2011년 11월 22일 화요일

#.[Cisco ASA] License Activate

ASDM>
ASDM->configuration->Device Management->Licensing-Activation Key->New Activation Key->Update Activation Key

CLI>
#######################################################
activation-key 입력
#######################################################
conf t
activation-key asdasf 123jasd9 9asdj 123j (Raddomize)
#######################################################
activation-key 확인
#######################################################
show activation-key detail
http://www.cisco.com/en/US/docs/security/asa/asa80/license/license80.html

2011년 8월 17일 수요일

ether channel

// 이더 채널 로드발란싱 설정 보기 (현재는 Src IP와 Dst XOR)

6513#1#show etherchannel load-balance
EtherChannel Load-Balancing Configuration:
src-dst-ip
mpls label-ip
EtherChannel Load-Balancing Addresses Used Per-Protocol:
Non-IP: Source XOR Destination MAC address
IPv4: Source XOR Destination IP address
IPv6: Source XOR Destination IP address
MPLS: Label or IP

// 이더 채널 로드발란싱 설정

6513#1(config)#port-channel load-balance ? dst-ip Dst IP Addr
dst-mac Dst Mac Addr
dst-port Dst TCP/UDP Port
mpls Load Balancing for MPLS packets
src-dst-ip Src XOR Dst IP Addr
src-dst-mac Src XOR Dst Mac Addr
src-dst-port Src-Dst TCP/UDP Port
src-ip Src IP Addr
src-mac Src Mac Addr
src-port Src TCP/UDP Port

// Switch Processor 로 접근

6513#1#remote login switch
Trying Switch ...
Entering CONSOLE for Switch
Type "^C^C^C" to end this session

// 테스트할 이더채널과 Source IP와 Destination IP를 입력하면 해당포트를 보여줍니다.

6513#1-sp#test etherchannel load-balance interface port-channel 10 ip 10.1.1.1 10.1.1.2
Computed RBH: 0x3
Would select Gi5/16 of Po10

6513#1-sp#test etherchannel load-balance interface port-channel 10 ip 10.1.1.1 10.1.1.3Computed RBH: 0x2
Would select Gi4/16 of Po10

2011년 6월 30일 목요일

ip helper address issue

해당 switch log

-Process= "IP Input", ipl= 0, pid= 157
-Traceback= CCA3E0 CCA684 CCC2F4 CCCF84 CCABF4 CBA238 CBA6F4 CB947C CB96E0 CB99A4 975510 96CAE4
Jun 29 15:45:28 KST: %IP-3-LOOPPAK: Looping packet detected and dropped -
src=x.x.x.x, dst=y.y.y.y, hl=20, tl=78, prot=17, sport=137, dport=137
in=Vlan174, nexthop=z.z.z.z, out=Vlan174
options=none

- ip helper address mis-config
- http://www.ietf.org/rfc/rfc2131.txt
-