# Network Solution ## Posts - [IPv6 lab for CCNA 200-301](https://blog.network-solution.net/ipv6-lab-for-ccna-200-301/): Download the topology from here IPv6 lab tasks: Enable IPv6 globally on each router Enable IPv6 under the interfaces Configure DHCPv6 server Check how to enable IPv6 on the switch from here Configure the routers as below:  R1 – R2   Gi0/0   2001:AAAA:BBBB:CCCC::/64 eui-64  à Gi 0/0   2001:AAAA:BBBB:CCCC:1234:1234:1234:1234/64 R2—R3 Gi0/1  2001:BBBB:AAAA:AAAA:1111:1111:1111:1111/64  è Gi0/1 autoconfig R3 local network Gi0/2  2001:AAAA:AAAA:AAAA:1111:1111:1111:1111/64 SW vlan1    2001:AAAA:AAAA:AAAA:2222:2222:2222:2222/64 DHCPv6 Server    2001:AAAA:AAAA:AAAA:3333:3333:3333:3333 DHCPv6  pool  : Name: V6 pool  Prefix:  2001:AAAA:AAAA:AAAA:: /64 - [CCNA 200-301 IPv4 subnetting LAB](https://blog.network-solution.net/ccna-200-301-ipv4-subnetting-lab/): Subnetting LAB: Download Cisco packet tracer here Download the topology from here We have IP address range 192.168.0.0 /24 Tasks: Divide the subnet to cover all the needs in the topology and use 192.168.1.0 /25 for the interconnections between the routers. Use last three IP addresses in each subnet for Router, switch and DHCP server Configure the DHCP server to distribute the remaining IP addresses to the clients with the correct configurations. DNS server IP is 100.100.100.3 All PCs should have access to Web server network-solution.net Divide 192.168.0.0 /24 to 4 subnets 192.168.0.0 /26     Marketing Network ID: 192.168.0.0 Broadcast: 192.168.0.63  … - [What is SDN?](https://blog.network-solution.net/what-is-sdn/): The idea of programmability is the basis for the most precise definition of what SDN is: technology that separates the control plane management of network devices from the underlying data plane that forwards network traffic. IDC broadens that definition of SDN by stating: “Datacenter SDN architectures feature software-defined overlays or controllers that are abstracted from the underlying network hardware, offering intent-or policy-based management of the network as a whole. This results in a datacenter network that is better aligned with the needs of application workloads through automated (thereby faster) provisioning, programmatic network management, pervasive application-oriented visibility, and where needed, direct … - [Do you know what is SD-WAN (Software-defined WAN)?](https://blog.network-solution.net/software-defined-wide-area-network/): SD-WAN is an acronym for software-defined networking in a wide area network (WAN). SD-WAN simplifies the management and operation of a WAN by decoupling the networking hardware from its control mechanism. This concept is similar to how software-defined networking implements virtualization technology to improve data center management and operation. A key application is to allow companies to build higher-performance WANs using lower-cost and commercially available Internet access, enabling businesses to partially or wholly replace more expensive private WAN connection technologies such as MPLS. WANs allow companies to extend their computer networks over large distances, connecting remote branch offices to data centers and to each other, and delivering applications and services required … - [IPTime FBB Solution Configuration Guide - Part 1](https://blog.network-solution.net/iptime-fbb-solution/): IPTime FBB Solution Course Objectives Upon completion of IPTime FBB Solution course, you will be able to learn about: Service types supported by the FBB solution HSI service configuration VoIP service configuration IPTV service configuration Enterprise Internet service configuration Enterprise Interconnection service configuration Typical FBB Networking : The network FBB solution is an overall solution for the entire bearer network, including the access layer, convergence layer, SPOP, backbone layer, transport layer, and the NMS. -FBBV100R001C00 is an integrated version, which is used for triple play services. This FBB solution is proposed based on product capabilities and the experience obtained from … - [Cisco vs Huawei commands mapping](https://blog.network-solution.net/cisco-vs-huawei-commands-mapping/): Entering/Exiting the Command-Line Interface After logging into the router from the Console port, you will enter the user exec mode or user view in case of VRP. To enter or exit the global configuration mode or system view (VRP), use the following cisco vs huawei commands Cisco IOS Huawei VRP Router> [Huawei] Enter the global mode from the user mode, first we will enter into the privileged mode by using enable command Enter the system view from the user view Router>enable Router# system-view [Huawei] Router# indicates that you’re in privileged mode, where you can both view and change the router’s … - [Huawei VS Cisco – Which One is the better Choice for Ethernet Switches?](https://blog.network-solution.net/huawei-vs-cisco/):   Cisco, as the big brother in the telecom industry, has dominated the market of networking devices (like routers and switches) for a long time. No one can compete with him. Huawei, however, is the rising star in Chinese market. It ranked 83rd in the latest Fortune 500 list on July 23, 2017. Many people assume that in the near future, Huawei will lead the world instead of Cisco. Thus, in this article, we are going to analyze the strength of Cisco and Huawei, along with the differences between Huawei vs cisco switches. Huawei Vs cisco  — Brand Awareness and … - [Firewall Overview](https://blog.network-solution.net/firewall-overview/): Introduction to the Firewall Currently, security threats on the Internet fall into the following types: Illegal use: Unauthorized users or users with illegal authority access network resources. For example, an attacker accesses network resources by using the accounts and passwords of authorized users. Denial of Service: A server prohibits authorized users to access network resources. For example, an attacker continuously sends echo-request or connection request packets to a server by using many packets or malformed packets. The server then becomes overloaded and cannot process packets from authorized users. Information theft: An attacker does not directly intrude the target system. Instead, … - [FTTx Solution Overview](https://blog.network-solution.net/fttx-solution-overview/): Major Services Provided by a Solution: FTTx solutions provide multiple access services in different scenarios, mainly including highbandwidth IPTV service, open access network (OAN) access of wholesale service mode, highrate Internet