Quantcast
Channel: GNS3 Labs | CCNP | CCNA Labs
Viewing all 113 articles
Browse latest View live

How to Download & Use Cisco ISO XR in GNS3 with Virtualbox

$
0
0

How to Configure Cisco XR IOS Image in GNS3:

IOS XR is a train of Cisco Systems' widely deployed Inter-networking Operating System (IOS), used on their high-end carrier-grade routers such as the CRS series, 12000 series, and ASR9000 series.
In this article I will show you how to configure or use Cisco XR IOS Image in GNS3. This guide will help you the step by step processor for configuring Cisco XR IOS image in GNS3. So following are the steps:
1.       Download Cisco XR IOS image, I have download it from this link: https://upload.cisco.com/cgi-bin/swc/fileexg/main.cgi?CONTYPES=Cisco-IOS-XRv. I have downloaded the “xrvr-fullk9-4.3.2.vmdk” for this lab.
2.       In second step you need to create a virtual machine from this download file. I have created a virtual Machine using Virtual-Box. Open your Virtual Box and click on new for creating a new VM for Cisco XR image. A wizard with start, in first step you are required to enter the name of Virtual Machine.

3.       In next step you are required to allocate the RAM for your Cisco XR VM. It is recommended to allocate at least 1.55 GB RAM.
4.       In next step you need to select the virtual hard disk for you VM. Choose the options “use an existing virtual hard disk” and browse the cisco XR image that you have download in first step. Click on create this will create a new VM in VM list.

5.       Now open the GNS3 and go to edit/preferencesand from virtual machines menu click on new. This will start a new wizard select VM that you have created in Virtual-box and click on finish.
6.       After this you will find Cisco-XR image in GNS3 device list. Drag this image to GNS3 dashboard.
7.       Start the XR IOS, once it is started, right click on device and click on Console.
8.       Cisco XR image will take some time while loading. During loading it will also give you the message “this (d)rp node is not ready or active for login /configuration” you can ignore this message for a while after some time it will ask  you to set username and password. First set the username, in my case I have set it with “root” you can use any other. Then it ask for password type the password it will reconfirm from you.
9.       Once you have set username and password for Cisco XR IOS image in GNS3, it will take back you to login screen. Now login with username and password that you have set in step#8.
10.   Now you are in Privileged mode, type the configure terminal for global configuration mode. Now you can configure your router as per your choice.

How to configure IPV4 on Cisco XR IOS:

Configuring IP address on Cisco XR is a bit different as compare to other IOS. Go to global configuration mode and use the following commands for assigning IPV4 address to cisco XR image. 
config t
interface mgmtEth0/0/cpu0/0
ipv4 address 192.168.86.200 255.255.255.0
No shut


I Hope this article will help you in configuring Cisco XR and please also share you experience of using Cisco XR on Gns3. Thank you for reading... J

GNS3 Packet Capture Using wireshark | Configure WIRESHARK in GNS3

$
0
0

How to use the Wireshark with Gns3:

In this article I will show you how to use Wireshark with Gns3 for packet capturing. Wireshark is a packet capturing and network analyzer software also known as sniffer or network sniffer. Wireshark will allow you to see, even under detailed level, what is happening in your network. It is also free, open source, cross-platform. I personally rate it is the best tool to network audit and for packet analyzing and capturing. It has a graphical interface and many options for organizing and filtering information. So, you can see all the traffic passing through a network. Using different filters you can analyze the specific protocol packets, like if you want to analyze the routing protocol handshaking of any protocol you can achieve it with wireshark and Gns3.

Wireshark Features

  • Available for Linux and Windows
  • Live Packet capture from any network interface
  • Displays packets with detailed information
  • You can save captured packets and can analyze it later
  • Import and export packets in different formats
  • Packet filtering information
  • Highlighting packages depending on the filter
  • Create statistics

Wireshark is also helpful for following professionals:
  • For network Administrators who can use it for solving different network problems
  • Engineers can use it for checking different security issues of network
  • Developers can use wireshark for debug and implementation of network protocols
  • Students can use it to learn how different protocol works internally in a network
  • Hackers use it to view equipment configurations as in this case cisco routing capture frames .. J



You can also use wireshark with Gns3 for packet capturing, this is the default packet capturing tool that comes with full GNS3 package. By default it is auto configured with Gns3, you can confirm its configuration from edit/preferences. you can see it default setting in figure, if you have any issue with using wireshark with Gns3 you can match your setting with following setting:
For capturing any interface you can follow these steps:
1.       start you network device in Gns3
2.       right click on the link between the two devices/routers and then click on start capture
1.       it will ask you for interface selection, select the interface you want to capture the packets.

1.       Once you have selected your interface click on OK, this will open the wireshark, where you can see the all network packets movement access the selected interface.

I hope this short article is helpful for you and thank you for reading it.

CCNA EIGRP Exam Lab | Addition of new Router in EIGRP Process

$
0
0

Practice EIGRP LAB for CCNA:

Burtaqtech has a small network running with EIGRP as IGP protocol. EIGRP  has the AS number of 12 on all routers. Router MGT is also running static routing to the ISP. Burtaqtech has recently added the ENG router, currently which do ‘not have connectivity to the ISP-router. You have to perform the following tasks for completing the configurations:

Find the faults and correct the router configurations to provide full connectivity between the routers.
Following are the IP-address schemes of all the routers in the following network.

MGT
Fa0/0 – 192.168.77.33
S1/0 – 198.0.18.6
S0/0 – 192.168.27.9
S0/1 – 192.168.50.21

Parts2
Fa0/0 – 192.168.12.65
Fa0/1 – 192.168.12.81
S0/1 – 192.168.50.22

Parts1
Fa0/0 – 192.168.12.33
Fa0/1 – 192.168.12.49
S0/0 – 192.168.27.10

ENG
Fa0/0 – 192.168.77.34
Fa1/0 – 192.168.12.17
Fa0/1 – 192.168.12.1
Image Courtesy: actualtests.com 



Solution:
This the very simple Lab to configure in the CCNA Exam, all you have to do to advertise the EIGRP network of new added router “ENG” on MGT router. As MGT is the main router which is connecting all the routers to ISP. In our scenario on ENG the interface which is connected to MGT have the IP address of 192.168.77.x, so we will advertise this network on MGT router in EIGRP 12.

