ip-stories.com

  •  

    July 2010
    M T W T F S S
    « Jun    
     1234
    567891011
    12131415161718
    19202122232425
    262728293031  
  • Web Stat Counter

    • Search This Blog :

    • Add url
    • Add Me on FB

      Rahman Isnaini's Facebook profile
    • Hurricane Electric IPv6 Cert

      IPv6 Certification Badge for risnaini
    • comments

    • Visitors Referred From :

    • Geo Stats

    • Categories

    [MRTG] How To Monitor Number of BGP Prefixes from BGP Peer on Cisco Router(s) using MRTG

    Posted by admin on July 29th, 2010

    This is my CFG File.

    The complete OID is 1.3.6.1.4.1.9.9.187.1.2.4.1.1.192.168.150.164.1.1
    The OID of Accepted BGP Routes : 1.3.6.1.4.1.9.9.187.1.2.4.1.1
    The OID of Max BGP Routes : 1.3.6.1.4.1.9.9.187.1.2.4.1.3
    [well this not really important as this just to make the mrtg capturing to work, since mrtg MRTG needs to graph two variables/OIDs].
    The IP Address of the BGP Peer being monitored : 192.168.150.164
    The version of IP & Routing Type : 1.1 > IPv4 & Unicast.

    mrtg# vi /export/cfg/bgp-prefix.cfg

    WorkDir: /var/data-mrtg/bgp
    LogFormat: rrdtool
    PathAdd: /usr/local/bin/
    LibAdd: /usr/local/lib/perl5/5.8.8
    Interval: 5
    Refresh: 300
    Forks: 4

    Options[_]: gauge, nopercent, integer
    Unscaled[_]: ymwd
    YLegend[_]: Number of Prefix
    ShortLegend[_]:
    LegendI[_]:   Received Prefixes
    LegendO[_]:   Withdrawn Prefixes
    Legend1[_]: Number of Accepted Prefixes
    Legend2[_]: Withdrawn

    ### as999
    Target[bgp-as999]: 1.3.6.1.4.1.9.9.187.1.2.4.1.1.192.168.150.164.1.1&1.3.6.1.4.1.9.9.187.1.2.4.1.3.192.168.150.164.1.1:public@192.168.150.129
    MaxBytes[bgp-as999]: 1250
    Title[bgp-as999]: BGP Prefixes AS999
    PageTop[bgp-as999]:

    BGP Prefixes AS999

    System: Cisco Gateway
    Equipment: Cisco 3750
    Maintainer: NOC Jakarta

    =================== Options Information ======================
    More information on : MRTG Website

    gauge

    Treat the values gathered from target as ‘current status’ measurements
    and not as ever incrementing counters.
    This would be useful to monitor things like disk space, BGP Prefixes,
    processor load, temperature, and the like …

    integer

    Print summary lines below graph as integers without commas, if you missed this on your option… MRTG would print / plot the value with additional x.000 for example 50 prefixes > 50.000 prefixes.
    nopercent

    Don’t print usage percentages.

    ==================== Router IOS Version =======================

    3750-GW#sh ver
    Cisco IOS Software, 3700 Software (C3725-ADVIPSERVICESK9-M), Version 12.4(3), RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2005 by Cisco Systems, Inc.
    Compiled Fri 22-Jul-05 02:27 by hqluong

    ROM: System Bootstrap, Version 12.2(8r)T2, RELEASE SOFTWARE (fc1)

    3750-GW uptime is 20 weeks, 19 hours, 34 minutes
    System returned to ROM by power-on
    System restarted at 11:04:16 UTC Wed Mar 10 2010
    System image file is “flash:c3725-advipservicesk9-mz.124-3.bin”

    It’s 12.4-3 Version….

    a. rahman isnaini r.sutan

    Posted in Cisco, MRTG, Script | No Comments »

    [Mobile] Sending SMS from PC with Sony Ericsson W200 - Error

    Posted by admin on July 29th, 2010

    Sending / Receibing SMS on PC may be is a good choice if you have a frequent sms activity.
    Working with Sony Ericsson W200 and refer to Website & Best Simple Guide : ” Developers Home
    Here What I have done :

    1. Install Sony Ericsson W200 Driver
    2. Inspecting which COM Port it’s connected.
    3. Use that port to communicate.
    4. Use Hyper Terminal to check : [Communication between PC & SE W200 is fine].