access service, and the private line access service of the enterprise and cell cite. 50M@HDTV Service HDTV is the short form for high definition television. The definition of HDTV programs can reach 1920 x 1080. Three algorithms, MPEG2-TS, WMV-HD, and H.264, are generally adopted for compressing and transmitting data. The compressing ratio and picture quality vary greatly with the encoding technology. The high-definition and high-bandwidth HDTV service the most … - [Example for Configuring BGP Auto FRR](https://blog.network-solution.net/example-for-configuring-bgp-auto-frr/): As shown in Figure 1, Router A belongs to AS 100; Router B, Router C, and Router D belong to AS 200. BGP Auto FRR needs to be configure so that the route from Router A to Router D can have backup forwarding information. Figure 1 Networking diagram of configuring BGP Auto FRR Configuration Roadmap The configuration roadmap is as follows: Configure EBGP connections between Router A and Router B and between Router A and Router C. Configure IBGP connections between Router D and Router B, and between Router D and Router C. Configure routing policies on Router B and … - [BGP Auto FRR](https://blog.network-solution.net/bgp-auto-frr/): As a protection measure against faults over links, BGP Auto Fast Reroute (FRR) is applicable to networks with primary and backup links. With BGP Auto FRR, traffic can be switched between two BGP peers or next hops within sub-seconds. With BGP Auto FRR, if a peer has multiple routes with the same prefix that are learned from different peers, the peer uses the optimal route as the primary link to forward packets and the less optimal route as a backup link. If the primary link fails, the peer rapidly notifies other peers that the BGP route has become unreachable and … - [BGP GR "Graceful Restart "](https://blog.network-solution.net/bgp-gr-graceful-restart-2/): Graceful restart (GR) is one of the high availability (HA) technologies, which comprise a series of comprehensive technologies such as fault-tolerant redundancy, link protection, faulty node recovery, and traffic engineering. As a fault-tolerant redundancy technology, GR ensures normal forwarding of data during the restart of routing protocols to prevent interruption of key services. Currently, GR has been widely applied to the master/slave switchover and system upgrade. GR is usually used when the active route processor (RP) fails because of a software or hardware error, or used by an administrator to perform the master/slave switchover. Prerequisite for Implementation On a traditional … - [MP-BGP](https://blog.network-solution.net/mp-bgp/): Conventional BGP-4 manages only IPv4 unicast routing information, and inter-AS transmission of packets of other network layer protocols, such as IPv6 and multicast, is limited. To support multiple network layer protocols, the Internet Engineering Task Force (IETF) extends BGP-4 to Multiprotocol Extensions for BGP-4 (MP-BGP). RFC 4760 defines the MP-BGP standard. MP-BGP is forward compatible. Specifically, CX devices supporting MP-BGP can communicate with the CX devices that do not support MP-BGP. Extended Attributes BGP-4 Update packets carry three IPv4-related attributes: NLRI (Network Layer Reachable Information), Next_Hop, and Aggregator. Aggregator contains the IP address of the BGP speaker that performs route … - [Example for Configuring a Manual IPv6 over IPv4 Tunnel](https://blog.network-solution.net/example-for-configuring-a-manual-ipv6-over-ipv4-tunnel/): Networking Requirements As shown in Figure 1, two IPv6 networks are connected to Device B on the IPv4 backbone network through Device A and Device C. To interconnect the two IPv6 networks, configure a manual IPv6 over IPv4 tunnel between Device A and Device C. Figure 1 Configuring a manual IPv6 over IPv4 tunnel   Precautions When configuring a manual IPv6 over IPv4 tunnel, note the following points: Create a tunnel interface and set parameters for the tunnel interface. Perform the following configuration on both Device A and Device C. The source address of the local end is the destination address of the remote end of the tunnel. Similarly, the destination address of the local end … - [Example for Configuring IPv6 Addresses for Interfaces](https://blog.network-solution.net/example-for-configuring-ipv6-addresses-for-interfaces/): Networking Requirements As shown in Figure 1, Device A and Device B are connected through GE interfaces. To check the connectivity between the two interfaces, configure global unicast IPv6 addresses 2001:db8::1/32 and 2001:db8::2/32 for the GE interfaces. Figure 1 Configuring IPv6 addresses for interfaces Device Name Interface IP Address DeviceA GE0/1/0 2001:db8::1/32 DeviceB GE0/1/0 2001:db8::2/32 Precautions None Configuration Roadmap The configuration roadmap is as follows: Enable IPv6 forwarding on the two Devices. Configure global unicast IPv6 addresses for interfaces. Data Preparation To complete the configuration, you need global unicast IPv6 addresses of the interfaces. Procedure Configure global unicast IPv6 addresses for interfaces. # Configure Device A. <HUAWEI> system-view [~HUAWEI] … - [IPv6 Features](https://blog.network-solution.net/ipv6-features/): IPv6 supports the following features: Hierarchical address structure The IPv6 hierarchical address structure facilitates route search, reduces the IPv6 routing table size using route aggregation, and improves the forwarding efficiency of CX devices. Automatic address configuration IPv6 supports stateful and stateless address autoconfiguration to simplify the host configuration process. In stateful address autoconfiguration, the host obtains the address and configuration from a server. In stateless address autoconfiguration, the host automatically configures an IPv6 address that contains the prefix advertised by the local CX device and interface ID of the host. If no CX device exists on the link, the host can only configure the link-local … - [IPv6 Addresses](https://blog.network-solution.net/ipv6-addresses/): IPv6 Address Format A 128-bit IPv6 address has two formats: X:X:X:X:X:X:X:X IPv6 addresses in this format are written as eight groups of four hexadecimal digits (0 to 9, A to F), each group separated by a colon (:). Every “X” represents a group of hexadecimal digits. For example, 2031:0000:130F:0000:0000:09C0:876A:130B is a valid IPv6 address. For convenience, any zeros at the beginning of a group can be omitted; therefore, the given example becomes 2031:0:130F:0:0:9C0:876A:130B. Any number of consecutive groups of 0s can be replaced