cisco - The Network Stack

Ansible 2.5 - New Network Modules

Ansible 2.5 just came out, and with it comes new network modules (and the network_cli and netconf connectivity methods). The new modules allow us to manage certain IOS configurations without always depending on the "ios_config" module, while the network_cli connectivity method means we don't always need

ansible

Ansible - BadHostKeyException

When executing an ansible playbook, you may get the following error: An exception occurred during task execution. To see the full traceback, use -vvv. The error was: paramiko.BadHostKeyException: Host key for server switch-name does not match! This probably happened after you changed the name of your network device, and

ansible

Ansible - VLAN Provisioning

Note: There is a newer guide for VLAN provisioning with Ansible 2.5 Ansible is such a powerfull tool that it can be easy to get lost in all the possibilities. Running your "network infrastructure as code" with full configs auto-generated and checked into git is the dream, but we

cisco

Cisco Config Basics - User Port

This is my first post in a series I'm calling Cisco Config Basics. These posts will serve as a reference for anyone new to Cisco, or those of you just looking to compare your current configs. After the full config, I will explain each config item line-by-line. In a campus

cisco

Cisco CSR License Install

Found a great blog post on installing a demo license on the CSR router (http://www.burningnode.com/2016/02/08/the-csr1000v-license-and-the-100kbps/), but I came across one additional (and important step below). TL;DR - Make sure to accept the end user agreement and SAVE before reloading! ip-10-128-228-209#reload % Unfortunately

cisco

Copy File to IOS Router via SCP

Enable SCP on the Cisco router: cisco-csr(config)#ip scp server enable Copy file from linux server to router with the following syntax: scp filename admin@10.0.0.1:flash:/filename

ipv6

IPv6 Cisco Deployment

I recently deployed a small IPv6 network to support our developers meeting Apple's IPv6 compatibility requirements (https://developer.apple.com/support/ipv6/). This was a good experience to get my feet wet with IPv6 as we have plans to dual-stack our environment in the coming year. Here are my notes:

cisco

CUCM IM change postgres external database

If you need to change the postgres external database for CUCM, there a few steps to follow: 1. Change database server name a. External server setup -> External databases 2. Unassign servers and disable persistent chat a. Messaging -> Group Chat and Persistent Chat b. Change "Persistant Chat Database Assigntment"

cisco

ASR 1001-X Show Transceiver

On our new ASR I was looking for a command similar to show interface 1/0/1 transceiver, but that didn't exist. Here are the commands I found relevant to the ASR: To show transceiver hardware details: #show hw-module interface g0/0/1 transceiver idprom To show transceiver temp and

cisco

Cisco ISR4431 Random Reboot

My ISR4431 router has randomly rebooted a couple times, finally found this field notice: http://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63938.html The router is being used for light VPN duties, nothing too heavy. After upgrading per the Field Notice, all has been fine.

cisco

Cisco Router Packet Capture and Export

I've recently had to troubleshoot some SIP calls going through a Cisco router (CUBE) and needed a way to capture the stream and view it easily. To do this, you will need: 1. CLI access to the router 2. Wireshark installed on your PC 3. tftp server installed on your

cisco

Cisco CUCM/CUBE SIP Troubleshooting

Some quick notes on troubleshooting tools in a Cisco SIP Call Manager environment: Commands on the CUBE router: show call active voice compact debug ccsip messages debug voip ccapi inout Article on understanding SIP traces: https://supportforums.cisco.com/document/113271/understanding-sip-traces SIP call flows and troubleshooting: https://supportforums.cisco.

cisco

Nexus C9372PX NX-OS Upgrade

Recently upgraded a pair of C9372PX switches with the following commands: 1. Copy new .bin file over to switch copy scp://username@scpserverIPaddress//n9000-dk9.7.0.3.I1.2.bin bootflash:n9000-dk9.7.0.3.I1.2.bin 2. Show the impact of installing the new version show install all

cisco

Jabber for iPhone Move to Mobile

I noticed on the Cisco Jabber for iPhone app there is a "Move to Mobile" option when you are on a VoIP call. This feature did not work for me initially, so here are my steps to get it working. 1. User Profile: Make sure "Enable Mobility" is checked 2.