So you are required the following configuration for compleing the above EIGRP lab.
On the MGT Router:
Config t
Router eigrp 12

Network 192.168.77.0

CCNA access list Exam Lab with GNS3 Downloadable Configuration files

$
0
0

CCNA ACL Exam Lab with GNS3:

If you are preparing to attempt the CCNA (200-120) Exam, then you must prepare for access-list, because in every exam there is a lab related to assess-list where you have to complete the configuration in order to make the access-list working. I have created the similar lab in GNS3 so that you can practice it before going into the real Exam.


Lab Question:
A network-Engineer is making the security configuration of the Corp1 router. You have to perform the following task for completing these configurations:

  1. The user on host C must be able to use a web browser to access financial information from the Finance Web Server.
  2. No other hosts from the LAN nor the Core should be able to use a web browser to access this server.
  3. YOU ARE required to apply an access-list with no more than three statements that will allow ONLY host C web access to the Finance Web Server. No other hosts will have web from Finance Web Server.
  4. All other traffic is permitted.



Other Information:
The Core user have the IP-address of 198.18.196.65.
LAN PCs have been assigned with IP addresses range from 192.168.33.1 - 192.168.33.254.
The servers in the Server LAN have been assigned addresses of 172.22.242.17 - 172.22.242.30.
The Finance Web-Server has been assigned with IP address of 172.22.242.23.
Image Courtesy: actualtests.com 


Solution / Required Configurations
You can achieve these required task by following /configuration / commands on router Crop1:
Corp1>enable
Corp1#configure terminal
Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80
This command will allow the web traffic to finance web server, Where 192.168.33.3 is the IP address of host C.
Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80
This command will block the web access of any other host to finance web server
Corp1(config)#access-list 100 permit ip any host 172.22.242.23
Above command will allow the any other traffic.
.
Apply the ACL to interface near to destination:
Corp1(config)#interface fa 0/1
Corp1(config-if)#ip access-group 100 out
Corp1(config-if)#end
Corp1#copy running-config startup-config

Verification of Configuration:
You can access the web only from 192.168.33.3 to Finance Web Server.

CCNA Access-list Exam lab In GNS3:


If you have some extra time you can configure this lab in GNS3… J You can also configure it with packet-tracer which is easy as compare to GNs3 But I have configured the same lab in Gns3, you can download these configuration files from here and can complete it with above configurations. Simply download the files (link are given at the end of post), create the topology same like shown in the figure and then upload these files on every router one by one. This will provide the initial practice before going into the real exam.

IN GNS3 For making the communications between Corp1, Lan Hosts (A,B,C,D) and finance servers I have configured the EIGRP AS 100, while in the real lab you have the by default communication between these devices.
For host-C and finance web server and other servers I have used the VMs of VirtualBox. I have used internet NIC with them With following IP configurations:
Host-C
192.168.33.3\24
Gateway=192.168.33.254
Host-B
192.168.33.2\24
Gateway=192.168.33.254
Finance-web-server
172.22.242.23\24
Gateway=172.22.242.30

For creating the web service on finance server I simply install the IIS and hosted a web-page named index.html. You can install the IIS on windows XP from control panel\add & remove feautures\add&remove windows components and the select the IIS and click on next and complete the wizard.
I have created a web-page (index.html) for test and place it on c:\inetpub\wwwrootof finance web-server. After completing the above configuration you can test the configuration with the followiway.
  1. open the internet explorer and access the shared web page with URL “172.22.242.23\index.html”, it will be successful from host-c as shown in figure.

  • Now try the same from Host-b page will be inaccessible.


IDLE PC GNS3 | High CPU Problem Minimize The 100% Usage

$
0
0

What is Idle PC value?


GNS3 Idle PC values are used for controlling and limiting the processor usage of your computer. In backend GNS3 uses Dynamipsthe software for emulating the real Cisco IOSs. Emulating the real Cisco ISO images causes the high usage and processing of CPU processor to 100%. So here comes the concept of idle PC values, after apply the idle PC value you can minimize the CUP usage.

If you are thinking that why before applying idle PC CPU usage is 100%. For clearing you confusion I am quoting here Jeremy Grossmann. According to Jeremy Grossmann Gns3 Programmer “dynamips attempts to emulate programing instructions one at-a-time as fast as it can, this is resulting up to 100% CPU usage. The Idle-PC is a guess at where the Program Counter might be pointing to an idle-loop in the emulated router. When emulator has visits this PC value Idle-Max times, it suspends itself for Idle Sleepms to allow other processes to get on their tasks.”
Basically Idle PC values find the intervals/time when the IOS is not executing any instructions and puts the router into an idle state. Which results the decreases in CPU usage on your computer. 

How to calculate and apply the idle PC value to Router


There are number of ways in GNS3 1.1 & later version for applying the idle PC values. I am going to discuss these method one by one.
Method 1:
You can set the idle PC value during adding the IOS image in GNS3. During the IOS adding wizard it will asked you for setting the Idle PC value. Remember this feature is only available in new versions. You can add the new IOS for your router from Edit/preference/dynamips/IOS routers.  If you want to learn more about adding IOS in GNS3 you can visit here.

Method 2:
You can change add or change the idle PC value for already added IOS image from Edit/preference/dynamips/IOS routers.  Select your router for which you want to change the idle PC and then click on the editand go to advance tab and put the new idle PC value there. you can also review the following figure for details.
Method 3:
You can set idle PC value once you have successfully loaded IOS to the router, when you create a topology in GNS3. After starting the all devices in gns3. Wait a little when the router fully loaded.