with two colons (::). Therefore, the given example can be written as 2031:0:130F::9C0:876A:130B. This double-colon substitution can … - [Configuring a Basic ACL to Manage Device Access Rights](https://blog.network-solution.net/configuring-a-basic-acl-to-manage-device-access-rights/): Networking Requirements On the network shown in Figure 1, the PE is a device in the HR department and two VPN instances VPN-A and VPN-B are created on the PE. CE1 is a device in Department A and belongs to VPN-A that uses 111:1 as the VPN-target. CE2 is a device in Department B and belongs to VPN-B that uses 222:2 as the VPN-target. To allow the user (CE1) in VPN-A to log in to the PE by Telnet and prevent the user (CE2) in VPN-B from logging in to the PE, configure a basic ACL on the PE so that … - [Configuring an Advanced ACL to Defend Against Attacks](https://blog.network-solution.net/configuring-an-advanced-acl-to-defend-against-attacks/): Networking Requirements As shown in Figure 1, Device A, Device B, and Device C are access devices, whereas Device D, Device E, and Device F are core devices. The access devices connect to the core devices through 10 Gbit/s interfaces. Voice and 3G services run on the network. To control user access and ensure network and device security, security policies need to be configured on the access routers to prevent ICMP packet attacks. To achieve this purpose, configure an advanced ACL on Device A. If the attacker (PC) attacks the network, Device A can use the configured advanced ACL to prevent the ICMP packet attacks. Figure 1 Configuring an advanced ACL to defend against attacks Configuration Roadmap The … - [Example for Configuring Traffic Policing and Traffic Shaping](https://blog.network-solution.net/example-for-configuring-traffic-policing-and-traffic-shaping/): This section provides an example of how to configure traffic policing and traffic shaping on interfaces. Networking Requirements GE 0/3/0 of Device A is connected to GE 0/1/0 of Device B. Server, PC1, and PC2 can access the Internet through Devices A and B. Server, PC1, and GE 0/1/0 of Device A are on the same network segment. PC2 and GE 0/2/0 of Device A are on the same network segment. The traffic from Server and PC1 to GE 0/1/0 is controlled on Device A as follows: A maximum of 6 Mbit/s bandwidth is assured for the traffic from Server. The bandwidth is always 5 Mbit/s in this example. For traffic of which the rate exceeds 5 Mbit/s but is less … - [Introduction to Traffic Policing, Traffic Shaping](https://blog.network-solution.net/introduction-to-traffic-policing-traffic-shaping/): Traffic policing, traffic shaping are key factors in implementing QoS. Traffic policing controls the rate of incoming packets to ensure that network resources are properly allocated. Traffic shaping controls the rate of outgoing packets to allow the traffic rate to match that on the downstream device. These factors work together to provide QoS guarantees on networks. Traffic Policing Traffic policing controls the rate of incoming packets to ensure that network resources are properly allocated. If the traffic rate of a connection exceeds the specifications on an interface, traffic policing allows the interface to drop excess packets or re-mark the packet … - [Principles of Traffic Policing](https://blog.network-solution.net/principles-of-traffic-policing/): Process of Traffic Policing In traffic policing, the Committed Access Rate (CAR) is used to control traffic. Packets are first classified according to pre-defined matching rules. Packets that conform to the specified rate limit are forwarded directly, whereas packets that exceed the specified rate limit are dropped or have their priorities re-marked before being retransmitted. The CAR technology uses token buckets (TBs) to control traffic.Figure 1 shows the process of traffic policing with CAR. Figure 1 Schematic diagram of traffic policing with CAR The tokens are put into the TB at the rate defined by users. The capacity of the TB is … - [Example for Configuring Inter-AS Seamless MPLS+HVPN](https://blog.network-solution.net/configuring-inter-as-seamless-mplshvpn/): In the inter-AS seamless MPLS+HVPN networking, an HVPN connection between a CSG and AGG is established, and an inter-AS seamless MPLS LSP between an AGG and MASG is established. The inter-AS seamless MPLS+HVPN networking obtains the collective advantages of the inter-AS seamless MPLS network and HVPN. Networking Requirements In Figure 1, the access and aggregation layers belong to one AS, and the core layer belongs to another AS. Before VPN services is provisioned, the inter-AS seamless MPLS+HVPN networking can be deployed. This networking allows NodeBs and the RNC to communicate and has low networking construction costs because of HVPN techniques. An … - [Example for Configuring Inter-AS Seamless MPLS](https://blog.network-solution.net/example-for-configuring-inter-as-seamless-mpls/): When the access and aggregation layers belong to one AS, and the core layer belongs to another AS, inter-AS seamless MPLS can be configured to implement the service connectivity between a NodeB and an MME or SGW. Networking Requirements In Figure 1, the access and aggregation layers belong to one AS, and the core layer belongs to another AS. NodeBs need to communicate with an MME or SGW over a VPN. To meet this requirement, inter-AS seamless MPLS can be configured. Figure 1 Inter-AS seamless MPLS networking (1) Addresses of interfaces are planned for the CSGs, AGGs, AGG ASBRs, core ASBRs, and … - [Example for Configuring Intra-AS Seamless MPLS](https://blog.network-solution.net/example-for-configuring-intra-as-seamless-mpls/): When the access, aggregation, and core layers belong to the same AS, intra-AS seamless MPLS can be configured to implement the service connectivity between NodeBs and an MME or SGW. Networking Requirements In Figure 1, the access, aggregation, and core layers belong to the same AS. NodeBs need to communicate with an MME or SGW over a VPN. To meet this requirement, intra-AS seamless MPLS can be configured. Figure 1 Intra-AS seamless MPLS networking (1) Addresses of interfaces are planned for CSGs, AGGs, core ABRs, and MASGs shown in Figure 2. Figure 2 Intra-AS seamless MPLS networking (2)  NOTE: The configurations in this example … - [How To Configure The Reliability Over Seamless MPLS](https://blog.network-solution.net/how-to-configure-the-reliability-over-seamless-mpls/): Seamless MPLS network reliability can be improved using a variety of functions. If a network fault occurs, devices with