Wednesday, 27 May 2009

QOS



Quality of Services

The hottest issue now a days in converged network with different type of application and specially mission critical applications is resources and the top one is bandwidth. So traffic engineering mechanism which has the ability to provide different priorities to different application data is known as Qos

Before implementing Qos we need to undergo some steps

1. Network Audit

2. Find out Application Requirement

3. Classify Traffic depending upon

Requirement analysis (how much delay can be bared for email, Voice)

Make group of identical application but keeping in mind don’t make group per application like put Ftp / Web traffic in single group if you don’t do so you will come up with more granular policies and Cisco suggest not less than 4 classes and more than 11 (if you have 4 Classes then its small network that don’t need QOS deployment)

There are Three Main Models of QoS Deployment

1. Best Effort

2. Integrated Service (IntServ)

Like reserving a private resource from point A to B its for really sensitive traffic , for Example RSVP

Request is send to every router between Point A to B for bandwidth reservation for Continuous data

stream (guaranteed Bandwidth)

DISADVANTAGE no one else can use this bandwidth for other purpose and cannot scale well and another disadvantage is if any device in middle don’t support RSVP so the Chain of End to End QOS will be nightmare

3. Differentiated Services (DIFF SERV)

Differentiate traffic depending upon Marking on packet and its the best model to use for the network and scalable for enterprise network

MQC Modular QoS CLI

Allow you to define all your Policies in global config Mode Steps

Step 1:-

Clear Class Map (defining what To match)

specify type of traffic like HTTP traffic ,FTP , HTTPS

Step 2:-

Policy Map what we need to do that we match like allocate Bandwidth

(bandwidth or percentage)or Resource to this class we defined in step 1

Step 3 :-

Attaching this Policy MAp to the physical interface using Service Policy command

CISCO Auto QoS

Only ..!!!! One Command to configure QoS ... ya its Easy to Use

It analyze current config Bandwidth information on interface and finally configure best practice

Cisco QoS configure Cisco has another thing to make it easy for your network Its auto Qos Discovery...... and it discover your network application and consider critical application Like VOIP Citrix ad finally deploy policy .... But One Point Not every automated procedure is 100% perfect.... Remember it :)

Well guys you can configure Wizard based Qos using SDM on new cisco 2800 series routers


QoS_RTR#config t

QoS_RTR(config)#Class-map MATCH-FTP

##match all will match all command in this class and match any will match any one of the command by default is match all

QoS_RTR(Config-cmap)#match protocol ftp

##it will take a bit time because it use Cisco NBAR and Nbar is a bit processor intensive. that’s it its your class map you can view newly created class map using

#show class-map

sooo remember here we have 1 class but Cisco Says not less than 4 and more than 11 ....:) now get ready for policy map.... for allocating resource. you can put more than 200 classes under a single policy map....:)

#Policy-map policy1

#class MATCH-FTP

(You can add up to 256 classes here sooo lot of room don’t worry to run out of it )

# police 36000

#class class-default

#police 15000

Now if traffic is more than 36 Kbps it will drop the access traffic.. Now it will limit FTP traffic to 36 Kbps however rest of traffic that is under class default will be policed at 15000 .. but where .... that’s the point now we need to apply this all here is the last step you need to take bind this one on the interface .

Remember rule of thumb you can define only one policy per interface per direction ... hummm

int e0/1

service-policy input policy1

how ever need on the other way around

service-policy outbound policy1

show policy-map interface

Will show you interface Qos statistics

Monday, 4 May 2009

Designing Enterprise Network


To deliver best network design you need to know how to execute conceptual network infrastructure that will support the customers need that achieves effective performance , scalability and reliability

Effective Seven steps techniques are used to design the enterprise Network Infrastructure



  1. First and foremost part is to Determine application and Data Requirement like bandwidth need , nature of traffic , Qos Needs , Unicast / Multicast and busty nature of traffic
    Factors to be considered when analyzing Data Traffic Requirements i.e Kbps per active users , Peek Load , Peek timing , Data , video Voice
  2. After determining type of Traffic Need to design Logical Network i.e Mentioning Vlans , Subnets and determine number of subnets for effective performance and better routing
  3. Physical design identification of components to be used in the physical lay out i.e Transmission media inter conncetivity between stacks of network , Fiber types Keeping in mind Residency and STP stuff as well
  4. Selection of Devices a bit debatable issue which vendor to use depending upon there ability , and future needs , as i am Cisco Guy i will choose Cisco as you can get Wirelss to Voip products from Cisco and under single umbrella unified communication infrastructure from a single vendor no mix and mach technology and when you are going to upgrade you find out that vendor don't interact with this ... however selection of Products is tough task depending upon budget and limits as well i.e Select a software option that meet specified needs
  5. Its time to do some binary word :) I love it .... Selecting IP addressing strategy and numbering good planing Good routing as will help your route summarizing so borrow some time for this and perform it in well mannered way . Selection of Routing Protocol is done
  6. Edge Distribution Module Designing including connectivity Core and WAN modules.
Whole design stuff is based upon business Need whihc should be clarified before you carry out any work and must address 4 main factors
  1. Cost
  2. Performance
  3. Scalability
  4. Availability
If management want to compromise on availability no Backup fibers no STP easy Setup that all depends .. what is their need.


