Posts

Showing posts from 2016

ASA certificate

key pair Display current key pair ASAv921# show crypto key mypubkey rsa Remove a key pair ASAv921(config)# crypto key zeroize rsa label ASA921 WARNING: Keys to be removed are named 'ASA921'. WARNING: All device digital certificates issued using these keys will also be removed and the associated trustpoints may not function correctly. Do you really want to remove these keys? [yes/no]: yes ASAv921(config)# Generate general key pair ASAv921(config)# crypto key generate rsa WARNING: You have a RSA keypair already defined named . Do you really want to replace them? [yes/no]: yes Keypair generation process begin. Please wait... ASAv921(config)# Generate key pair and assign it a label ASAv921(config)# crypto key generate rsa label mykeypair INFO: The name for the keys will be: mykeypair Keypair generation process begin. Please wait... ASAv921(config)# Trustpoint  A trustpoint just a container in which certificates are stor

Cisco WLC

Image
Configure Packet Captures on AireOS WLC https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/211342-packet-captures-on-aireos-wlc.html Ports and Interfaces A port is a physical entity, two types of ports: distribution system ports and a service port. Controller Service Ports Distribution System Ethernet Ports Serial Console Port 2100 series None 8 (6 + 2 PoE ports) 1 4402 1 2 1 4404 1 4 1 5508 1 8 (ports 1–8) 1 Cisco WiSM 2 (ports 9 and 10) 8 (ports 1–8) 2 Controller Network Module within the Cisco 28/37/38xx Series Integrated Services Routers None 1

DMVPN QoS

Image
DMVPN QoS      In this topology, R1 is DMVPN HUB router, R2-R4 are spoke routers. R1-R4 have default route point to R5, so all routers have reachability on their outside interfaces. 1. Create DMVPN Hub: R1#sh run int tun0 Building configuration... Current configuration : 242 bytes ! interface Tunnel0  ip address 192.168.0.1 255.255.255.0  no ip redirects  ip nhrp map multicast dynamic  ip nhrp network-id 1  tunnel source FastEthernet0/0  tunnel mode gre multipoint  end Spoke: R2-R4: interface Tunnel0  ip address 192.168.0.[2-4] 255.255.255.0  no ip redirects  ip nhrp map 192.168.0.1 172.16.15.2  ip nhrp map multicast 172.16.15.2  ip nhrp network-id 1  ip nhrp nhs 192.168.0.1  tunnel source FastEthernet0/0  tunnel mode gre multipoint end Verification : R1#sh dmvpn Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete         N - NATed, L - Local, X - No Socket         # Ent --> Number of NHRP entries with same NBMA peer         NHS Stat