Right click on the router and select Idle PC, GNS3 start calculating the idle PC value for your router.
It will take some time for calculating the Idle PC, once it is done you will find different values. Idle PC values with * are recommended so apply any idle pc value with *.

After applying the idle PC, if there is not effect on CPU usage then you can retry the same process again. In few cases you have to perform this process for two to three times for getting the ideal value for your router. Once Idle PC value has been successfully applied, you will notice a drop in the CPU usage.

GNS3 Idle PC Problem: “Could Not Find Asterisk in the Idle PC”
This happens commonly, what do we do if there is no asterisk symbol near to idle PC value?
In such situations, stop the GNS3, close it and start again and then perform the steps again for idle PC. You should repeat this process until CPU usage goes down to10-15%. You can also lower the CPU usage by applying the idle PC value without Asterisk symbol if it reduces CPU usage considerably.
I hope this article will help you in lowering the idle PC value of your GNS3. Please share your experience regarding IDLE PC value.

How to Configure Router in GNS3 1.5

$
0
0

How to configure Cisco router in GNS3

GNS3 a well-known network simulator use for configuring, simulating or visualizing Cisco network devices. Using GNS3 you can create different cisco networking lab. GNS3 uses real IOS images of Ciscofor creating networking labs. In this article I will show you how to configure router in GNS3. For this you can follow these step:

Step-1 Add IOS in GNS3:

For simulating or using any network device in GNs3 you are required the IOS images, you can download Cisco IOS images from here. Once you have IOS images now you are required to add these IOS images into GNS3 so that you can use them for networking labs. For this open the Edit\preferences (or press Ctrl+shift+P)
and then navigate to IOS routerunder the dynamips and Click on New for adding new image that you have downloaded from internet. Now browsethe image from "IOS path" and in next steps define RAM, IDLE PC value and other required information regarding IOS and finish this wizard.

For more detail you can watch this Video:





Once you finish this wizard you will find the IOS in top left panel under the router section.



Step-2 Add Router to GNS3 Workplace:

Once you able to adding IOS in GNS3, now you can use it for simulation labs. Drag routers from left panel to workplace same like the following figure where I have added two router to workplace.



For making connection between two routers click on add a link button from left panel and then click on router for making connection and choose the interface like “fastether0” and then click on the other for creating connection between them.



Add more interface in GNS3 router


You can change or add any other desire module in you router. For this double click on the router for adding other interfaces/Modules. Now from the slot tab select your desire module from dropdown module.


After adding more module your will find more interfaces in your router as shown in the following figure.

Step-3 How to Configure Router in GNS3:


Now start any router which want to configure for this right click on the router and then click on the start.  


Right click on it and then click on the console, this will open the router console from where you configure your cisco router. It will takes some time while loading the IOS once it is loaded you can start configuring it. Press enter it will take you to the default mode that is User EXEC Mode (Router >). Use enable command from user exec mode for entering into Privileged EXEC mode.
You can try different Cisco Command and can configure your router for example if you want to change router name you can change it using command hostname in global configuration mode.

for configuring IP address to any Cisco device interface by using the following commands:
Router(config)#interface fastethernet0/1
Router(config-if)#ip address 192.168.22.1 255.255.255.0
Above command will set the IP address of interface fastethernet0/1 to 192.168.22.1. For more Cisco commands you can visit here: Cisco basiccommands for beginners


I hope this is informative for you, if you still having any issue while configuring router in GNS3 you can ask any question in commands. Thank you for visiting and reading this.

Redistribute static route into EIGRP re-distribute Static Lab

$
0
0

Redistribute static route into EIGRP

In an inter-network environment, normally you have a single routing-protocol for ease of controlling your network. But when you are connecting the multiple networks, branch office with each other then there may be the different routing protocol.
Route Redistribution permits routes from one routing-protocol to be advertised in-to another routing-protocol. The routing protocol which receives these redistributed-routes are normally marked the routes as external-routes. External-routes are generally less preferred than locally originated-routes.
You can redistribute routes from one routing protocol to same routing protocol, like two separate OSPF with different process ID’s.
Redistribute static route into EIGRP
Similarly you can redistribute static routes and connected interfaces into a routing protocol as well. This article is about the redistributing the static routes into EIGRP process. For simplicity and clear understanding I have designed a lab in packet tracer.
Lab Objectives

We have three routers R1, R2 and R3. R1 and R3 are running with EIGRP and our objective is to redistribute the static routes from R2 into EIGRP so that these can be available at R3 as external routes.
I have configured this lab on GNS3 with following configurations:
Configurations on R2

R2(config)#interface f0/0
R2(config-if)#ip address 50.0.0.1 255.255.255.0
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#interface loopback 1
R2(config-if)#ip address 10.10.10.1 255.255.255.0
R2(config-if)#interface loopback 2
R2(config-if)#ip address 20.10.10.1 255.255.255.0
R2(config-if)#interface loopback 3
R2(config-if)#ip address 30.10.10.1 255.255.255.0
R2(config-if)#interface loopback 4
R2(config-if)#ip address 40.10.10.1 255.255.255.0

Configuration of static routes for not directly connected routes:
For static route configurations you are required to advertise destination network with next hop address via static route command as following:
R2(config)#ip route 150.0.0.0 255.255.255.0 50.0.0.2
R2(config)#ip route 100.10.10.0 255.255.255.0 50.0.0.2
R2(config)#ip route 200.10.10.0 255.255.255.0 50.0.0.2


Configurations on R3
R3(config)#int f0/0
R3(config-if)#ip address 150.0.0.2 255.255.255.0
R3(config-if)#no shut
R3(config)#int loopback 1
R3(config-if)#ip address 100.10.10.1 255.255.255.0
R3(config-if)#exit
R3(config)#int loopback 2
R3(config-if)#ip address 200.10.10.1 255.255.255.0
R3(config-if)#exit

