Friday, September 16, 2011

H3C, 3Com AD

H3C, 3Com AD

HP’s H3C or 3Com series calls this attribute priority and their table is very different, compared to the Cisco. Static route has default value of 60. Of course that you can change all the priorities for all routing protocols and every static route can have their own priority.
Routing Protocol / Approach Priority
Direct 0
OSPF 10
IS-IS 15
STATIC 60
RIP 100
OSPF ASE (AS external) 150
OSPF NSSA (not-so-stubby-area) 150
IBGP 255
EBGP 255
Unknown 256

Putting It All Together

I have just described only few vendors and their version of AD. Now, I will try to put it all into one table.
Protocol Cisco Mikrotik Juniper H3C, 3Com
Directly connected 0 0 0 0
Static 1* 1 5 60
OSPF internal 110 110 10 10
OSPF AS external 110 110 150 150
OSPF NSSA 110 110 150 150
IS-IS Level 1 internal 115 - 15 15
IS-IS Level 2 internal 115 - 18 15
IS-IS Level 1 external 115 - 160 15
IS-IS Level 2 external 115 - 165 15
RIPv1, RIPv2, RIPng 120 120 100 100
eBGP 20 20 170 255
iBGP 200 200 170 255
Unknown 255 - - 256
*Since IOS 12.2, the administrative distance of a static route with an exit interface is 1. Prior to the release of 12.2 it was in fact 0. Static route out an interface is recognized somewhere between 0 and 1. Static route out an interface is more trustworthy than Static route to next-hop address.
From this table we can see that Cisco and Mikrotik have similar tables and Juniper and H3C have similar tables.
If you have anything interesting to this topic, please share your knowledge with us in comments.

Thursday, September 8, 2011

Comparing ISDN configuration with HP MSR with Cisco configuration 

HP MSR Router configuration



MSR201X_5.20.R2315 is the working IOS for HP MSR20-11  routers this ios is 5 month old ios
latest is R2317, Having the ISDN debugs in IOS .

sysname cb0659 
#
interface Dialer2
link-protocol ppp
ppp authentication-mode chap
ppp chap user cb0659 ------------Should be same as in cisco devices (dialer remote-name cb0659)
ppp chap password simple cisco
ip address 172.16.13.149 255.255.255.252
dialer enable-circular
dialer-group 1
dialer route ip 172.16.13.150 user cb0659 broadcast 0899999:  ----Remote ip address and user name should right (user name should match with cisco dialer remote-name cb0659)  . Required to broadcast the user.
#
interface Bri1/0
description ### Connected to anoopp3com@gmail.com Name ###
link-protocol ppp
ppp authentication-mode chap
dialer enable-circular
dialer-group 1
dialer circular-group 2

Dialer-rule 2 ip permit  (Permitting isdn traffic)

 Note: There no relation with user create local in HP device.No need to create the 

Local-user cb0659
 password simple XXXX
 service-type ppp


dialer circular-group 2 = interface Dialer2

Cisco configuration for ISDN

Username cb0659 password cisco123

interface Dialer37
 description XXXXXXX
 ip address 172.16.13.150 255.255.255.252
no ip redirects
 no ip unreachables
 no ip proxy-arp
 encapsulation ppp
 dialer pool 1
 dialer remote-name cb0659--------Should be same in HP dialer 2(ppp chap user cb0659)
 dialer idle-timeout 180
 dialer caller 0000000
 dialer-group 1
 no cdp enable
 ppp authentication chap
end




Note:- isdn switch-type basic-net3 in cisco is equal to the default parameter in Bri(L2) in MSR HP router 


ISDN-PROTOCOL <type> dss1




isdn switch-type basic-net3  = to =dss1(default in HP msr routers)


Some commands for isdn 


[0704]dis isdn active-channel

Bri1/0

  No active call

[0704]

[0704]dis isdn call-info
Bri1/0(User-side) : DEACTIVE (this not good L3 connection is not activated) 
  Link Layer 1:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 2:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 3:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 4:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 5:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 6:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 7:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 8:  TEI = NONE, State = TEI_UNASSIGNED
  Network Layer: 0 connection(s)

[704]
[704]dis isdn call-info interface Bri 1/0
Bri1/0(User-side) : DEACTIVE
  Link Layer 1:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 2:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 3:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 4:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 5:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 6:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 7:  TEI = NONE, State = TEI_UNASSIGNED
  Link Layer 8:  TEI = NONE, State = TEI_UNASSIGNED
  Network Layer: 0 connection(s)

[cb0]
[cb0]dis isdn call-record interface Bri 1/0  (equal to cisco show isdn call-history) 

Bri1/0
-------------------------------------------------------------------------------
Call Calling        Called         Start             Stop              Seconds
Type Number         Number         Time              Time              Used
-------------------------------------------------------------------------------

  No call record





Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...