Better Information Gathering results in Better Design and Better and Easily scalable Network .... So Start with better information gathering and brain storming ;)

Thursday, 2 April 2009

Comparison beteween 5510 Base / Security Plus




Cisco ASA 5510 License Comparison

Base License

50,000 Maximum Firewall Connections

5×10/100 Integrated Network Interfaces

50 Maximum VLANs Support

No High Availability (fail over) supported Supports

No Security Contexts (Virtual Firewalls)

No Support for VPN / VPN Load Balancing

Security Plus License

130,000 Maximum Firewall Connections

2×10/100/1000 and 3×10/100 Integrated Network Interfaces

100 Maximum VLANs

Active/Active
and Active/Standby fail over

Supports 2 Virtual Firewalls (included) and 5 maximum.

General Features
Firewall throughput is 300 Mbps and VPN throughput is 170 Mbps , Can accommodate 1 x SSM

Monday, 16 March 2009

Upgrade Cisco Router / Switch IOS

One you install and configure any router and switch , its not done for effecient and safer network it is important to keep on upgrading an IOS , as oerating system is open to vulnerabilities which is required to be fixed by patches or ios updates

Latest version of IOS can be downloaded from cisco website with appropriate CCO login.

Setup TFTP server it means you can ping tftp server from your router/ switch hardware.

#write mem
To save the config from running to startup
#Copy flash: tftp
Source filename [full file name of ios]
Address or name of remote host [ip address of server]
Destination filename

#Copy tftp flash:
mention the name of new ios file on tftp

verify by issueing
# Show flash:
this will show you newly copied IOS file in the flash , if we have less file on flash we need to delete the old ios file .

#boot system flash:/

#reload

sh ver

thats all

Friday, 13 February 2009

Spanning tree Protocol




SPANNING TREE



Spanning tree protocol is Layer 2 protocol that ensures the loop free topology, it is based in angorithum invented by Radia Perlam.


Some of the main Points to cram about STP are as under (soon i will add some Cisco related troubleshooting commands and PVST stuff............)



  • STP 802.1d was created to prevent loops in the network, and it is Industry standard protocol.

  • All the switches running STP use to send Probes into the network, which are known as “BRIDGE PROTOCOL DATA UNIT” (BPDUS) to discover loops, however these BPDUs also help to elect the ROOT BRIDGE, which is the core switch in the network.

  • In redundant network running STP switches find the best path to reach the root bridge elected, and then block rest of the redundant links.

  • BPDU packets are sent every 2 seconds , from every active ports of switch to detect the redundancy and link failure , this BPDU packet contains 2 major fields Mac Address and Priority , Which helps to elect the root Bridge

  • Priority field in BPDU can contain value from 0 to 61440 , but the default value is 32768 and lower is better

In order to break a tie between switches having default priority value i.e 32768 , is the point where MAC address kicks in , and lower the MAC address the higher the priority , if lower the MAC address then older the switch will be ............. (hope not got confused ;) ... so we cannot make older switch the root bridge ... so we need to configure root bridge with smaller priority value so the election will be on the basis of Priority not MAC address .


Three Port types in STP

Root Port : this is used reach the root bridge .... remember Root bridge don’t have any root port


Designated port : forwarding port but other end should be locked


Blocking/ Non Designated Port: its the blocked port by STP


STP find the best path by selecting the cost of links i.e cost of 100 Mbps is 19 if link cost ties then bridge id will break the tie

Bridge ID = Priority + Mac address

Per VLAN Spanning Tree

All modern Cisco Switches Run PVST , which runs one instance of Spanning tree per vlan

One root bridge for each VLAN which helps to load balance more effectively

Tuesday, 13 January 2009

Windows Shortcut Keys ...


Windows Shortcut Keys.............


In order to navigate faster on the computer, shortcut keys are very important to be known by the users , this will decrease the working time and improves the efficiency of the user specially the time to grab the mouse, point it out and finally click or double click ..................... Believe it or not ... but you should give it a try, however it will also help to give a professional impression ;)

F1: Help

ALT+ENTER: opens property of selected item

ALT+TAB: Switch between open programs

ALT+F4: Quit program

SHIFT+DELETE: Delete item permanently

CTRL+ESC: Open Start menu

CTRL+ S: Save Open Document

CTRL + P: Print Selected Document

CTRL + F: Search in the opened file

CTRL + F2: see preview of document

F2: Rename any object selected

SHIFT Key: Press and hold shift key when inserting the CD-Rom to bypass the automatic run.

Windows Logo key +R: run dialog box

Windows Logo key +M: Minimise every windows opened

Windows Logo key +F: Open search option

Windows Logo key +E: Open My computer

Windows Logo key +K: Lockdown the computer