reliability functions enabled immediately detect the fault and switch traffic from active links to standby links. The following examples demonstrate the reliability functions used on an inter-AS seamless MPLS network. A fault occurs on a link between a CSG and an AGG. As shown in Figure 1, the active link along the primary path between CSG1 and AGG1 fails. After BFD for LDP or BFD for CR-LSP detects the fault, the BFD module uses LDP FRR, TE Hot-standby or BGP FRR to … - [Basic Principles of Seamless MPLS - Part 3](https://blog.network-solution.net/basic-principles-of-seamless-mpls-part-3/): Inter-AS Seamless MPLS+HVPN Control plane    Deploy routing protocols :  Figure 1, Deploying routing protocols for the inter-AS seamless MPLS+HVPN networking As shown in Figure 1, routing protocols are deployed on devices as follows: An IGP (IS-IS or OSPF) is enabled on devices at each of the access, aggregation, and core layers to implement intra-AS connectivity. An IBGP peer relationship is established between each of the following pairs of devices: AGG and an AGG ASBR Core ASBR and MASG An EBGP peer relationship is established between the AGG ASBR and core ASBR. An MP-IBGP peer relationship is established between the CSG … - [Basic Principles of Seamless MPLS - Part 2](https://blog.network-solution.net/basic-principles-of-seamless-mpls-part-2/): Inter-AS Seamless MPLS Control plane    Deploy routing protocols: Figure 1 Deploying routing protocols for the inter-AS seamless MPLS networking As shown in Figure 1, routing protocols are deployed on devices as follows: An IGP (IS-IS or OSPF) is enabled on devices at each of the access, aggregation, and core layers to implement intra-AS connectivity. The path CSG1 -> AGG1 -> AGG ASBR1 -> core ASBR1 -> MASG1 is used in the following example. A BGP peer relationship is established between each of the following pairs of devices: CSG and AGG AGG and AGG ASBR AGG ASBR and core ASBR Core ASBR and … - [Basic Principles of Seamless MPLS](https://blog.network-solution.net/basic-principles-of-seamless-mpls/): Seamless MPLS and the usage Scenario for it Seamless MPLS establishes a BGP LSP across the access, aggregation, and core layers and transmits services along the E2E BGP LSP. Service traffic can be transmitted between any two points on the LSP. The seamless MPLS network architecture maximizes service scalability using the following functions: Allows access nodes to signal all services to an LSP. Uses the same transport layer convergence technique to rectify all network-side faults, without affecting service transmission. Seamless MPLS networking solutions are as follows: Intra-AS seamless MPLS: The access, aggregation, and core layers are within a single AS. … - [ATM Services over IPRAN](https://blog.network-solution.net/atm-services-over-ipran/): Here is how the TDM services working over IPRAN : - [TDM Services over IPRAN](https://blog.network-solution.net/tdm-services-over-ipran/): here is how the TDM services working over IPRAN : - [How the services work in IPRAN ?](https://blog.network-solution.net/how-the-services-work-in-ipran/): Hi my friends , Today I found a very good Video that explain how the services are working on IPRAN this will help you soo much to understand how the traffic is moving inside the network and how its encapsulated Here you will see how the encapsulation if the access node is Ethernet : - [How the Network works ?](https://blog.network-solution.net/how-the-network-works/): Hi guys I want to share with you today a very useful video on how the Network and the packets inside the network moved from your computer the the internet - [Basic BGP/MPLS IP VPN](https://blog.network-solution.net/basic-bgpmpls-ip-vpn/): A basic BGP/MPLS IP VPN is an L3VPN network that covers only one carrier’s network, which is an MPLS backbone network that does not span multiple ASs, as shown in Figure 1. A basic BGP/MPLS IP VPN has the following characteristics: Transmits packets using extended BGP. Encapsulates and transmits VPN packets over MPLS LSPs serving as public network tunnels. Allows a device that can play PE, P, and CE roles to play only one role at a time. Figure 1 Basic BGP/MPLS IP VPN networking Related Concepts Site The concept of “site” is frequently mentioned in the VPN technology. The following describes … - [BGP Route Reflector " RR"](https://blog.network-solution.net/bgp-route-reflector-rr/): Fully meshed connections need to be established between IBGP peers to ensure the connectivity between IBGP peers. If there are n CX devices in an AS, n x (n-1)/2 IBGP connections need to be established. When there are a lot of IBGP peers, network resources and CPU resources are greatly consumed. Route reflection can solve the problem. In an AS, one CX device functions as a Route Reflector (RR) and the other CX devices as clients. The clients establish IBGP connections with the RR. The RR and its clients form a cluster. The RR reflects routes among clients, and BGP connections do not need … - [What is the VPN connection](https://blog.network-solution.net/what-is-the-vpn-connection/): During the initial stages of information technologies, telecom carriers used leased lines to provide Layer 2 connections for enterprises. The disadvantages of leased lines are as follows: Constructing leased lines takes a long period. Leased lines require huge investments. Leased lines are difficult to manage. After the emergence of asynchronous transfer mode (ATM) and frame relay (FR) technologies, telecom carriers begun to use virtual circuits (VCs) to provide point-to-point (P2P) Layer 2 connections for clients. Clients can set up Layer 3 networks and transmit IP data over the P2P Layer 2 connections. Compared with leased lines, VCs are less expensive … - [MPLS HQoS ( Hierarchical QoS )](https://blog.network-solution.net/mpls-hqos-hierarchical-qos/): Introduction Definition As an application of QoS in VPN services, MPLS HQoS includes hierarchical QoS (HQoS) at the public network side based on the peer PE/VPN instance, and interface-based QoS at the access side of users. MPLS HQoS offers practical QoS solutions to various services in the MPLS VPN. Purpose With the development of Virtual Private Network (VPN) services, telecommunication operators and users urgently demand the implementation of QoS (such as QoS for the leased line) in VPN networks. Operators, when providing L2VPN/L3VPN access services for a VPN user, sign the service level agreement (SLA) with the user. The SLA … - [Hierarchical Quality of Service ( HQOS)](https://blog.network-solution.net/hierarchical-quality-of-service-hqos/):   Definition Hierarchical Quality of Service (HQoS) is a technology used to guarantee the bandwidth of multiple services of many users in the Differentiated Service (DiffServ) model through a queue scheduling mechanism. DiffServ is a type of the class-based QoS technology, and provides different services for different service flows. Therefore, in the DiffServ scheme, service flows need to be classified based on service requirements first. Traffic classification is the prerequisite and basis of HQoS. Family HQoS is the classifying of services with the specified characteristics into the same family. These services enter one subscriber queue (SQ). Currently, methods of identifying … - [Inter-AS VPN](https://blog.network-solution.net/inter-as-vpn/): Generally, an MPLS VPN architecture runs within an AS in which the VPN routing information is flooded on demand. The VPN routing information within the AS cannot be flooded to the AS of other SPs. To realize the exchange of VPN route information between different ASs, the inter-AS MPLS VPN model is introduced. The inter-AS MPLS VPN model is an extension of the existing protocol and MPLS VPN framework. Through this model, the route prefix and label information can be advertised over the links between different carrier networks. RFC 2547bis presents three Inter-AS VPN solutions. Inter-Provider Backbones Option A: ASBRs … - [Configuring Martini VLL by Using MPLS TE Tunnels](https://blog.network-solution.net/configuring-martini-vll-by-using-mpls-te-tunnels/): The public network tunnel of a Martini VLL can be an MPLS TE tunnel. Networking Requirements As shown in Figure 1, CE1 and CE2 belong to the same VPN. They access the MPLS backbone network through PE1 and PE2 respectively. OSPF is used as the IGP protocol on the MPLS backbone network. In this scenario, you need to configure Martini VLL. An MPLS TE tunnel must be established between PE1 and PE2 through the dynamic signaling protocol RSVP-TE to forward the traffic of the VLL. The bandwidth of the tunnel is 20 Mbit/s. The maximum bandwidth of the link that the … - [BGP GR ( Graceful Restart )](https://blog.network-solution.net/bgp-gr-graceful-restart/): When BGP restarts, the peer relationship is re-established and the forwarding is interrupted. After Graceful Restart (GR) is enabled, traffic interruption can be avoided. The following roles are involved in the GR process: GR restarter: indicates a device that performs GR caused by a fault or triggered by the administrator. The GR restarter must be a GR-capable device. That is, the router must be enabled with GR and negotiates the GR capability with its peer. GR helper: indicates a neighbor of the GR restarter. The GR helper must also have the GR capability. The following concepts are involved in the … - [IS-IS TE](https://blog.network-solution.net/is-is-te/): IS-IS Traffic Engineering (TE) is an extension of IS-IS to support MPLS TE. As specified in RFC 5305 and RFC 4205, IS-IS TE defines new TLVsand sub-TLVs in IS-IS LSPs to carry TE information, floods LSPs to implement the flooding and synchronization of TE information, and transmits TE information to the CSPF module. IS-IS TE supports MPLS to set up and maintain the Constraint-based Routed Label Switched Paths (CR-LSPs). When constructing the Constraint-based Routed LSP (CR-LSP), MPLS needs to learn the traffic attributes of all the links in this area. MPLS can acquire the TE information of the links through IS-IS. Traditional … - [OSPF Fast Convergence](https://blog.network-solution.net/ospf-fast-convergence/): OSPF fast convergence is an extended feature of OSPF implemented to speed up the convergence of routes. It includes the following: I-SPF Incremental SPF (I-SPF) recalculates only the routes of the changed nodes rather than all the nodes when the network topology changes. This speeds up the calculation of routes. PRC Partial Route Calculation (PRC) calculates only the changed routes when the routes on the network change. Intelligent timer An Open Shortest Path First (OSPF) intelligent timer can dynamically adjust its value according to the user’s configuration and the interval at which an event is triggered such as the route … - [Configuring IS-IS Load Balancing](https://blog.network-solution.net/configuring-is-is-load-balancing/): implementing load balancing through IS-IS: Networking Requirements As shown in Figure 1: CX- A, CX- B, CX- C, and CX- D run IS-IS to implement interconnection in the IP network. CX- A, CX- B, CX- C, and CX- D are Level-2 routers in area 10. Load balancing is required to transmit the traffic of CX- A to CX- D through CX- B and CX- C. Figure 1 Networking diagram of configuring IS-IS load balancing Device Interface IP Address Device Interface IP Address CX-A GE 3/0/0 172.16.1.1/24 CX-C POS 1/0/0 10.1.2.2/24   POS 1/0/0 10.1.1.1/24   POS 2/0/0 192.168.1.1/24   POS 2/0/0 10.1.2.1/24       CX-B POS 1/0/0 10.1.1.2/24 CX-D GE 3/0/0 172.17.1.1/24   POS 2/0/0 192.168.0.1/24   POS 1/0/0 192.168.0.2/24       … - [Basic Principles of Load Balancing](https://blog.network-solution.net/basic-principles-of-load-balancing/): Protocol Load Balancing Equal-cost load balancing The CX600 supports multi-route mode. You can configure multiple routes with the same preference to the same destination. If there are no other routes with higher priorities to the target destination, these “equal-cost” routes are used. Packets transmitted to the target destination are sent along different routes and, in this way, load balancing is achieved on the network. A particular routing protocol may discover several routes to the same target destination. If this routing protocol has the highest priority among all active routing protocols, then the routes it has discovered are effective and are the ones … - [BFD ( Bidirectional Forwarding Detect ) for Everything](https://blog.network-solution.net/201507bfd-bidirectional-forwarding-detect-for-html/): What Is BFD? Bidirectional Forwarding Detect (BFD) · Provides low-overhead and short-period detection for a failure on a path between adjacent forwarding engines. It detects a failure that may occur on an interface, a data link, or even a forwarding engine itself. · Provides a uniform mechanism to detect failures over any media and at any protocol layer in real time with the flexible detection period and a wide range of overhead. Overview   · BFD is a simplified “Hello” mechanism and functions similarly to neighbor detection conducted by a routing protocol. A pair of systems periodically sends BFD