R3(config)#router eigrp 10
R3(config-router)#network 150.0.0.0 0.0.0.255
R3(config-router)#network 100.10.10.0 0.0.0.255
R3(config-router)#network 200.10.10.0 0.0.0.255

Configurations on R1

R1(config)#int f1/0
R1(config-if)#ip address 50.0.0.2 255.255.255.0
R1(config-if)#no shutdown
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip address 150.0.0.1 255.255.255.0

R1(config)#router eigrp 10
R1(config-router)#network 150.0.0.0 0.0.0.255
R1(config-router)#network 50.0.0.0 0.0.0.255

R1(config)#ip route 10.10.10.0 255.255.255.0 50.0.0.1
R1(config)#ip route 20.10.10.0 255.255.255.0 50.0.0.1
R1(config)#ip route 30.10.10.0 255.255.255.0 50.0.0.1
R1(config)#ip route 40.10.10.0 255.255.255.0 50.0.0.1

Static Routes redistribution into EIGRP Configurations
For Static Routes redistribution into EIGRP you need to permit all the static routes with a route map which you want to redistribute into EIGRP. For this you are required a access-list with all IP which are going to redistribute in EIGRP.

R1(config)#access-list 7 permit 10.10.10.1
R1(config)#access-list 7 permit 20.10.10.1
R1(config)#access-list 7 permit 30.10.10.1
R1(config)#access-list 7 permit 40.10.10.1

R1(config)#route-map static-to-eigrp permit 10
R1(config-route-map)#match ip address 7

Redistribution Commands:

R1(config)#router eigrp 10
R1(config-route-map)# R1(config-router)#redistribute static route map static-to-eigrp
R1(config-route-map)# R1(config-router)#redistribute static metric 10000 1 255 1 1500 (not compulsory in case of static routes)

Testing and verification of configurations:
After the successful configurations you will find the static routes in R3’s routing table as the external routes:
Network 10.10.10.0, 20.10.10.0, 30.10.10.0 and 40.10.10.0 are the interfaces configured at R1 and after complete configuration you can find these routes in R3 routing table.
You can also perform an end to end ping for testing. Following are some other redistribution labs you can visit these as reference and learning.



Gateway of last resort is not set In Cisco Router

$
0
0

Gateway of last resort is not set In Cisco Router or Switch

You may notice the Line “gateway of last resort is not set” in output when you use the cisco commandShow IP Route. This short article will explain that why you are getting this message.

Cisco router gateway of last resort

"Gateway of Last Resort is not set” means that there is no default route for IP packets which have no match with routing table. Gateway of last resort are routes use to avoid your router from dropping packets with unknown networks those are not exist in routing table
Routing table have the list of all known routes. Every time when a router receives a packet, router matches it with routing table entries if it present in routing table then it forward to that path and if route not present in routing table then it is forwarded to default gateway or default route.

How to set Gateway of last resort in router

You can configure or set a default gateway, or route of last resort with following commands:
  •  ip default-network    
  • ip default-gateway    
  • ip route 0.0.0.0 0.0.0.0


ip default-gateway

The ip default-gateway command is used when ip routing is disabled on Cisco-router. Following example defines the default route on router to 172.16.15.4:
ip default-gateway 172.16.15.4


Instead of ip default-gateway command, you can use ip default-network when ip routing is enabled on Cisco-router. When you configure ip default-network the router considers routes to that network for installation as the gateway of last resort on the router. Gateways of last resort selected using the ip default-network command are advertised differently depending on which routing protocol is advertise the default route. For IGRP/EIGRP to propagate the route, the network specified by the ip default-network command must be known to IGRP or EIGRP.
RIP advertises a route to 0.0.0.0 if a gateway of last resort is selected using the ip default-network command.
The default route advertised with the ip default-network command is not propagated by IS-IS and OSPF.

IP Route 0.0.0.0

Creating a static-route to unknown network is another way to set the gateway of last resort on a router. IGRP does not recognize a route advertise with static route command to 0.0.0.0. You are required to use the ip default-network command in case of IGRP. EIGRP advertise a route to network 0.0.0.0, but thestatic route must beredistributed into the routing protocol.
RIP routers running Cisco IOS 12.0T and later does not advertise the default route where as in earlier version it automatically create a default route 0.0.0.0.

Summary:
Use the ip default-gateway command if the ip routing is disabled on Cisco-router and Use the ip default-network and ip route 0.0.0.0 0.0.0.0 commands to set the gateway of last resort on Cisco routers that have ip routing enabled. The way in which routing-protocolsadvertise the default route differs for each protocol.

Quick Tip:
For setting network of last resort like use the following command:
ip default-network <IP address of gateway>

PPTP vs OpenVPN | Difference between OpenVPN and PPTP

$
0
0

PPTP vs OpenVPN What is the difference between OpenVPN and PPTP

This article is about the difference between  OpenVPN and PPTP. Following are some important differences of  OpenVPN and PPTP.

PPTP

OpenVPN

 Point-to-point tunneling protocol (PPTP) is a VPN protocol used for fast and easy to use protocol. PPTP is a good choice if Open-VPN is not supported by a device.
OpenVPN has Highest performance, fast, secure and reliable which uses open source technology like OpenSSL-encryption and SSL v3-TLS v1. OpenVPN is recommended protocol for OS including Windows, Linux and Mac. Can be slightly slower than PPTP and introduce more overhead.

PPTP Supports Encryption level up to 128 bit session encryption-keys.


OpenVPN Supports Encryption level up to 256 bit session keys, however the session-keys can be vary. Exceptional data security when using AES-256 encryption

PPTP Uses TCP port and GRE Port Configuration.

 You can configure OpenVPN with TCP or UDP ports. Uses port 443 by default, so it looks like HTTPS traffic
·          

PPTP is Very stable and accepted by most Wi-Fi hot-spots.

