Automating VRF-aware IPsec VPN with IKEv2 using Netmiko and Jinja2 templates
In the previous IPsec posts we established the tunnel using IKEv1 and used the crypto isakmp ... command. Now in this post we'll take a…
Read more →Welcome to my website!
This is my blog, I've been preparing for my CCNP ENCOR exam, so I mostly write posts about networking stuff recently: Routing/switching, BGP, OSPF, Multicast, MPLS VPNs, Security, QoS etc. Currently I have the CCNP ENARSI, the CCNA and the Linux+ certifications, I also have a degree in telecommunication.
I sometimes create educational videos, check out my YouTube Channel: Networking Explained
I sometimes upload my Python scripts, YAML files for CML labs, and pcaps for Wireshark packet analysis to my GitHub repos.
This is what I listen while I do labbing and write posts: my Spotify playlist.
Network Automation with Python: Netmiko and NAPALM basics
In the previous post we've seen how we can automate network devices by sending/receiving structured configuration/state data by using YANG models. Now we're going to…
Read more →Model-Driven Configuration part 1: Implementing RESTCONF on IOS-XE
This post is the first part of a series where we're going to explore YANG models and take look at how we can configure IOS-XE…
Read more →Implementing VXLAN on NX-OS part 2: Anycast RP with MSDP, Phantom RP, BGP EVPN, inter-VXLAN routing with Symmetric IRB
We continue the previous VXLAN lab first by providing redundancy for the RP. I'll show two methods: Anycast RP with MSDP and Phantom RP which…
Read more →Implementing VXLAN on NX-OS part 1: basic VXLAN operation, multicast flood and learn
VXLAN is tunneling protocol, which is mainly used in data centers. With VXLAN we can encapsulate the whole Ethernet frame in a UDP datagram. VXLAN…
Read more →Hacking networks with Scapy (Part 1): attacking DTP/Spanning Tree
Scapy is a very powerful packet crafting, packet manipulation tool written in Python. With the help of Scapy we can perform many kind of malicious…
Read more →BGP Additional-paths vs. Multipath
In the following post we're going to take a look at these two features: what are their purpose and in which situations can they be…
Read more →BGP AS-PATH manipulation techniques: local-as, prepending, allowas-in, as-override
The AS-PATH is one most interesting BGP path attribute. It's a well known, mandatory, and transitive path attribute, so it must be included in every…
Read more →Implementing Unified MPLS
Because of scalability reasons we might have multiple IGP processes running within our core network. If we have many routers and prefixes we might have…
Read more →Crating a Python script to control the GPIO of my Raspberry Pi
To practice for my CCNP ENCOR I've been creating simple Python scripts recently. I've got a few Raspberry Pis and temperature sensors lying around at…
Read more →Implementing MPLS-TE: VPN over the TE tunnel from PE to PE, TE metric, explicit-path
By default the IGP metric (ISIS/OSPF cost) determines how the packets are forwarded within the MPLS core. With MPLS Traffic Engineering (TE) we can be…
Read more →Ethernet Flow Point: VLAN tag manipulation for the VPLS service
We continue one of my previous VPLS topology: this time we're going to take a look at what happens from the perspective of the service…
Read more →Implementing Site-to-Site IPsec VPN: GRE over IPsec and MTU issues (Part 3)
In the previous post I created the VPN tunnel between the two sites with a crypto map. This implementation is very static, the ACLs define…
Read more →Implementing Site-to-Site IPsec VPN with crypto map (Part 2): Troubleshooting
We continue the previous IPsec lab with basic troubleshooting. If you haven't read part 1, read that post first before you continue. So what are…
Read more →Implementing Site-to-Site IPsec VPN with crypto map (Part 1)
In this lab we're going to establish secure communication between two private subnets located at two different sites over an unsecure network (the internet for…
Read more →Multicast over MPLS: mVPN Profile 1 and Profile 13
After going through how we can configure Profile 0, this time we're going to take a look at two other profiles which both require mLDP.
Read more →Multicast over MPLS: mVPN Profile 0 (Draft Rosen)
Previously I wrote a few posts about how multicast works but only within an enterprise environment without MPLS. This time we're going to take a…
Read more →Configuring multi-area OSPF with Ansible
This time we're going to configure OSPF, but not with the CLI, we're going to use a network automation tool called Ansible. I'm going to…
Read more →Carrier Supporting Carrier (CSC) MPLS L3VPN
After going through inter-AS Option A, B and C, this time we take a look at the CSC implementation. This is very similar to the…
Read more →Implementing High Availability with Bidirectional Forwarding Detection (BFD)
How can a router detect when a BGP neighbor, or just any kind of IGP neighbor device goes down? If the two devices are directly,…
Read more →