Tuesday, 29 September 2009

PIX/ASA Remote Access VPN with L2L VPN and Failover

Well I was going to do a nice multiple context PIX/ASA lab, but after playing around with GNS for a while and a good few hours into the lab I came to a brick wall.

The brick wall being that if you use multiple contexts you cannot use VPNs:
(http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/contexts.html#wp1116132)

So I created this lab instead:




If I get time ill upload the config tonight.

Monday, 28 September 2009

Load Balancing With HSRP

Got a nice simple lab for you today, load balancing with Hot Standby Routing Protocol.

HSRP is designed to increase the redundancy in LAN gateways. It does this by creating a Virtual MAC address and Virtual IP address.
One router of the "group" is elected as the "active" and the other the "standby", therefore once the "active" router, say for example gets accidentally turned off, the "standby" takes over.

Here is the picture of the lab:





Here is the important configuration:
R2

interface FastEthernet0/0
ip address 10.0.0.2 255.255.255.0
duplex auto
speed auto
!This is the virtual ip group 1
standby 1 ip 10.0.0.253
!I want this router to be the active router
standby 1 priority 12
!Take over active when your priority is higher
standby 1 preempt
!Any name here
standby 1 name Load1
!When this interface goes down, decrease my priority by 10
standby 1 track Serial0/0

!This is the virtual ip group 2
standby 2 ip 10.0.0.254
!I want this router to be the standby router
standby 2 priority 11
!Take over active when your priority is higher
standby 2 preempt
!Any name here
standby 2 name Load2
!When this interface goes down, decrease my priority by 10
standby 2 track Serial0/0


R3

interface FastEthernet0/0
ip address 10.0.0.3 255.255.255.0
duplex auto
speed auto
standby 1 ip 10.0.0.253
standby 1 priority 11
standby 1 preempt
standby 1 name Load1
standby 1 track Serial0/0
standby 2 ip 10.0.0.254
standby 2 priority 12
standby 2 preempt
standby 2 name Load2
standby 2 track Serial0/0



Note that for the load balancing to work 50% of the devices have 10.0.0.253 as their default gateway and the other 50% have 10.0.0.254.

Enjoy :)

Monday, 14 September 2009

Wednesday, 9 September 2009

MPLS VPN with MP-BGP

Currently working on a new lab, here is the setup:




More to follow...

Monday, 7 September 2009

Vyatta - Remote Access VPN Lab

Hi again this is the setup:



This lab details setting up NAT on vyatta routers, OpenVPN with TLS authentication, basic firewall setup and all the steps inbetween.

Here is the video:

Vyatta Remote Access OpenVPN lab with NAT and Firewall setup from Richard Vimeo on Vimeo.



Enjoy!

Tuesday, 1 September 2009

Vyatta Vmware Lab

Hi again,

Just to spice things up a little I thought I would do a lab on vyatta, so I dug out part of an old lab, and presto - A Vyatta based OSPF 3 site lab:


and this is how I did it:

Part 1:

Vyatta Vmware Lab Part1 from Richard Vimeo on Vimeo.



Part2

Vyatta Vmware Lab Part2 from Richard Vimeo on Vimeo.



Enjoy!