GNS3 - www.m00nie.com

GNS3

A collection of 15 posts

EIGRP Filtering (GNS3 lab)

EIGRP Filtering (GNS3 lab)

In this GNS3 lab we're looking as the various options on how we can filter updates between EIGRP speakers and then how that affects the traffic flow (as EIGRP is a distance vector protocol we can filter updates :))This is just a lab to look at the different methods of

6to4 Tunnelling (GNS3 Lab)

6to4 Tunnelling (GNS3 Lab)

This is a quick lab to look over how 6to4 tunnelling can be implemented using GNS3 1.3 and 3725 (running c3725-adventerprisek9-mz124-15.image). The topology will be as below but the important part if the colouring of the network segments and noticing the middle/core is purely IPv4 only! Our

Install GNS3 1.x on Fedora 22

Install GNS3 1.x on Fedora 22

Quick guide to installing the quite awesome GNS3. Very similar process to Fedora 20 but this time using DNF and a small adjustment on some package names with some extras included now for dynamips to compile since it now uses cmake. Install dependencies sudo dnf install git gcc python3-devel python-pip

GET VPN (GNS3 Lab)

GET VPN (GNS3 Lab)

Group Encrypted Transport (GET) VPN is slightly different and has quite different use cases from more traditional point to point IPSEC VPN where each point to point VPN is quite distinct in its own right. The most import thing to remember at GET VPN is the "G" means group and

DMVPN setup with PSK (GNS3 Lab)

DMVPN setup with PSK (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Install GNS3 1.0 on Fedora

Install GNS3 1.0 on Fedora

Recently started to play around with the new GN3 1.0 release on my Fedora 20 laptop. Just a quick guide to installing since the official notes only seem to mention apt/debian. On a side note the new 1.0 releases are starting to look awesome already :) Install dependencies

Fedora 19 how to install GNS3

Fedora 19 how to install GNS3

Doesnt seem to be a package for GNS3 on Fedora but installing from source is pretty straight forward :) The example below uses the latest version at the time of writing which was 0.8.4 stable. wget http://sourceforge.net/projects/gns-3/files/GNS3/0.8.4/GNS3-0.8.4-src.

DMVPN with PKI authentication (GNS3 Lab)

DMVPN with PKI authentication (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Cisco IOS Certificate Server set-up and client enrolment (GNS3 Lab)

Cisco IOS Certificate Server set-up and client enrolment (GNS3 Lab)

A quick step by step overview of how to configure the certificate server on a Cisco IOS device. The certificate server functionality was added in version 12.3(4). It is only available in in security images or higher. We can use this functionality to provide scalable authentication for VPN

Dynamic point to point IPSEC VPN tunnels using DTVIs (GNS3 Lab)

Dynamic point to point IPSEC VPN tunnels using DTVIs (GNS3 Lab)

Manually configuring point to point IPSEC tunnels can become a big administrative burden as the number of endpoints grows. In a hub and spoke environment we can use Dynamic Virtual Tunnel Interfaces (DVTI) to help ease this burden of lots of site to site or remote access tunnels When using

Simple Zone Based IOS Firewall (GNS3 Lab)

640-553 CCNA Security

Simple Zone Based IOS Firewall (GNS3 Lab)

Just a post about the basic config and options of Cisco IOS zone based firewall using the Topology below Grab the initial configs and GNS3 .net file [HERE]. From the initial configs all interfaces have connectivity to each other. First off lets configure the zones and assign each interface to

Steps to configure an IPSEC site to site VPN on a Cisco IOS device (GNS3 Lab)

640-553 CCNA Security

Steps to configure an IPSEC site to site VPN on a Cisco IOS device (GNS3 Lab)

Just some short notes on basic IOS vpns using the topology below as an example. All the configuration examples are for the router Lefty. Grab the GNS3 .net file and initial configs [HERE] if you want to try. The following five steps need to configured in order to create an

642-691 BGP+MPLS

BGP Route Reflectors (GNS3 lab)

One problem of having a large number of routers running IBGP with each other in a full mesh is the volume of IBGP connections needed. The formula to see the number of connections needed for a full IBGP mesh is n(n-1)/2 so with 20 routers we would end

BGP Confederations (GNS3 Lab)

Similar to using route reflectors confederations are usually used to reduce the amount of IBGP connections needed for a full mesh. They do this by splitting an AS into multiple sub ASs. In the sub ASs created by the confederation all the normal rules of IBGP apply e.g. Fully

Changing MED value in BGP (GNS3 lab)

642-691 BGP+MPLS

Changing MED value in BGP (GNS3 lab)

BGP Multiexit Discriminator (MED or MULTI_EXIT_DISC) is an optional nontransative attribute (Type code Value 4). It is usually used to exchange info about a preferred to external BGP neighbours. MED is passed between ASs unlike LOCAL_PREF but each time it is passed to another new AS it