    AT
    OK
    AT+CMGF=1
    OK
    AT+CMGW=”+628176388704″
    > A simple demo of SMS text messaging.
    +CMGW: 1

    OK
    AT+CMSS=1
    +CMSS: 20

    OK

    Here is a description of what is done in the above example:

    *      Line 1: “AT” is sent to the GSM / GPRS modem to test the connection. The GSM / GPRS modem sends back the result code “OK” (line 2), which means the connection between the HyperTerminal program and the GSM / GPRS modem works fine.
    *      Line 3: The AT command +CMGF is used to instruct the GSM / GPRS modem to operate in SMS text mode. The result code “OK” is returned (line 4), which indicates the command line “AT+CMGF=1″ has been executed successfully. If the result code “ERROR” is returned, it is likely that the GSM / GPRS modem does not support the SMS text mode. To confirm, type “AT+CMGF=?” in the HyperTerminal program. If the response is “+CMGF: (0,1)” (0=PDU mode and 1=text mode), then SMS text mode is supported. If the response is “+CMGF: (0)”, then SMS text mode is not supported.

    My SE W200 Respond : [Not Support SMS Text Mode]
    =========================================
    OK

    +CPIN: READY

    OK

    +CMS ERROR: 303

    OK

    +CMS ERROR: 303

    +CMS ERROR: 303

    +CMGF: (0)

    OK
    ===================

    *      Line 5 and 6: The AT command +CMGW is used to write an SMS text message to the message storage of the GSM / GPRS modem. “+85291234567″ is the recipient mobile phone number. After typing the recipient mobile phone number, you should press the Enter button of the keyboard. The GSM / GPRS modem will then return a prompt “> ” and you can start typing the SMS text message “A simple demo of SMS text messaging.”. When finished, press Ctrl+z of the keyboard.
    *      Line 7: “+CMGW: 1″ tells us that the index assigned to the SMS text message is 1. It indicates the location of the SMS text message in the message storage.
    *      Line 9: The result code “OK” indicates the execution of the AT command +CMGW is successful.
    *      Line 10: The AT command +CMSS is used to send the SMS text message from the message storage of the GSM / GPRS modem. “1″ is the index of the SMS text message obtained from line 7.
    *      Line 11: “+CMSS: 20″ tells us that the reference number assigned to the SMS text message is 20.
    *      Line 13: The result code “OK” indicates the execution of the AT command +CMSS is successful.

    a. rahman isnaini r.sutan

    Posted in Mobile, Script | No Comments »

    [Microsoft] Multiple IF Condition in one Cell

    Posted by admin on July 28th, 2010

    Normally IF function in Microsoft excel by default you will see only for one statement true and false.
    If the statement is match, then the condition is TRUE.
    If the statement is not match, then the condition is FALSE.

    TRUE or FALSE can be value, formula, or text.

    Problem : What if the we need more option/conditions…
    Let say, below my excel file.


    I need to manipulate my cell on E23 with IF.
    The condition has to be :
    1. If the D23 is similar to D16, then E23 will show text “128 Kbps”
    2. If the D23 is similar to E16, then E23 will show text “256 Kbps”
    3. If the D23 is similar to F16, then E23 will show text “392 Kbps”
    4. If the D23 is similar to G16, then E23 will show text “512 Kbps”
    5. If the D23 is similar to H16, then E23 will show text “1024 Kbps”
    2. If the D23 is similar to I16, then E23 will show text “2048 Kbps”

    So the IF function would be :
    =IF(D23=D16,”128 Kbps”,IF(D23=E16,”256 Kbps”, IF(D23=F16,”392 Kbps”, IF(D23=G16,”512 Kbps”, IF(D23=H16,”1024 Kbps”, IF(D23=I16,”2048 Kbps”))))))

    I don’t have any idea, how the maximum if function can be extend that way.

    Lately I Found, “128 Kbps” we can replace with D14 without ” ” etc…

    a. rahman isnaini r.sutan

    Posted in microsoft | No Comments »

    [SNMP/MRTG] How to Graph Summary of Multiple MIBs over than 650 Mbps

    Posted by admin on July 27th, 2010

    ============== Captured from Cisco Web FAQ ==============

    Q. When should 64-bit counters be used?

    A. RFC 2233 leavingcisco.com adopted expanded 64-bit counters for high capacity interfaces in which 32-bit counters do not provide enough capacity and wrap too fast.

    As the speed of network media increases, the minimum time in which a 32-bit counter wraps decreases. For example, a 10 Mbps stream of back-to-back, full-size packets causes ifInOctets to wrap in just over 57 minutes. At 100 Mbps, the minimum wrap time is 5.7 minutes, and at 1 Gbps, the minimum is 34 seconds.

    Note: The SNMP counters wrap, the command line interface (CLI) counters do not.

    For interfaces that operate at 20,000,000 (20 million) bits per second or less, you must use 32-bit byte and packet counters. For interfaces that operate faster than 20 million bits per second, and slower than 650,000,000 bits per second, you must use 32-bit packet counters and 64-bit octet counters. For interfaces that operate at 650,000,000 bits/second or faster, 64-bit packet and octet counters must be used.