packets … - [Configuring the Carrier's Supporting Carrier in the Same AS](https://blog.network-solution.net/configuring-the-carriers-supporting-carrier-in-the-same-as/): Networking Requirements The Level 1 carrier and the Level 2 carrier are in the same AS. The Level 2 carrier provides the BGP/MPLS IP VPN service for its customers. In Figure 1: PE1 and PE2 are PEs of the Level 1 carrier’s backbone. CE1 and CE2 belong to the Level 2 carrier and access the backbone of Level 1 carrier. PE3 and PE4 belong to the Level 2 carrier and provide access service for Level 2 carrier’s customer. CE3 and CE4 are the Level 2 carrier’s customer. Figure 1 Networking diagram of carrier’s carrier configuration  Configuration Roadmap The configuration roadmap is as … - [Configuring the Carrier's Supporting Carrier (Inter-AS)](https://blog.network-solution.net/configuring-the-carriers-supporting-carrier-inter-as/): Here we can find an example on how to configure the second carrier to provide BGP/MPLS IP VPN services when first carrier and the second carrier are in different ASs. Networking Requirements As shown in Figure 1, the Level 1 carrier and the Level 2 carrier are in different ASs. The Level 2 carrier provides BGP/MPLS IP VPN service for its customers. Different from Example for Configuring Carrier’s Carrier in the Same AS, the Level 1 carrier and the Level 2 carrier in this example are in different ASs. Figure 1 Networking diagram of the carrier’s carrier configuration (inter-AS) Configuration Roadmap The configuration … - [Carrier's Supporting Carrier CSC](https://blog.network-solution.net/carriers-supporting-carrier-csc/): A customer of an SP providing the BGP/MPLS IP VPN service may also be an SP. In this case, the SP providing the BGP/MPLS IP VPN service is called the provider carrier or the first carrier; the customer is called the customer carrier or the second carrier, as shown in Figure 1. This networking model is called carrier’s carrier. In this model, the second carrier SP is a VPN user of the first carrier SP. Figure 1 Networking of carrier’s carrier To ensure good extension, the second carrier adopts the operation mode similar to a stub VPN. That is, a CE of … - [Configuring HoVPN](https://blog.network-solution.net/configuring-hovpn/): Configuring Hierarchy Of VPN – HoVPN We already explain the HoVPN before so now we will know how to configure it . Networking Requirements As shown in Figure 1: CE1 and CE2 belong to VPN-A and the VPN target is 1:1. CE1 accesses the backbone network through the UPE and CE2 accesses the network through the PE. The UPE, the SPE and the PE are interconnected through OSPF. Figure 1 Networking diagram of HoVPN Configuration Roadmap The configuration roadmap is as follows: Configure IGP in the backbone network and ensure the PEs can learn the loopback address from each other. Configure MPLS … - [Configuring VRRP in Load Balancing Mode](https://blog.network-solution.net/configuring-vrrp-in-load-balancing-mode/): In this example, by configuring a VRRP backup group in load balancing mode, you can provide the mutual backup function to devices in the VRRP backup group and balance network traffic among these devices. Networking Requirements As shown in Figure 1. CX-A serves as the master CX device of backup group 1 and the backup CX device of backup group 2. CX-B serves as the master CX device of backup group 2 and the backup CX device of backup group 1. Host A in the internal network takes backup group 1 as its gateway and Host C takes backup group 2 as its gateway to share the traffic and … - [Configuring VRRP in Master/Backup Mode](https://blog.network-solution.net/configuring-vrrp-in-masterbackup-mode/): The Virtual Router Redundancy Protocol (VRRP) is a fault tolerant protocol, and it groups several routers into a virtual router. If the next hop router of a host is defective, VRRP uses a mechanism to switch traffic to another router. This ensures continuity and reliability of communications. In this example, by configuring a VRRP backup group in master/backup mode, you can use the master device of the VRRP backup group to transmit all network traffic. Networking Requirements As shown in Figure 1, Host A accesses Host B through the default gateway. The requirements are as follows: CX-A and CX-B form a VRRP backup group that serves … - [BGP Path Selection Algorithm in Cisco, Huawei and Juniper](https://blog.network-solution.net/bgp-path-selection-algorithm-in-cisco-huawei-and-juniper/): BGP Path Selection Algorithm   Border Gateway Protocol (BGP) routers typically receive multiple paths to the samedestination. The BGP best path algorithm decides which is the best path toinstall in the IP routing table and to use for traffic forwarding.   How the Best Path Algorithm Works BGP assigns the first valid path as the current best path. BGP then compares the best path with the next path in the list, until BGP reaches the end of the list of valid paths. This list provides the rules that are used to determine the best path:   On Cisco Devices : … - [Configuring Load Balancing Among EBGP and IBGP Routes When CEs Are Dual-Homed](https://blog.network-solution.net/configuring-load-balancing-among-ebgp-and-ibgp-routes-when-ces-are-dual-homed/): Configuring Load Balancing Among EBGP and IBGP Routes When CEs Are Dual-Homed When a CE is dual homed to two PEs, if one PE is in the same AS as the remote PE, whereas the other PE is not in the same AS as the remote PE, you can configure EBGP and IBGP route load balancing. Networking Requirements As shown in Figure 1, CE1 and CE2 belong to the same VPN instance. CE1 accesses the network respectively through PE3 in AS 100 and PE2 in AS 200. That is, CE1 is dual-homed to PE3 and PE2. CE2 accesses the network through … - [Hierarchy Of VPN - HoVPN](https://blog.network-solution.net/hierarchy-of-vpn-hovpn/): Hierarchy Of VPN – HoVPN Hierarchical Model and Plane Model On a BGP/MPLS IP VPN, as the key devices, PEs perform the following functions: PEs ensure the access for users, and thus require a great number of interfaces. PEs manage and advertise VPN routes, and process user packets. Thus, the PEs require large-capacity memory and high forwarding capabilities. Currently, the hierarchical architecture is adopted by most networking schemes. For example, the typical architecture of a MAN consists of three layers: the core layer, convergence layer, and access layer. From the core layer to the access layer, the performance requirements for … - [Configure a CCC Local Connection](https://blog.network-solution.net/configure-a-ccc-local-connection/): A