cisco

CUCM Phone Firmware Update

1. Go to cisco.com, search for your phone model and download the relevant firmware 2. Copy firmware to a SFTP server (I run Solarwind's free SFTP server on my laptop) 3. Log into CUCM Pub: OS Administration->Software Upgrade->Install/Upgrade->Remote Filesystem 4. Go through the steps to

cisco

Cisco CUCM, CUPS, Unity Upgrade to 10.5.2

I recently upgraded a Cisco Call Manager environment from 10.5.1 to 10.5.2, and since I had to figure out all the upgrade steps, I figured I'd post my process. I used the upgrade guide found here: Cisco Upgrade Guide 1. Login to CM Publisher Disaster Recovery

call-manager

CUCM LDAP Sync Based on User Group

If you don't want CUCM to sync your entire LDAP directory, you will need to use a LDAP Custom Filter. This filter can be used to sync based on AD Security Group. The filter is: (&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2)) (memberOf=CN=

call-manager

Cisco Mobile and Remote Access via Expressway

Deployed Cisco Expressway C & E for a CUCM deployment, and found these guides most helpful: Installing the VM on vSphere: http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/install_guide/Cisco-Expressway-Virtual-Machine-Install-Guide-X8-1.pdf Configuration and Deployment Guide: http://www.cisco.com/c/dam/en/us/

call-manager

Cisco IM&P Chat Room Postgres Server

If you want to implement chat rooms/persistent chat or chat logging with Cisco IM and Presence, you need to setup an external postgres server. The setup is relatively easy (I used a ubuntu server), and can be found here. The problem I came across was that while testing, I

call-manager

Cisco CUCM TFTP server

If you want to view the files loaded on your CUCM TFTP server, you don't have to download and open the file. Just navigate to http://cucm-ip-address:6970/file.xml For example, if I wanted to view my jabber config, I would go to: http://cucm-ip-address:6970/jabber-config.xml Alternatively,

cisco

New Cisco ISR4000 Series Routers

I got the chance to install a new Cisco ISR 4431 today, and the best surprise (besides the hugely upgraded throughput) is that the onboard router interfaces now support LACP! Before, you had to resort to getting a switch HWIC module, or just using "mode on" channel-groups. Since the 4431

cisco

Cisco vs HP vs Dell CLI - VLAN Configuration

This post continues my series on the differences between these three manufacturers and how they implement L2 and L3 VLANs. Scenario 1: Create a Layer 2 VLAN Cisco IOS: vlan 10 HP Procurve: vlan 10 Dell Powerconnect: vlan database vlan 10 Scenario 2: Create a Layer 3 VLAN (that's routable)

cisco

Cisco vs HP vs Dell CLI - Interface Configuration

After working with all three switch manufacturers in a short period of time, I figured I would do a quick post on how each chooses how to implement VLANs at the interface level. Scenario 1: Switchport needs to be part of a single native VLAN (VLAN 10) Cisco IOS: interface

cisco

Cisco 6500 "Environment Checksum in NVRAM Failed"

Had an issue where an older Cisco 6500 switch was rebooted, and the MSFC would not start correctly and gave the following errors: "environment checksum in nvram failed" and "rommon nvram area is corrupted". When trying to log into the the module from CatOS (session 15), the console stated that

cisco

DMVPN Troubleshooting Commands

Some basic IOS IPsec/DMVPN commands to aid with troubleshooting: show dmvpn detail show ip nhrp show ip nhrp multicast show crypto isakmp sa show crypto isakmp policy show crypto ipsec sa show run | s isakmp show run | s ipsec show run | s interface Tunnel debug crypto isakmp debug crypto