    Correspondingly, Cisco IOS® Software does not support 64-bit counters for interface speeds of less than 20 Mbps. This means that 64-bit counters are not supported on 10 Mb Ethernet ports, only 100 Mb Fast-Ethernet and other high speed ports support 64-bit counters.
    ===================================================================================

    Lately I have a problem with Adding multiple MIB traffic from many devices with many interfaces.
    The purpose is to summarize all of interface traffic volume.
    The problem I have faced was : if the total / summary of all traffic volume more than 650 Mbps [650,000,000 bit/seconds], the graph starts to drop / broken / not smooth.

    So We never saw the real of total traffic in that graph.
    By Default my mrtg engine use snmp v1 to capture dan plot MIB into the graph.
    According to above Cisco Website, I need to change the 32 bit counter to 64 bit counter to graph the traffic above 650 Mbit per second.
    Googling around, We have to add the suffix at the end of MIB in MRTG CFG file with “:::::2″ which means that my engine is now capturing 64 bit counter information [MIB] with version 2.

    There you go :)

    Read the rest of this entry »

    Posted in MRTG, Script | No Comments »

    [Switch] HP Procurve SFP Port Interoperability Problem

    Posted by admin on July 26th, 2010

    Connecting HP Procurve with other Switches on Gigabit Port using SFP Module is not an easy one at the first time. Since HP Procurve only work with it’s proprietary SFP Modules.

    I have been trying to use another SFP Modules from different vendors.
    Cisco Switch works with them, but not HP Procurve Switch.
    What we saw on the port as the fact is :

    a. SFP Module plugged in to Cisco SFP Slot : Interface & protocol both are UP (connected)
    b. SFP Module pluggen in to Procurve Slot : no signal / led at all.
    c. HP Procurve SFP Proprietary Module plugged in to Procurve SFP slot, everything is fine :)
    You can now have 1 Gbps Trunk inter different switch vendors.

    My conclusion is that HP Procurve only works with it’s proprietary sfp modules.

    a. rahman isnaini r.sutan

    Posted in Cisco, switch | No Comments »

    [Software] GNS 3 Tips & Tricks

    Posted by admin on July 22nd, 2010

    Earning your higher level certifications, practices & hands on are a must.
    And practicing with virtual lab is more/really efficient rather than purchasing hardware.
    GNS 3 [Graphical Network Simulator] is one of the best virtual lab software.

    All you need is just this software and the Cisco IOS Image.
    The memory of the virtual Cisco engine is adjustable to it’s maximum.

    Some Issues (and tips/tricks) at the first time you worked with…

    1. Console not respond immediately after start.
    This text should appear first “Connected to Dynamips VM “MPLSCORE” (ID 4, type c3600) - Console port”
    This sample for Cisco 3640 IOS Image.
    Tips :
    - Wait for a while after the Router Started [it needs to boot the IOS]
    - If still the console not working, try to check your IOS Image location

    2. Error when connecting between Routers with Serial, Ethernet, FastEthernet etc
    Tips/Tricks :
    - Don’t go to console at the first time after starting the router
    - Do right click on your router and configure / add / remove your interfaces
    - If that done, try to connect your routers each other as you need.
    - if that done, try to start all device.
    - Go for console now !.

    3. Cannot Save the start-up config & Once you opened a saved *.net on file tab it always goes to default configuration
    and the config-register is 0×2142.
    Tips/Tricks
    -  After all configuration you have considered to be saved done,
    stop all device by using “Stop Every Devices”  red button .
    - Click file and go to new project.
    - Type your *.net file name [example: lab.net] and check on save nvram also export configuration…
    - Close GNS 3 and try to open your *.net file.
    - Your configuration is now stay as before :)

    a. rahman isnaini r. sutan
    thanks to Gracia Wahab

    Posted in Cisco, software | No Comments »

    [Cisco] Load Balancing & Aggregated Fast Ethernet Ports / TRUNK between Cisco Catalyst 3750 using Port-Channel

    Posted by admin on July 15th, 2010

    Without Stack Cable that can accommodate 32 Gbps and no more Gig Ports available.
    Cisco Catalyst 3750 Fast Ethernet Ports can be aggregated to be a trunk and to have n x 100 Mbps capacity.
    “n” is the number of Fast Ethernet, the technology is called Port-Channel.

    If you have existing trunk with Fast Ethernet, here the trick to migrate [configuration applied to both switches] :

    A. Port Channel
    1. Config Port-Channel “x”
    x is what ever number :)
    2. Set Port-Channel to be trunk
    3. Set Port-Channel trunk type

    B. FastEthernet
    1. Config Fast Ethernet as Trunk also Trunk Type.
    2. Config Fast Ethernet to be included in channel-group 1
    Channel-Group 1 associate with Port-Channel 1
    3. Don’t forget the mode channel-group is on [avoiding looping traffic ?]