OpenVPN is the Most stable and reliable even on non reliable networks, behind wireless-routers and on Wi-Fi hot-spots as well.
In PPTP the data encryption is done using the Microsoft Point-to-Point Encryption Protocol.
Where as in Data encryption is done with the OpenSSL library in OpenVPN.

Following are the supported OS by PPTP:
Windows
Mac
Android
Following are the supported OS by OpenVPN:
Windows
Mac
Android
PPTP is less secure as it uses the Basic encryption.
OpenVPN is most secure as it uses the highest encryption and will be most secure if its set to use AES-encryption instead of the weaker-Blowfish encryption.
PPTP is Fast due to lower encryption.
OpenVPN is also best performing protocol with fast speeds, even on connections with high latency and across great distance.
PPTP is old and vulnerable protocol, although integrated in-to common OS and easy to set up. But it is better to stay away from it.
OpenVPN is new and secure, although you ll need to install a 3rd party app.
PPTP is not an open source software
OpenVPN is open source software.

No additional software is required.
Typically requires downloading an extra software client

Drawbacks:
·         Rampant security flaws
·         Shouldn’t be used unless it is an only option
·         Weak encryption
·         Can be blocked easily by ISPs and networks

·         A little more difficult for non-technical users to setup without a guide and this is the one of the largest drawbacks to OpenVPN is that it isn’t always available as an option for non-technical users.
·         And because it isn’t offered by default with most operating systems, users first typically need to download an OpenVPN client-software. In addition, OpenVPN can actually be a little slower than other connection options such as L2TP/IPsec.



I hope this is informative for you, i tried to cover all aspects in this post. You can add or share your comments for improving this post. Thank you!

VPN Configuration on Gns3

SSTP VPN Features and advantages

$
0
0

SSTP VPN Features and advantages:

SSTP (Secure Socket Tunneling Protocol) is a Microsoft proprietary VPN protocol which works only on Windows based OS, it is considered secured VPN tunnel that provides a way to transport PPP-traffic through an SSL or TLS channel. Which provides transport level security with encryption, key-negotiation, and traffic-integrity checking. SSL or TLS uses TCP port 443 which allows Secure Socket Tunneling Protocol to pass through virtually all firewalls and proxy-servers but except for authenticated web-proxies.
SSTP is generally considered to be one of the most secure protocols for VPN, although it does not have the same open-source benefits as OpenVPN

How SSTP VPN works?

In SSTP a client-device can connects with server using port number 443 after having the internet access. You are required authentication on client side only; client gets server’s certificate for authentication and if it is invalid then the connection gets terminated. Once it is connected, client sends HTTPS-request as well as SSTP control packets, then PPP negotiation and after that PPP assigns IP interfaces to both ends. Now both sides are ready IP communication with each other.

Features and advantages of SSTP

SSTP VPN protocol has following advantages and features that you should consider beforehand to get the best out of it.
  • It uses the SSL port that is port number 443.
  • SSTP almost have the same advantages as OpenVPN and like bypassing NAT firewalls because of ssl port.
  • SSTP uses SSL transmissions instead of IPSec.
  • SSTP uses 2048 bits encryption & authentication-certificates.
  • SSTP can penetrate most of the firewalls.
  •  SSTP is supported by open source VPN server SoftEther.
  • SSTP is considered very secure because of the strong AES encryption.
  • SSTP supports Windows based operating systems like windows 7, 8 or 10.
  • SSTP provides Perfect Forward Secrecy.


On the other hand SSTP is a proprietary technology, SSTP is owned by Microsoft and does not have support for modern mobile and desktop OS.

This host supports Intel VT-x, but Intel VT-x is disabled.

$
0
0

This host supports Intel VT-x, but Intel VT-x is disabled.


Intel VT-x might be disabled if it has been disabled in the BIOS/firmware settings or the host has not been power-cycled since changing this setting.
(1) Verify that the BIOS/firmware settings enable Intel VT-x and disable 'trusted execution.'
(2) Power-cycle the host if either of these BIOS/firmware settings have been changed.
(3) Power-cycle the host if you have not done so since installing VMware Player.
(4) Update the host's BIOS/firmware to the latest version.
This host does not support "Intel EPT" hardware assisted MMU virtualization.
This host does not support virtualizing real mode. The Intel "VMX Unrestricted Guest" feature is necessary to run this virtual machine on an Intel processor.
Module 'CPUIDEarly' power on failed.
Failed to start the virtual machine.


You find the above messages when you try to create and running VM on windows 7 8 10 with VMware 14. This message appears because you try to use the virtualization on your PC but it is disabled on it. For resolving this you are required to enable it on your PC. You can enable it using following steps:
1. Restart your PC and enter into setup/BIOS mode, for Dell PC you need to press F2 in the start for BIOS setting.
2. Once you are in BIOS, find the option of virtualization.



3. Enable it and save the setting.
4. Restart your PC and try again by creating the VM in Vmware 14, this time you will successfully create your VM.

In case of issue you can share your experience in comments, also you are having PC with Core 2 Duo Txxxx processor you may get the following message:

"This host does not support "Intel EPT" hardware assisted MMU virtualization."

This means that your processor does not support EPT virtualization but you can either use and download VMware12.5.7. This should still support the TXXXX CPU. I hope this is helpful for you, thank you for visiting.


GNS3 VMware how to use gns3 with vmware for TinyCore

$
0
0

How To Use GNS3 with vmware ?

In this article, I will show you how to add VMware-VMs to GNS3 labs. With new GNS3 you can use the different virtual devices with VMware in batter way like if you want to use Qemu it is better to use the Timy core VM with GMS3.

In this article, I will show you how to use VMware with Gns3, for this we will follow these steps:

1. Installation of VMware
2. Creation of TinyCoreVM in VMware
3. Connecting VM with Gns3
4. Configuring TinyCore VM in Gns3

Installation of VMware:

Installation of VMware the simplest step, you can download it free from internet and can install it easily by completing the simple wizard. You can want the following video regarding the installation of VMware 14 for reference.


