Muses from beyond
Anything related to routing.
Hello, there.
This blog is a follow up to my previous blog.
I decided to make it a bit more realistic. So I added another IOS router for redundancy and also use a route reflector for BGP.
Let’s go. Continue reading “SRV6, L3VPN, Route Reflector, Oh My!”
Hello there.
For something completely different now.
I have read about SRV6 and the benefits it brings. Never used it in production though.
Thus I decided give it a try, created a lab and configured it to use SRV6.
So let’s go. Continue reading “SRV6, L3VPN, No MPLS, Oh My!”
Hello there,
It has been a while since I posted.
I decided to do DDNS on my home network using Bind9 and the ISC DHCP server.
As always you test on a lab first.
I have EVE-NG and I was running a lab with DDNS and IPV6.
I used Fedora core so to make it like my network I replaced the server with Ubuntu 20.04.
However, I run into an interesting problem.
Hello again.
This is a follow up to my previous post about NAT64.
I decided to do a few minor improvements to the lab, nothing out of the extraordinary.
Hello again,
The other day I came across a configuration by Cisco in regard to NAT64.
As you are aware, NAT64 permits IPv6 only networks to access IPv4 networks and vice versa.
Of course, they are not entirely IPv6 only networks since they probably have an IPv4 gateway somewhere allowing them to access IPv4 networks on the Internet.
I decided to do the lab and test it using EVE-NG. Continue reading “NAT64 Lab Using Cisco’s ASR and DNS64 (Maybe).”
Hello,
In a previous post, I have shown a configuration using Hostapd, Ubuntu and a Belkin USB dongle allowing me to have Wi-Fi access.
This work reasonably well but the speed of the dongle was 54 Mbps only. So I decided to buy a Panda PAU06 Wireless N USB adapter.
The reason was that Panda claimed it was Linux compatible and it will operate at 150 Mbps. I know 150 Mbps is so slow nowadays, but I do not need that much speed on the WLAN, all my devices are wired with Gigabit speed.
I do not have several people competing for bandwidth also.
If I need to stream something I use, the media center connected to a big-screen TV.
This setup actually worked fairly well, using Fedora 29 on VMWARE Workstation.
The setup used routing and that created some issues with the “/64” prefixes I am given by my provider that you can read in that post.
Well, I accidentally deleted the VM guest the other day, yes I had no backup but I am always careful, this time it bit me in the behind.
Thus this time I decided to re-do the setup but instead use bridging to connect the LAN and WLAN interfaces. This is working rather well, so read on. Continue reading “Hostapd Revisited. Using Bridging for IPv4 and IPv6.”
Hello,
This is a follow-up to my previous post.
On that post I did show how to set up DNSMASQ so it can be used as a DHCPV6 alternative so IPv6 smart clients receive IPv6 addresses and be able to do DDNS and thus be able to have human readable names under IPv6.
I also pointed out that you could use DNSMASQ as a forwarder.
Continue reading “Dynamic DNS, Android Phones, IPv6 and DNSMASQ Follow-up.”
Hello again,
It has been a while since my last post. Too many things going on.
But in a previous post regarding the setup of DDNS, DHCP and IPV6, I mentioned that while Android phones are IPV6 enabled, they only support SLAAC configuration.
I also stated that using DNSMASQ, this could be overcome.
So here it is, keep on reading.
Continue reading “Dynamic DNS, Android Phones, IPv6 and DNSMASQ”
Hello,
As you already know IPv6 uses stateless configuration right off the bat.
If you have a small network, this is not a problem, and I mean small meaning maybe 10 or so devices.
You can manually update your devices using DNS and you will be fine.
But in the enterprise where you can have hundreds if not thousands of devices then you have a nightmare.
You will not remember IPv6 addresses as you did with IPv4, you need DDNS so devices can register themselves with DNS.
For this you would need the following.
I want to show you how to configure this using GNS3 and VirtualBox. This lab hopefully will be instructional.
It has been a while since I have entered anything on my blog. But a few days ago I came across a very interesting situation that is not common but it is counter-intuitive. It has to do with the way the Cisco ASA treats NAT in a very particular situation.
An ASA was configured to have split tunneling disabled for clients using the Any Connect Cisco client. The ASA we are using has several IPSEC tunnels to remote sites. As soon as the clients connected they did not have access to either the Internet or the remote sites. They can access the Internal LAN though.
The reason of course as you may have guessed it has to do with how to configure NAT.
So here we go.
Continue reading “ASA Any Connect Split Tunneling Or Why Are You Doing NAT from the Outside?”