Tuesday, 29 October 2024

review eol switches for replacement

The eol doc will recommend a replacement path. If not your will need to figure it out.


check software and hardware

check for fibre connections

check cdp

check routing (2 eigrp neighbors we may need advantage license)

sh ver (check port numbers)

sh inv | i stack (check stack cables)

sh switch

Thursday, 24 October 2024

Tuesday, 22 October 2024

ip sla config examples

ip sla 1

tcp-connect 192.168.0.1 23 control disable (use telnet port)

ip schedule 1 start-time now life forever

sh ip sla stat


ip sla

tcp-connect 192.168.0.1 5555 source-ip 192.168.0.2 control enable (standard port)


R2

ip sla responder


***********************************

ip sla 2

icmp-echo 192.168.0.2 source-ip 192.168.0.1

freq 5

ip schedule 2 start-time now life forever


can use with the track object to change routes 

track 2 ip sla 2

sh track


*************************************

udp-echo

ip sla 3 

udp-echo 192.168.0.2 5000

freq 5


ip schedule 3 start-time now life forever


R2

ip sla responder udp-echo


*************************************

ip access-list extended SLA (acl if you want to see the ef packets going up)

permit ip any any dsp ef

permit ip any any


int fa0/0

ip access-group SLA in

int s0/1 

ip access-group SLA in


ip sla udp-jitter config

ip sla 4

udp-jitter 192.168.0.2 6000 g729a control enable

freq 5


ip schedule 4 start-time now life forever

show ip sla stat 1





Wednesday, 16 October 2024

switch a meraki mx to bridged mode with vodafone DSL

Switch meraki first to PPPOE as you will lose connection once you switch the modem into bridge mode. You can still access via the local status page mx.meraki.com

PPPOE settings to config vodafone modemL

username: [serial_number_of_modem]@vfiefttc.ie

password: broadband


Then switch vodafone modem to Bridged mode

You may need to untick TR-069 (used for managing CPE devices)

You may need to reboot vodafone modem for it to go into bridge mode

Wednesday, 25 September 2024

whitelist domains on checkpoint firewall

 https://support.checkpoint.com/results/sk/sk173345


meraki local status pages to access from local LAN

MR - http://ap.meraki.com

MS - http://switch.meraki.com 

MX - http://mx.meraki.com or http://wired.meraki.com

MG - http://mg.meraki.com

Any - http://setup.meraki.com or http://my.meraki.com

FYI - Cisco reset local status page passwords, it used to be admin and the serial of the device but in 2025 cisco auto generated one and asked users to set a password.

https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page

ISE-PIC

ISE-PIC requires a zero cost license which needs to be ordered from your usual disti.


Name: isepic

Product:Identity services engine

PID: ISE-VM-K9

L-FMC-ISE-PIC

L-FMC-ISE-PIC-BSE





Install in VMware

Pre-reqs
Make sure you have the ISE-PIC license (free / 0 cost)
Download ISO from cisco.com
Download latest patch file from cisco.com
Upload ISO to datastore on VMware
Make a DNS record with your ise-pic server name > IP


Create VM in VMware
CPU: 4
RAM: 16 GB
Disk: 300 GB (saw issues with just 200)

  • Right-click on your ESXi host or cluster → New Virtual Machine

  • Choose "Create a new virtual machine"

  • Give the VM a name (same as the DNS record you created)

  • Select the target host or cluster

  • Choose a compatible datastore

Configure the VM:

  • Compatibility: Choose based on your vSphere version (e.g., ESXi x.7 → VM version 14)

  • Guest OS:

    • Family: Linux

    • Version: Red Hat Enterprise Linux 8 (64-bit)

    • In VM options disable secure boot


Don't tick ISO yet
Once VM is created
Edit VM, selectg boot from CD/ISO
Select the drop down for datastore 
Find your .ISO file

Boot the VM

ISE-PIC ISO install
  • The ISO will boot install
  • When you are prompted for username/password
  • type "setup" to configure 
  • Fill in your IP / subnet / domain / DNS servers etc / enable SSH
  • Finish
  • ISE will take some time to install
  • Once you get login prompt it will still take a bit longer to start up services
  • On CLI you can run "show application status ise"