Creation of TinyCore VM in VMware:
Once you have installed the VMware now you are required  "TinyCore IOS" for creating VM in VMware. If you don't have this then you can download it free from their website or by using following links:
Download TinyCore IOS for GNS3 64bit
Download TinyCore for Gns3

Now start the VMware 14 on your PC, click on "create a new Virtual Machine" a wizard will be started.



First it will ask for type of configuration for your VM, if you are beginner you may choose typical.



In next step, you are required to locate the TinyCore IOS which you have download in previous step, for this click on browse and define the path for TinyCore IOS.


Now select the OS for your VM, in case of TinyCore you need to select Linux and Ubuntu.



Now define the VM name



Now you need to define the disk size for Qemu, and 1 GB is enough and in next step from Customized hardware select the RAM 512MB for your Qemu and finish the wizard.



Once you have created VM in vmware you may get this error while turning it on, "This host supports Intel VT-x, but Intel VT-x is disabled" for details you can visit this link.

Connecting TinyCore VM with Gns3:


Now open the Gns3, goto edit and open preferences and click on VMware VM and click on new.



Select your desire VM from List and click finished, i have select Qemu VM 8.0 which we have careate in previos steps.



now this VM will appear in "end devices"list. Drag some VM on stage with router and create topology.



Configuring TinyCore VM in Gns3:


For configure TinyCore host right click on it click on start.  Once it is loaded now click on control panel for IP configuration as shown following. Configure the tinycore with an IP address in the same subnet as of router.



Now click on network and configure the relevant IP address and other details & click Apply and then Exit.

I have assigned the following setting:

Interface: eth0

IP address: 10.1.1.2

Mask: 255.255.255.0

Broadcast: Nil

Gateway: <IP of connected router>

DNS: Nil

I hope this article is informative for you, please share your thoughts in comments. THANKS

Download Tiny Core 8 LINUX IOS for Gns3

$
0
0

Download Tiny Core LINUX IOS for Gns3:


TinyCore Linux is a limited Linux OS focusing on providing a base system for running different basic services. TinyCore is free and open-source software & it is normally used in virtual topologies for creating different network scenarios. You can install this IOS on windows using VMware 14 and can use it as GNS3 host. If want to learn how to use tiny core as Gns3 host you can visit here.

From here you can download Tiny core 8 IOS for your GNS3 for free. Download and install the IOS in Vmware and then use it as GNS3 host (PC)

Download Tiny Core LINUX IOS for Gns3

I hope this is helpgul for you, please share your comments in case of any issue. Thank you.!

GNS3 Recommended hardware Specs and Minimum basic Requirements

$
0
0

GNS3 Recommended hardware Specs and basic Requirements

This article is about the hardware specification of GNS3, we will discuss the minimum hardware requirement and recommended hardware requirement for different scenarios. GNS3 the most popular network simulator use for simulating different virtual and real devices for creating the network labs. GNS3 base on Dynamips emulation software to simulating real IOS of Cisco. Since it is using the real router IOS of routers, therefore, its hardware requirement higher as compare to other network simulators. Also, GNS3's hardware requirements depend upon on the number of virtual devices you use in your Network Lab, therefore we discuss the different network scenarios and their hardware requirements according to different network engineers.


Minimum Hardware Requirements For Gns3:

As it is discussed earlier that there is no fixed minimum hardware requirement for GNS3 it depends on the number of virtual devices you use in your network topology. For minimum requirements suppose you want to create a network topology of three routers (2600 series) with GNS3 then following is the minimum hardware:

Processor= Pentium / Dual-core 2.0 (with virtualization feature)
RAM= 1 GB
OS= Windows 7 Service pack 1 or higher
For more routers and for creating the complex network labs in gns3 we define following chart for a minimum memory of single network device. when you use multiple network devices in your labs you can guess the minimum memory requirements with the following chart:

Minimun RAM for running single IOS/Router
2600 series IOS = 256MB
3700/3600 series IOS = 256 MB
7200 series IOS = 512 MB
VMware/VirtualBox Workstation= 512MB in case of XP
Tiny Care VM= 256MB (in case of older versions)
Qemu host=256MB

Idle PC value will help gns3 to consume fewer CPU resources. It’s specific to each different image or IOS.

Recommended Hardware Requirements For Gns3:

According to documentation and in view of different network engineers following is the recommended hardware requirements for simple network scenarios running with 5 to 6 routers. 

Processor= Quad core / i7 / 7th Generation
RAM= 8 GB
OS= in case of windows 64bit windows7,8,10 Or server 2012 or higher
Virtualization: virtualization extensions required.

your hardware requirements will increase, If you want to simulate the more advanced lab with many virtual devices, You have required at least 512 MB memory against single virtual Router, and it will be increment as your number of devices are increased and in case of VM/IOU its depends on their OS/IOS. In case of VMware VM running windows 7,8,10 2GB for each VM.

Cisco Server or ESXI Server Recommendations:



OS=Ubuntu 64 bit GNS3 Qemu 2.6.0 or latest Windows 8.1 GNS3 VMWare Workstation
RAM= 64GB to128GB RAM.
Quad Core Processor

Last words: GNS3 hardware requirements directly depend on your network topologies, please share the hardware which you are using for your GNS3 in comments. Thank you for visiting...!

Stream from VLC player and access it on Android Phone

$
0
0

VLC Stream Server | Stream from VLC player and access it on Android Phone

In this article, I will show you the Step by step instructions how to Stream from VLC on Android from Your PC. You have required the following steps for accessing the stream on mobile from PC:

You can watch the video for quick go:



For Streaming media, you have required VLC 3.0.1 or Greater.

Go to Media\stream



Select the video record that you need to stream over the Network, and you can access it under the same network:



Now add the HTTP port and keep in mind the port for getting to the stream or accessing the stream server over the network or from your android mobile.

Once you finished this wizard VLC starts streaming the VLC file over the Network.

And you get to this stream over the network or under the same wifi router on PC or any ip device.