    If All done both switches,
    C. Migration
    1. Plug the Cross Cable in between ports
    2. Immediately unplug the existing trunk [may be on fast1/0/48 for e.g]
    Both action should be done at the same time, unless the switch stop to work :) nope sure this is a looping symptom or not.
    3. Check the link in between by ping, trace, show interface etc.
    4. If all running good, set you existing trunk to be included on channel-group x also do not forget the trunk encapsulation type.
    5. You’ll now have 3 x 100 Mbps :)
    6. Your traffic is not load shared……

    D. Load Balancing
    1. Config “port-channel load-balance dst-ip” [my choice]
    2. Check the traffic load on trunk ports, it should be shared now.

    Issue : still not balanced dan shared 100% the same volume on each of trunk interface.

    ====================================
    port-channel load-balance dst-ip

    interface Port-channel1
    switchport trunk encapsulation dot1q
    switchport mode trunk

    interface FastEthernet1/0/1
    switchport trunk encapsulation dot1q
    switchport mode trunk
    speed 100
    duplex full
    channel-group 1 mode on
    !
    interface FastEthernet1/0/2
    switchport trunk encapsulation dot1q
    switchport mode trunk
    speed 100
    duplex full
    channel-group 1 mode on
    =====================================

    a. rahman isnaini r.sutan

    Posted in Cisco | No Comments »

    [UTM] Reset Web Admin Password - IPCop

    Posted by admin on July 5th, 2010

    Forgotten Web Admin Password to Login to IP Cop ?

    From Console after you can login using root :

    htpasswd /var/ipcop/auth/users admin
    New password :
    Re-type new password :

    == You should now be able to login ==

    Proxy :

    If you enable advance Proxy on this IP Cop Engine.
    The cache of the visited page, stored at /var/log/cache
    So /var directory needs to be allocated with a big size of disk partition.

    a. rahman isnaini r.sutan

    Posted in security | No Comments »

    [UTM] IPCop Admin/Root password

    Posted by admin on July 1st, 2010

    A bit tricky..

    You can only set Admin/Root password for accessing the terminal console / remote once you have configured DHCP Server during the setting.
    If you pass this step, then you will not have your root/admin password.

    Admin password is needed to login to IPCop web management on default port TCP 81.

    rgs
    a. rahman isnaini r.sutan

    Posted in UTM, security | No Comments »

    [Security] Symantec End Point Uninstallation & Remote Access Problem

    Posted by admin on June 24th, 2010

    Quoted from Gnawgnu’s Realm Blog the similar thing also happened on my laptop while trying to connect to a 3G mobile network.

    Symantec End Point Uninstallation has stopped Remote Access Connection Manager and dialing to Mobile Network APN, gave me the “Connection Terminated” pop up box. Googling somewhere on Huawei website in which the 3G modem being used, they said that Remote Access Connection Manager supposed to be Started.

    Looking at my windows XP services, thie Remote Access Connection Manager is stopped. Trying to start the service, it returns with error “Access Denied”.

    For me I have done only deleting Key “88″ at RASMAN on regedit.

    Quoted :

    Endpoint kills remote access connection manager (Error 5: Access is denied)

    To add to the fun, the uninstaller for Endpoint doesn’t always get rid of all the problems that came with it. In one case, all the remote access services crapped out so VPN’s were unavailable. If you try to create a new VPN, the window options all gray out. I saw a solution on the symantec boards which recommend doing a full manual uninstall.
    https://forums.symantec.com/syment/board/message?board.id=endpointcust&thread.id=1844
    Uninstall instructions:
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007073018014248?Open&src=ent_gold_nam
    One user did comment on this blog that reinstalling Endpoint resolved issues that another admin he knew was experiencing. You may want to try that or a combination of a full uninstall/reinstall, etc.

    Anonymous said…

    Even after Endpoint was successfully uninstalled, and the Microsoft KB article http://support.microsoft.com/?kbid=329441 was followed, there was an additional RASMAN\PPP\EAP key that needed to be deleted. You must delete 25 and 26 as in the KB, as well as the Symantec Endpoint subkey 17. Then Remote Access Connection Manager will again start.

    Event Viewer Error [From Mufti Blog]

    • Remote Access Connection Manager failed to start because it could
      not create buffers. Restart the computer. Access is denied. (Error,
      Source: RasMan)
    • The Remote Access Connection Manager service was successfully sent a
      start control. (Information, Source: Service Control Manager)
    • The Remote Access Connection Manager service entered the stopped
      state. (Information, Source: Service Control Manager)
    • The Remote Access Connection Manager service terminated with the
      following error: Access is denied. (Information, Source: Service
      Control Manager)

    a. rahman isnaini r.sutan

    Posted in Mobile, VPN, microsoft, security | No Comments »