local CCC connection refers to the connection between two local CEs, that is, two CEs connected to the same PE. Similar to a Layer 2 switch, the PE can switch traffic without the need to set up a static LSP. Networking Requirements Figure 1 shows the CE is connected with the PE through a POS interface. The packets are encapsulated in PPP over the link layer. A local connection is created between CE1 and CE2. Figure 1 Networking diagram of the local CCC connection Configuration Roadmap The configuration roadmap is as follows: Configure basic MPLS capability on PE and enable the … - [Configuring a Martini VLL to Access an L3VPN](https://blog.network-solution.net/configuring-a-martini-vll-to-access-an-l3vpn/): This part describes how to configure a Martini VLL in IP interworking mode to access the L3VPN. Networking Requirements As shown in Figure 1, the NPE and PE2 serve as the PE of IP/MPLS backbone network, and the UPE works as the PE on the VLL access network. CE1 accesses the MPLS L3VPN on the IP/MPLS backbone network through the VLL, and communicates with CE2. VE 2/0/0 and VE 2/0/1 are created on the NPE. with VE 2/0/0 being the L2VE interface to terminate the VLL and VE 2/0/1 being the L3VE interface to access the MPLS L3VPN. The networking requirements … - [Configuring Martini VPLS](https://blog.network-solution.net/configuring-martini-vpls/): Networking Requirements As shown in Figure 1, two routers, PE1 and PE2, are PEs to be enabled with the VPLS function. CE1 is connected with PE1, while CE2 is connected with PE2. CE1 and CE2 belong to the same VPLS. After the VPLS configuration, interworking between CE1 and CE2 is available. In the network, construct a VPLS VPN for CE1 and CE2 and adopt the LDP as the VPLS signaling to establish the PW. Figure 1 Martini VPLS  Configuration Roadmap The configuration roadmap is as follows: Configure the routing protocol on the backbone network. Set up the remote LDP session between PEs. … - [Basic Principles of VPLS](https://blog.network-solution.net/basic-principles-of-vpls/): VPLS is an L2VPN technology based on MPLS and Ethernet technologies. VPLS can provide the multipoint-to-multipoint VPN services, which is better than the earlier point-to-point L2VPN services, and L3VPN services requiring carriers to manage the routing information. In the drafts relevant to VPLS, two VPLS network architectures are proposed: VPLS with PWs logically fully meshed and hierarchical VPLS (HVPLS). The CX600 uses either the Border Gateway Protocol (BGP) or Label Distribution Protocol (LDP) to implement the functions of the VPLS control plane. The VPLS using BGP is called the Kompella VPLS, and the VPLS using LDP is called the Martini VPLS. VPLS Forwarding … - [Configuring an Integrated IP RAN (PWE3 + L3VPN) with Ethernet NodeBs](https://blog.network-solution.net/configuring-an-integrated-ip-ran-pwe3-l3vpn-with-ethernet-nodebs/): Networking Requirements The integrated L2VPN access to L3VPN solution allows Ethernet NodeBs to communicate with Radio Network Controllers (RNCs). It terminates the L2VPN and connects the L3VPN on a SR by creating a Virtual Ethernet group (VE-group). PW redundancy is configured to protect PWs on the L2VPN and VPN FRR is configured to protect links on the L3VPN, providing reliable connections for services. H-VPLS or PWE3 can be used to construct the L2VPN. This example uses PWE3. This scheme has the following characteristics. L2VPN Type PWE3 PW Redundancy Mode Independent mode Type of the PW Between SR1 and SR2 Bypass … - [Huawei Mate 7 comes to Vodacom](https://blog.network-solution.net/huawei-mate-7-comes-to-vodacom/): Watch Peter Hu going through the features of the Mate 7 in this video: Cape Town – Chinese phone manufacturer Huawei announced that its flagship smartphone will be available in the Vodacom network on April 1.  Mate 7 Huawei kill 7 phablet was launched in 2014 and initially only changed by Cell C (6 inches) 15cm device. Mate 7 is a new impetus from China electronics giant to sell their devices in the medium, as it seeks to build its brand among South Africans Mate 7.  “If you look at the South African market, Huawei has invested heavily in awareness especially … - [Cheat sheet for ISIS from packetlife](https://blog.network-solution.net/isis-cheat-sheet/): Very Useful ISIS cheat sheet  You can download the PDF Ver. from here   - [MPLS Structure](https://blog.network-solution.net/mpls-structure/): l MPLS network forwards packet according to the label. But how does label be generated? What mechanism does MPLS adopt to implement data forwarding? l MPLS includes two plane: control plane and data plane. l Control plane’s charge is to generate and maintain routing information and label information. Data plane’s charge is conventional IP packet forwarding and labeled packet forwarding. l In control plane, routing protocol module is used to transmit routing information, generate routing table; label distribution protocol is used to complete exchange of label and establish label switch path. l Data plane includes IP forwarding table and label … - [IPRAN configuration Step by Step MPLS TE Configuration](https://blog.network-solution.net/ipran-configuration-step-by-step-mpls-te-configuration/): Hello guys , as we said before we will start configuring IPRAN , the first thing that you need after you configure the  routing Protocol ” we already configure the ISIS before ”  but we will configure it again here also , we will start the MPLS configuration on the network .   As shown in Figure 1, IS-IS is run on LSR A, LSR B, LSR C, and LSR D. They are all Level 2 devices. RSVP-TE is used to establish a TE tunnel from LSR A to LSR D. The bandwidth is 20 Mbit/s. The maximum reservable bandwidth … - [Introduction to MPLS TE](https://blog.network-solution.net/introduction-to-mpls-te/): Purpose In a traditional IP network, a node select the shortest path as the route regardless of other factors such as bandwidth. The shortest path, however, may be congested with traffic, whereas other available paths are idle. Figure 1 Problems in Traditional Routing As shown in Figure 1, assume that links have the same metric. The shortest path from R1 (R8) to R5 is R1 (R8) -> R2 -> R3 -> R4 -> R5. Data is forwarded along this shortest path though other paths to R5 are available. The situation may occur that the path R1 (R8) -> R2 -> … - [Basic Principle of BGP](https://blog.network-solution.net/basic-principle-of-bgp/): BGP Operating Modes BGP operates on a CX device in either of the following modes, as shown in Figure 