myITmicroblog

sw1# sh port-channel load-balance forwarding-path interface port-channel 5 vlan 330 dst-mac 8c60.4f65.f13c Missing params will be substituted by 0's. Load-balance Algorithm on switch: source-dest-ip crc8_hash: 63   Outgoing port id  Ethernet1/5 Param(s) used to calculate load-balance:         src-interface: None         lu-mc-qnum: 40 sw1# sh port-channel load-balance forwarding-path interface port-channel 5 vlan 830 dst-mac 0050.569b.2cd8 Missing params will be substituted by 0's. Load-balance Algorithm on switch: source-dest-ip crc8_hash: 80   Outgoing port id: Ethernet1/7 Param(s) used to calculate load-balance:         dst-mac:  0050.569b.2cd8         src-mac:  0000.0000.0000 sw1#

I need to implement a transparent firewall between r1 and r2. Ping and bgp session have to be allowed. 10.0 . 0.1 10.0 . 0.100 10.0 . 0.2 /---- \ ----- /---- \ | R1 |----------| ASA1 |----------| R2 | \- ---/ ----- \- ---/ vlan10 ---->| <---- vlan20 1) Cisco Adaptive Security Appliance Software Version 8.3(1) First I configure min requirements to allow on bgp session between r1 and r2 R1:   ! interface GigabitEthernet0 / 0 ip address 10.0 . 0.1 255.255 . 255.0 ! router bgp 65001 neighbor 10.0 . 0.2 remote - as 65001 ! R2:   ! interface GigabitEthernet0 / 0 ip address 10.0 . 0.2 255.255 . 255.0 ! router bgp 65001 neighbor 10.0 . 0.1 remote - as 65001 ! ASA is in ‘transparent mode’: ASA1:   ! firewall transparent hostname asa1 ! ! interface Ethernet0 / 0.10 vlan 10 nameif outside ...

Today I’d like to implement L2 firewall on cisco router using CBAC. A few months ago I did similar lab but today I’d like to add a new requirement: allowing on DHCP packets across the L2 firewall. fa1 / 0 / 11 fa1 / 0 / 13 /---- \ \ ----------------------- / / ---- \ | R2 |----------| SW |----------| R3 | \- ---/ \ ----------------------- / \- ---/ gig0 / 0 / \ /---- \ / \ fa0 / 0 10.0 . 0.1 fa1 / 0 / 9 - | R1 |- fa1 / 0 / 10 dhcp client dhcp server / \- ---/ \ gig0 / 0 | gig0 / 1 | VLAN 10 L2 FW VLAN 20 --------------------------->|<---------------------------- At the beginning, to test connectivity and CBAC, the interface fa0/0 will...