ATM-based IP CPE – SDSL – Cisco 1721 & Lucent Cellpipe 20H-4

Posted on August 29, 2010 by halli

HDS Line : Arcor / Vodafone SHDSL – 4,6 Mbps
IP bridge : Lucent Cellpipe 20H-4
Router : Cisco 1721 + WIC-1ENET

CPE – Cisco 1721 – IOS 12.4


!
version 12.4
!
hostname CPE
!
interface Ethernet0
description Vodafone SHDSL – Lucent Cellpipe 20H-4
ip address 10.199.145.2 255.255.255.128
half-duplex
!
interface FastEthernet0.222
description DATA
encapsulation dot1Q 222
ip address 10.240.52.1 255.255.255.0
ip helper-address 192.168.23.23
!
interface FastEthernet0.333
description VOICE
encapsulation dot1Q 333
ip address 10.240.152.1 255.255.255.0
ip helper-address 192.168.23.23
!
ip route 0.0.0.0 0.0.0.0 10.199.145.1
!
end

B-RAS – Cisco 7206VXR – IOS 12.4

!
interface FastEthernet0/1.1371
description CID-DE-011104-1371
encapsulation dot1Q 1371
ip vrf forwarding custbba
ip address 10.199.145.1 255.255.255.128
!
!
interface ATM1/0.11104 point-to-point
description CID-DE-011104-1371
mtu 1500
bandwidth 4600
ip vrf forwarding custbba
ip unnumbered FastEthernet0/1.1371
atm route-bridged ip
pvc 11.104 11/104
ubr 4608
oam-pvc manage
oam retry 2 5 1
encapsulation aal5snap
!
arp timeout 0
!
ip route vrf custbba 0.0.0.0 0.0.0.0 10.199.145.4
ip route vrf custbba 10.240.52.0 255.255.255.0 10.199.145.2
ip route vrf custbba 10.240.152.0 255.255.255.0 10.199.145.2
ip route vrf custbba 10.199.145.2 255.255.255.255 ATM1/0.11104
!
end

ATM-based IP CPE

Posted in IOS, Networking | Tagged , , , | Leave a comment

Firewalling IPv6 – pfSense, Microsoft TMG & M0n0wall

Posted on August 11, 2010 by halli

Microsoft Forefront Threat Management Gateway aka TMG

Technet :

IPv6 traffic is not supported by Forefront TMG (except for DirectAccess).
Filtering of IPv6 traffic is not supported, and all IPv6 traffic is blocked by default.

pfSense

Ticket Feature #177 :

IPv6 support needs to be added at some point (post-2.0)


m0n0wall v.1.32

IPv6 supported – LAN / WAN – fw rules etc. etc.

Posted in Networking | Tagged , , , , | Leave a comment

JUNOS – redistribute static routes into OSPF

Posted on July 3, 2010 by halli

policy-options {

policy-statement static_2_ospf {

term 1 {

from protocol static;

then accept;

}

}

}

# edit policy-options policy-statement static_2_ospf

set term 1 from protocol static

set term 1 then accept

# top

# set protocols ospf export static_2_ospf

# show | compare
[edit protocols ospf]
+   export static-into-ospf;
[edit policy-options]
+   policy-statement static_2_ospf {
+       term 1 {
+           from protocol static;
+           then accept;
+       }
+   }

Posted in JUNOS, Networking | Tagged , | Comments Off

Windows 2008 R2 – Server Core

Posted on October 29, 2009 by halli

Part 1

Domain Controller on Server Core 2008 R2 – unattended installation

Installation, initial configuration and promote Active Directory Domain Services

Windows 2008 R2 – Server Core Installation – ADDS

Part 2

up soon

Posted in MS Windows Server | Tagged , , | Leave a comment

FOUNDRY – Authentication using TACACS+

Posted on October 22, 2009 by halli

Foundry FastIron FLS-624 & FLS648

!
aaa authentication enable default local tacacs+
aaa authentication login default local tacacs+
aaa authorization exec default  tacacs+
aaa accounting commands 0 default start-stop  tacacs+
aaa accounting exec default start-stop  tacacs+
!
tacacs-server host 192.168.33.44
tacacs-server key xxxxxxxxxxxxxx
!

Posted in Foundry, Networking | Tagged , | Leave a comment