1: Internal BGP (IBGP) External BGP (EBGP) BGP is called IBGP when it runs within an AS; it is called EBGP when it runs between ASs. Figure 1 BGP operating modes Roles in Transmitting BGP Messages Speaker: The CX device that sends BGP messages is called a BGP speaker. The speaker receives or generates new routing information, and then advertises the routing information to other BGP speakers. When receiving a new route from another AS, a BGP speaker compares the route … - [Comparing IS-IS and OSPF](https://blog.network-solution.net/comparing-is-is-and-ospf/): Comparison of Basic Characteristics Similarities: Both protocols are widely used IGP protocols Both protocols are link state protocols Both protocols support IP environment Both protocols adopt hierarchical design and area division Differences: IS-IS supports CLNP environment IS-IS only supports PPP and broadcast network; OSPF supports PPP, broadcast, P2MP and NBMA network. OSPF supports virtual link Different in packet encapsulation format OSPF routers can be attached to multiple areas with interfaces assigned to different areas. IS-IS routers are associated with a single area and the whole router belongs to the area. Comparison of Adjacency Relationship Similarities: Discover neighbors and form adjacencies … - [ISIS on IPRAN](https://blog.network-solution.net/isis-on-ipran/): How you can deploy ISIS on IPRAN ? I will talk about two way that can help you to deploy ISIS on IPRAN , the first one if you have a small network that not containing a lot of routers , in this case you can make all the routers as Level 2 ISIS the second one is to use hierarchical design , that means to have L1 routers , L2 routers and L1/2 Routers in your network.   now we will start the configuration : isis 1 is-level level-2  // Change the ISIS level to L2 , By default its … - [Basic Concepts of IS-IS](https://blog.network-solution.net/basic-concepts-of-is-is/): IS-IS was initially designed by the ISO and is used as a routing protocol based on CLNP addressing. CLNP is a Layer 3 protocol in the OSI reference model posed by the ISO. Figure 1 OSI reference model OSI uses systemized (or hierarchical) addressing. The services at the transport layer in OSI can be addressed through the Network Service Access Point (NSAP). The following terms are commonly used in OSI: CLNS: indicates the Connectionless Network Service. CLNP: indicates the Connectionless Network Protocol. CMNS: indicates the Connection-Mode Network Service. CONP: indicates the Connection-Oriented Network Protocol. OSI implements CLNS through CLNP, and … - [Enterprise Network Simulation Platform (eNSP)](https://blog.network-solution.net/enterprise-network-simulation-platform-ensp/): Hi all Here is the network simulator for Huawei Routers and Switches that you can use if you want to start using huawei product  , not so much to talk , it should be easy to install. Simulation Simulates many functions and features of Huawei AR routers and x7 series switches. Simulates personal computers, hubs, clouds, and FR switches. Simulates device configuration functions, which helps you learn Huawei commands. Simulates large-sized networking. Uses real network cards to connect to real network devices. Simulates packet capture on interfaces to show protocol interaction process.   Graphic User Interface Creates, modifies, deletes, and saves … - [IPRAN Technology](https://blog.network-solution.net/ipran-technology/): At this post we will describe the technologies that are used in Huawei IPRAN briefly , later we will talk about each technology. IPRAN is the network that connect the BTS,NodeB and eNodeB ” 2G,3G and LTE” to the core devices In general , its the network that will connect your mobile to the service provider . Below is the technology that is used in IPRAN Routeing Protocol ” ISIS or OSPF” BGP MPLS TE Tunnels L3VPN L2VPN QOS     ## Pages - [1-Getting Started with Python](https://blog.network-solution.net/getting-started-with-python/):     3- How to ……… 5- List of necessary application 6- VirtualBox and Virtual Machines – Short Guide  2015-05-14_12-03-19__Download_Link Running a Virtualbox VM within GNS3 v1 sRiL5jEaTciNmgrUtAFa_IMPORTANT! README!   - [You’ve unsubscribed successfully from Network Solution](https://blog.network-solution.net/youve-unsubscribed-successfully-from-network-solution/) - [You’ve subscribed successfully in Network Solution newsletters](https://blog.network-solution.net/youve-subscribed-successfully-in-network-solution-newsletter/) - [CCIE Routing & Switching v5 Overview and Preparation](https://blog.network-solution.net/ccie-routing-switching-v5-overview-and-preparation/): Introduction & Prerequisites CCIE R&S Written & Lab Exam – Part 1 CCIE R&S Written & Lab Exam – Part 2 Preparation Methodology Lab & Written Blueprints Recommended Resources – Part 1 Recommended Resources – Part 2 Building a CCIE Lab Topology - [Online Courses](https://blog.network-solution.net/online-courses/): Free Cisco Online Courses : CCNA 200-120 | Free Cisco Video Training CCNA Exploration CCNP TSHOOT 642-832 Tickets Explained and Answered CCNP Route – BGP Routeing Protocol CCIE Routing & Switching v5 Overview and Preparation Intro to CCIE Service Provider v4   - [Thank you My friend for subscribing!](https://blog.network-solution.net/thank-you-my-friend-for-subscribing/): Your subscription has been confirmed , Please add m.ammoura@network-solution.net to your Email contact to not miss any Email from me. please share  so everyone can take the benefit   - [Download Simulators](https://blog.network-solution.net/download-simulators/): Download Cisco Packet Tracer  Download Huawei eNSP Simulator - [Cisco Packet Tracer](https://blog.network-solution.net/cisco-packet-tracer/): Download Cisco Packet Tracer for Linux Download Cisco Packet Tracer for Win32bit Download Cisco Packet Tracer for Win64bit - [Huawei eNSP Simulator](https://blog.network-solution.net/ensp-huawei-download/): eNSP huawei download simulater Huawei eNSP Download you can also try packet tracer for cisco - [About Me](https://blog.network-solution.net/about-me/): My Name is Mohammad Ammoura , living in Johannesburg ,South africa Im working in a Networking field from 2004 , worked on many vendor platforms like Cisco,Huawei,Juniper… My last 4 years was in a telecommunication field with Huawei as a consultant , and in this Blog I will share with you guys my experience about how the IPRAN , IP Backbone works. if you have any question , you can email me and will back to you within 24H [comment]: # (Generated by Hostinger Tools Plugin)