SHARIFUL's TECH BLOG

Today I will talk about how to setup a IPSec Site-to-site between a Fortigate firewall and Cisco IOS router. Our network topology looks like this - IPSec Site-to-Site VPN All the devices are configured with necessary IP addresses according to the network diagram. Traffic between 192.168.10.0/24 and 192.168.20.0/24 will travel via IPSec tunnel. The tunnel is created over the 172.16.51.0/24 network. In this example the tunnel endpoints are in the same network. In real life they are almost always in different networks controlled by different companies. We will start configuring the Cisco IOS router first. Creating isakmp policy (phase 1) crypto isakmp policy 10  hash md5  encryption des  authentication pre-share  group 5 Here we are defining our policy for phase 1 which are - Encryption - DES Authentication - MD5 D-H group - DH5 Authentication Method - pre-shared key Defining pre-shared key and peer crypto isakmp key juniper a...

All of us who are practicing CCIE R&S labs faced the same problem - how to generate mcast traffic for the lab setup and verify mcast routing operation. Today I will try to show some ways generate mcast traffic by using very basic topology and verify the network operation. Our lab setup looks like following – Fig – Network setup for mcast routing We have configured the network according to the addressing plan given above. We have enabled mcast routing in all routers. All interfaces of the routers are configured in PIM-SPARSE-DENSE mode. IGP (RIPv2) is also configured to get end-to-end reachablity. For discussion, R2 configuration is given below ip multicast-routing int s2/0 ip pim sparse-dense-mode int s2/0 ip pim sparse-dense-mode int fa1/0 ip pim sparse-dense-mode router rip ver 2 no auto-summary network 0.0.0.0 Our mcast source is SW1 and receiver is SW2 . SW1 will generate mcast traffic for group 224.1.1.1. SW2 will use IGMP to join this group and receive the mcast traffic. Fo...