It feels great to be over with it.
CCNA voice is great - The training is better than the test itself. I learn a lot. I can setup a complete voice system from scratch with voicemail, dial-peer, auto-attendant, hunt-group, intercom, paging,... It is beautiful.
I love the Voice training and I would like to learn more about the CALL MANAGER. But the CCVP is 2 more exams than the CCNP and the home lab costs almost 5 times more.
So, from next week, I am going to start the CCNP track. I hope will be more efficient on posting my journey.
On the CCNA VOICE exam, I will suggest to all of you to spend time with pratice and UC500.
50% of the question were on the UC500 and I used the following site to massacre the questions
https://www.myciscocommunity.com/servlet/JiveServlet/previewBody/1555-102-1-1922/UC500-CCA-First-Look-v1-Lab3.pdf
the rest of the 50% of questions were about the configuration, sampling, encoding and dial-peers. My home lab and the book did the job.
In my opinion, CCNA is harder than the CCNA VOICE.
I don't know may be because I have a better teacher and book (JEREMY CIORAS - Cbt nugget and the official CCNA VOICE BOOK) and specialy a great home lab.
I am still looking for a company that can help me achieve my goal of becoming a CCIE. For now, I am paying from my own pocket for lab, training books and dvd and test fees. It is hard but I hope in the near future, it is going to pay off.
Praise God for everything.
CCNA voice is great - The training is better than the test itself. I learn a lot. I can setup a complete voice system from scratch with voicemail, dial-peer, auto-attendant, hunt-group, intercom, paging,... It is beautiful.
I love the Voice training and I would like to learn more about the CALL MANAGER. But the CCVP is 2 more exams than the CCNP and the home lab costs almost 5 times more.
So, from next week, I am going to start the CCNP track. I hope will be more efficient on posting my journey.
On the CCNA VOICE exam, I will suggest to all of you to spend time with pratice and UC500.
50% of the question were on the UC500 and I used the following site to massacre the questions
https://www.myciscocommunity.com/servlet/JiveServlet/previewBody/1555-102-1-1922/UC500-CCA-First-Look-v1-Lab3.pdf
the rest of the 50% of questions were about the configuration, sampling, encoding and dial-peers. My home lab and the book did the job.
In my opinion, CCNA is harder than the CCNA VOICE.
I don't know may be because I have a better teacher and book (JEREMY CIORAS - Cbt nugget and the official CCNA VOICE BOOK) and specialy a great home lab.
I am still looking for a company that can help me achieve my goal of becoming a CCIE. For now, I am paying from my own pocket for lab, training books and dvd and test fees. It is hard but I hope in the near future, it is going to pay off.
Praise God for everything.
Thursday, March 5, 2009
Paging Group - NO DUAL-LINE
This is a reminder when configuring paging group in CME
conf t
ephone-dn 5
number 5001
name SALES PAGING
paging
Note Do not use the dual-line keyword with this command. Paging ephone-dns cannot be dual-line.
http://docstore.mik.ua/univercd/cc/td/doc/product/voice/its/cmeadm/feat/cmepage.htm#wp1010379
Configuring a Simple Paging Group
SUMMARY STEPS
1. enable
2. configure terminal
3. ephone-dn paging-dn-tag
4. number number
5. name name
6. paging [ip multicast-address port udp-port-number]
7. end
Configuring a Combined Paging Group
SUMMARY STEPS
1. enable
2. configure terminal
3. ephone-dn paging-dn-tag
4. number number
5. name name
6. paging group paging-dn-tag,paging-dn-tag[[,paging-dn-tag]...]
7. exit
8. ephone phone-tag
9. paging-dn paging-dn-tag {multicast | unicast}
10. exit
11. Repeat Step 8 to Step 10 to add additional IP phones to the paging group.
12. end
conf t
ephone-dn 5
number 5001
name SALES PAGING
paging
Note Do not use the dual-line keyword with this command. Paging ephone-dns cannot be dual-line.
http://docstore.mik.ua/univercd/cc/td/doc/product/voice/its/cmeadm/feat/cmepage.htm#wp1010379
Configuring a Simple Paging Group
SUMMARY STEPS
1. enable
2. configure terminal
3. ephone-dn paging-dn-tag
4. number number
5. name name
6. paging [ip multicast-address port udp-port-number]
7. end
Configuring a Combined Paging Group
SUMMARY STEPS
1. enable
2. configure terminal
3. ephone-dn paging-dn-tag
4. number number
5. name name
6. paging group paging-dn-tag,paging-dn-tag[[,paging-dn-tag]...]
7. exit
8. ephone phone-tag
9. paging-dn paging-dn-tag {multicast | unicast}
10. exit
11. Repeat Step 8 to Step 10 to add additional IP phones to the paging group.
12. end
Subscribe to:
Posts (Atom)