For accessing the stream you required IP address of PC where you enable the VLC streaning. You can use the "ipconfig" command in command prompt.

In our case, IP address is 192.168.10.8 and port is 8080

You can get to this stream on an android, for this, you are required to associate with same system/wifi switch.

Open VLC player on mobile and access the stream by following IP and port:
Http://192.168.10.8:8080


Related Keywords:

VLC Stream Server
cast vlc to chromecast
stream vlc to chromecast
vlc stream to samsung brilliant television
vlc streamer pc
vlc stream video
vlc television spilling
vlc organize stream android
open system stream vlc android
stream video from pc to android over wifi
stream video from pc to android over web
vlc open system stream
vlc streamer windows 10
vlc streamer free
vlc streamer android
vlc streamer ipad


Fixed: 502 Bad Gateway Error nginx chrome Firefox cloudflare bluehost

$
0
0

Fixed: 502 Bad Gateway Error nginx chrome Firefox cloudflare bluehost

When we browse the Internet we can find all kinds of errors and problems when trying to connect to different web pages, some of them may be our responsibility, such as a bad IP configuration, DNS and even not having Internet but others, such as error 404, be generated on the remote server. One of these most common remote errors is Error 502 Bad Gateway, which we will explain in this article.

The "Error 502 Bad Gateway" is an error that gives us the server when it is unable to process an incoming request for various reasons such as a failure of understanding between two servers or the server is unable to process certain tasks .
Web pages usually show this error in various ways, for example, saying that an error has just happened, as Google does, or blaming capacity problems when it is saturated and not being able to process all requests as in the case of Twitter.
As we say, this failure depends on the remote server that we try to visit, so we can not do anything to solve it. However, we do not have to give up, and even if we see this error when visiting a page, there are ways to continue accessing it as we will see below.

How to resolved Error 502 Bad Gateway on a web

Normally this type of errors are usually temporary, so the first thing we should do is wait a few minutes and try again the web page. In most cases, this is enough to make the web page reload normally. In addition, we can also force our browser to clear the cache and reload the web as we show you below.
In case the website still does not work, the next step will be to try to connect to it through a VPN server . It is possible that the saturated server that causes us error 502 is just responsible for offering access to our network and that, due to a bad load balance, this is not being correctly derived. Therefore, we can try to access our website from another part of the world with a VPN server and see if this connection works normally again. In this case any VPN could be enough, but we recommend Betternet.

Finally, if through the VPN server we still can not access the websites, the last step is to try to do it through the cache stored by different platforms on their servers. For this, for example, we can use the CachedView platform , enter the URL and see if we can load the temporary copy stored there.
If in these ways the web still does not work, there is not much more we can do except wait for the administrators of the page in question to finally solve it.
Have you ever encountered a web page that returns the 502 Bad Gateway error?

Cisco 800 Router Password Recovery by Rommon mode or Forget Password

$
0
0

Cisco 800 Router Password Recovery by Rommon mode 


In this article i will explain how to reset or change the password of Cisco 800 series router with the console cable. If you forget the Cisco router password then you cant able to load the configuration at startup, but you can reset the password because it is stored in the NVRAM of the router. Once the changes are made, we ask the Router to load it in each boot, staying as in the beginning but with the passwords that we have chosen.

For resetting the Cisco 800 password you are required to login into rommon mode or recovery mode of Cisco Router. For this you are required to follow these steps:
The first thing to do is connect to the Router with Hyperterminal using this configuration:
- Protocol: Serial- Port: Com1- Baud Rates: 9600- Data Bits: 8- Parity: None- Stop Bits: 1- Flow Control: None
Once you connected to the router, we have to make a break during the loading of the IOS . To do this, turn the Router off and on. The loading of the Flash will begin. You have to prevent it from loading and for that, we execute the key combination [Control] + [Pause/bresk] in the first few seconds repeatedly, to enter mode:
Rommon 1>

This is the emergency recovery mode and has several utilities; among them the one of making a recovery of the Passwords .
We now have to change the register option that causes the router configuration to load the boot configuration (the startup-config) which is the one that contains the passwords. For this we write in the console:
Rommon 1> confreg 0x2142
Once this is done we restart the Router with the "reset" command
Rommon 1> reset
The router then restarts normally but without loading the configuration. You let it finish and it will stop at some point to ask you if you want to create a basic configuration with the Auto-Setup. Tell everyone that they DO NOT or press [Control] + C directly until you stay in the Router's console.
Router>
Once here you can enter directly into privileged mode with the command
Router> enable
At this point you are in privileged mode having skipped the Passwords that are saved in the boot configuration. Now what we are interested in is loading the boot configuration in the memory to be able to change the passwords. With this command we load the configuration that the router has stored in the NVRAM to the RAM:
Router # copy startup-config running-config
Once this is done, you are inside the privileged mode of the router with the configuration it brought, but we have not finished yet, you have to change the passwords, correctly reconfigure the registry and save the changes so that they are not deleted when the router is turned off. We look at the values ​​that are running on the router, and the passwords.
Router # show run
Once this is done, we enter configuration mode to make the aforementioned changes.
Router # configure t
Now we change the passwords by replacing "password" with whatever we want
Router (config) # line console 0
Router (config-line) # password password
Router (config-line) # login
Router (config-line) # exit
Router (config) # line vty 0 4
Router (config-line) # password password
Router (config-line) # login
Router (config-line) # exit
Router (config) # enable secret password
Once we done, we change the config register to it default value so that router can be boot to normal startup on reboot.
Router (config) # config-register 0x2102
With this, we have indicated to the router that we want the next time it is restarted, load the configuration that it brought with the changes that we have made.
In order to finish do not forget to save the configuration of the router so that all the changes remain saved and they are applied every time you restart the router.
Router (config) # exit
Router # write



Gns3 1.3 32 bit windows 7 How to download

$
0
0

Gns3 1.3 x 32 bit windows 7 How to download:


Gns3 1.3 x 32 bit Download: Today i download the gns3 after the long time but i shocked to see the message that "This version of GNS3 is not supported on 32 bit editior of windows. Please download GNS3 1.3.x". Then i googled the query and found that there is no more support for 32 bit operating system.


