Monday, April 20, 2009

Allows PING through ASA 5500 using ASDM

policy-map global_policy
class inspection_default
inspect icmp

--
Using asdm.
1- Go to configuration, firewall, Service Policy rules
2- Select Inspection_default, and clic on edit
3- Clic on the rule Actions tab
4- check icmp
5- clic ok and apply

Monday, March 23, 2009

Setting the clock of a cisco device with NTP

important commands:

WAN_RTR# configure terminal
WAN_RTR(config)# ntp server 64.209.210.20
WAN_RTR(config)# clock timezone ARIZONA -7
WAN_RTR(config)# clock summer-time CA1_DST recurring 2 sunday March 02:00 1 sunday
November 02:00

Thursday, March 19, 2009

How to see existing eigrp hello timer

The command to see the existing hello timer with eigrp is :

sh ip eigrp int detail

PR1_3640#sh ip eigrp int detail
IP-EIGRP interfaces for process 1

Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Et0/0 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/14 Un/reliable ucasts: 18/16
Mcast exceptions: 1 CR packets: 1 ACKs suppressed: 4
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is md5, key-chain is "CONGO"
Et0/1 1 0/0 2 0/2 50 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/17 Un/reliable ucasts: 20/7
Mcast exceptions: 1 CR packets: 0 ACKs suppressed: 2
Retransmissions sent: 2 Out-of-sequence rcvd: 0
Authentication mode is not set
Lo0 0 0/0 0 0/1 0 0
Hello interval is 5 sec
Next xmit serial
Un/reliable mcasts: 0/0 Un/reliable ucasts: 0/0
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0

Xmit Queue Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Authentication mode is not set

The command to see the existing hold timer is:

sh ip protocol | i hold

PR1_3640#sh ip proto | i hold
EIGRP NSF-aware route hold timer is 240

Wednesday, March 18, 2009

Microsoft office 2007 can't save to network drive

The cause of the problem is the your antivirus (CA in my case). You must disable "protected network drive" under CA antivirus.

Tuesday, March 17, 2009

Subinterfaces on ethernet port

I am setting up my lab for the ccnp training and it seems like you cannot configure subinterfaces on an ethernet port.

I am able to configure it without any problem on Fastethernet.
BR2_2611XM#conf t
Enter configuration commands, one per line. End with CNTL/Z.
BR2_2611XM(config)#int fa0/0.34
BR2_2611XM(config-subif)#encap dot
BR2_2611XM(config-subif)#encap dot1Q 34
BR2_2611XM(config-subif)#desc CBT_PR1
BR2_2611XM(config-subif)#ip address 10.1.34.1 255.255.255.252
BR2_2611XM(config-subif)#int fa0/0.24
BR2_2611XM(config-subif)#encap
BR2_2611XM(config-subif)#encapsulation dot
BR2_2611XM(config-subif)#encapsulation dot1Q 24
BR2_2611XM(config-subif)#desc CBT_PR2
BR2_2611XM(config-subif)#ip address 10.1.24.1 255.255.255.252
BR2_2611XM(config-subif)#

Friday, March 13, 2009

PASSED CISCO CCNA VOICE

Whaooo - I am done with the projet. I am now CCNA VOICE certified. I passed my test last monday. It feels great to be over with it.

CCNA voice is great - The training is better than the test itself. I learn a lot. I can setup a complete voice system from scratch with voicemail, dial-peer, auto-attendant, hunt-group, intercom, paging,... It is beautiful.

I love the Voice training and I would like to learn more about the CALL MANAGER. But the CCVP is 2 more exams than the CCNP and the home lab costs almost 5 times more.

So, from next week, I am going to start the CCNP track. I hope will be more efficient on posting my journey.

On the CCNA VOICE exam, I will suggest to all of you to spend time with pratice and UC500.
50% of the question were on the UC500 and I used the following site to massacre the questions

https://www.myciscocommunity.com/servlet/JiveServlet/previewBody/1555-102-1-1922/UC500-CCA-First-Look-v1-Lab3.pdf

the rest of the 50% of questions were about the configuration, sampling, encoding and dial-peers. My home lab and the book did the job.

In my opinion, CCNA is harder than the CCNA VOICE.

I don't know may be because I have a better teacher and book (JEREMY CIORAS - Cbt nugget and the official CCNA VOICE BOOK) and specialy a great home lab.

I am still looking for a company that can help me achieve my goal of becoming a CCIE. For now, I am paying from my own pocket for lab, training books and dvd and test fees. It is hard but I hope in the near future, it is going to pay off.

Praise God for everything.

Thursday, March 5, 2009

Paging Group - NO DUAL-LINE

This is a reminder when configuring paging group in CME

conf t
ephone-dn 5
number 5001
name SALES PAGING
paging


Note Do not use the dual-line keyword with this command. Paging ephone-dns cannot be dual-line.

http://docstore.mik.ua/univercd/cc/td/doc/product/voice/its/cmeadm/feat/cmepage.htm#wp1010379


Configuring a Simple Paging Group
SUMMARY STEPS
1. enable

2. configure terminal

3. ephone-dn paging-dn-tag

4. number number

5. name name

6. paging [ip multicast-address port udp-port-number]

7. end



Configuring a Combined Paging Group
SUMMARY STEPS
1. enable

2. configure terminal

3. ephone-dn paging-dn-tag

4. number number

5. name name

6. paging group paging-dn-tag,paging-dn-tag[[,paging-dn-tag]...]

7. exit

8. ephone phone-tag

9. paging-dn paging-dn-tag {multicast | unicast}

10. exit

11. Repeat Step 8 to Step 10 to add additional IP phones to the paging group.

12. end