GNS3 is an open source graphical-network=simulator that allows you to design complex network topologies. You can simulate or configure Cisco and other devices like workstations to powerful Cisco routers. GNS3 is based on Dynamips.


I search the "Gns3 1.3 x 32 bit Download" for Download but no link found for download. So Guy if you have old version of GNS3 then please share the link. Or comment how we can try it on windows 7 32 bit. 

CCNA EIGRP Exam Lab AS Configuration

$
0
0

CCNA EIGRP Exam Lab AS Configuration 

Question


CCNA EIGRP AS Configuration Exam Lab: Your office has added a new router Router3 to current network. But there is some configuration issue between Router3 and the network, because currently no router is receiving the routing-updates from Router3. All other connectivity like ISP Internet is working fine.
Your task is to recognize the faults in configuration and correct them in a way you get full connectivity between the all networks. All routers have the default password cisco. IP configurations of all devices are as under:
RouteRouter1
S0/0:
 192.168.36.13
S1/0: 198.0.18.6
S0/1: 192.168.60.25
Fa0/0: 192.168.77.33


Router2
S0/0:
 192.168.36.14
Fa0/0: 192.168.60.97
Fa0/1: 192.168.60.113

Router3
Fa0/1:
 192.168.60.65
Fa1/0: 192.168.60.81
Fa0/0: 192.168.77.34

Router4
S0/1:
 192.168.60.26
Fa0/0: 192.168.60.129
Fa0/1: 192.168.60.145


Solution and explanation
For troubleshooting the lab you need to check out the configuration on newly added router that is router3. Run the command show RUN on router3. From the output of router3, we find that it is wrongly configured with an autonomous number of 22. If the AS numbers among the connected routers are different then no adjacency will be formed. You also need to make sure that you have the same AS on the entire router in the network.
To correct the configurations, you simply need to re-configure router3 with the correct AS following configurations:
ROUTER3#configure terminal
ROUTER3(config)#no router eigrp 22
ROUTER3(config)#router eigrp 212
ROUTER3(config-router)#network 192.168.60.0
ROUTER3(config-router)#network 192.168.77.0
ROUTER3(config-router)#no auto-summary
ROUTER3(config-router)#end
ROUTER3#copy running-config startup-config
Check configuration on Router1:
You will notice that there is missing network of Router3. Therefore we have to advertise here so that it can accessible on Router3
ROUTER1>enable 
ROUTER1#configure terminal
ROUTER1(config)#router eigrp 212
ROUTER1(config-router)#network 192.168.77.0
ROUTER1(config-router)#end
ROUTER1#copy running-config startup-config
Verification:
After the above configuration you will have the full connectivity. You should check again with ping command from router3 to other routers!
Some new updates in EIRGP lab:
In the above simulation’s configuration if you find the passive-interfaceconfiguration in ROUTER1 configuration. If the link between ROUTER1 to Router2 or ROUTER1 to Router3 have the passive interface then we need to remove it. You can use the no passive-interface command because it prevents EIGRP routing updates from being sent on these interfaces. But if the “passive interface” is applied to the link between ROUTER1 and ISP-router in following way:
ROUTER1:
!
.
router eigrp 212
passive-interface s1/0
.
.
Then we don’t need to change anything on ROUTER1 because the link between ROUTER1 & ISP doesn’t need EIGRP to run on it.
There is a static router command ip default-network command in ROUTER1, this is correct so that all the routers can access the Internet.
That all, thank you for reading. Share your comments and CCNA exam experience. Visit some other practice labs for CCNA.

CCNA VLAN Exam Sim Troubleshooting Lab

$
0
0

CCNA VLAN Exam Sim Troubleshooting Lab

This practice Lab is related to "CCNA VLAN Exam Sim". In this lab you have three Cisco Switches with different VLAN configured on these. Your task will be to troubleshoot and find the missing or bad configuration so that the communication between all these switches are possible in required way.

Vlan Lab Question:

A network engineer has built a Layer-2 switched network in a Healthcare IT company. But these are some misconfigurations. You are directed to verify these configurations and fix all the issues  as per company's requirements.
Following are the company's  requirements:
  • Your first task is to verify and confirm that all switch ports are assigned with correct VLANs as shown in figure. You need to fix all  misconfiguration in these three Cisco switches
  • You need to check the trunk-links between these operational switches & the trunk-encapsulation method IEEE-802.1Q is used. You second task is complete all the trunk configurations and make sure all ports  between switches are configured as trunk-ports
In Exam when you will analyze the configurations you may find the following faults or misconfigurations. 

1. You need to check the Native VLAN configurations, there may be a native-vlan mismatch between SwitCH1 AND Switch3. You need to fix this fault with following configurations
Sw3(config-if)#switchport trunk native vlan 1
You need to match the native-VLAN onboth end, you can use “show int trunk” command on Switch1 to check its native-VLAN.

2. Different Switchport mode on Switches: For making sure the correct trunk configuration you need to check that trunk port on both switch must be configured as trunk. For example first you can check that the E0/0 on SW3 and E0/1 on SW2 must be configured as trunk port. 
SW3, SW2:
interface e0/0
 switchport mode trunk
 
interface e0/1
 switchport mode trunk

3. Check Access Side with Vlan configurations: You may find 1 port in VLAN 500 while other port in VLAN 600 on SWI and SW2 
SW1, SW2:
interface e0/2
 switchport mode access
 switchport access vlan 500
interface e0/3
 switchport mode access
 switchport access vlan 600
3. Check trunk-encapsulation IEEE-802.1Q configurations: You need to confirm the following correct configurations on SW3:
SW3:
interface e0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk


Viewing all 113 articles
Browse latest View live