OSPF Path Selection types

Hi,

In this post I would like to give a simple note about OSPF path selection

some engineers wondering which one is correct?

RFC (1587)
Intra-Area(O) over Inter-Area(O IA) over External type (E1) over N1 over E2 over N2


OR


RFC (3101)
O over O IA over N1 over E1 over N2 over E2

well, both are correct, but according to your router ios version, because since (15.2S), Cisco started to use RFC3101 which uses O over O IA over N1 over E1 over N2 over E2 

while earlier software versions will use the Intra-Area(O) over Inter-Area(O IA) over External type (E1) over N1 over E2 over N2



Thanks

My first second and last CCIE attempt story

So this is my first attempt for CCIE, I didn't pass the exam, I would not call that was a fail, I learned something very important that day, which was I'm not ready yet!

so this is what happened, I booked for my exam in Dubai UAE, for July, the weather is really hot and since its a city near the sea, humidity was really high....

I booked in a hotel that is 2 minutes walking from Cisco exam center, yet these two minutes walking was like a marathon in Dubai weather.

anyhow, I arrived UAE three days before exam, which was really boring thing to do but this is what happens when you live in a country that doesnt have flights on daily basis to UAE.

Feelings before exam:
I was really clam and relaxed and that's what I thought before the exam, but after the exam I realized I was panicked but my brain managed to keep me clam somehow, until the moment the exam started.

so I arrived at Cisco building at 07:00 AM exactly, according to the recommendation, but we had to wait until 07:40AM until the proctor came, and the waiting is one of the factors that will start the panic process, the proctor took us to the exam room and it was a normal office, with normal temperature not like many people say that its cold.

the proctor didn't say that much, he seemed very quite.

btw, what I learned, you shouldnt need the proctor if you are really ready and really a CCIE, you should get into the exam, and you shouldnt have any question to be asked to proctor or tasks to be explained, you should sit and start solving the tasks until you finish it all.

anyhow, exam was really hard, the time was flying and I could solve almost nothing, I was surprised how people told me the exam is easy while what I saw was really different.

I learnt that you must be a CCIE before going into that room, passing the exam is just part of the process, its something that you have to do, the exam is really a test for your speed in
1. understand tasks
2. typing commands
3. understanding traffic flow and the idea behind the whole lab
4.time management
5. self-control

I passed one of the three sections only, which is (Diagnostic) while I failed the other two
the TSHOOT was the panic attack and I was all over the place, I forgot where to start and how to trace the problem which caused me failing this part

the Config section I remember wasting two hours in Layer2 config only.

then wasting another hour and a half on IGP


then I decided to give up and end the exam session, all I was thinking of was my wife and my kids, I missed them a lot, and it was really bad feeling watching all the time I did studying going like this in the exam
Ok, I walked out that building and I felt such satisfaction that I didnt understand why.
was is because of the pressure I put myself into? or was it because I did the exam and even if I failed I was ready that I will pass next time and the important thing is that I sat the exam and saw the exam?



I tried to enjoy Dubai until the flight date, I was really excited to go home and see my family.

the next thing to do was to set a new plan, I wanted to conquer CCIE and be a real one.

I started viewing my weak points, and set a plan to fill the gaps, until next attempt I must be 100% ready to pass the exam, no excuses and no panic

Next Attempt? February 2019.

 

update to this, I did not pass my second attempt in Feb. 2019, and I tried again few months later specifically in June 2019 and I passed the exam this time.

the feelings after passing the exam are unexplained, worked very hard to pass this monster exam.

it is time to move on now to learn more and prove myself as an expert and help others and payback the community.

Thanks

Samer R. Saleem

EIGRP Metric Calculation

In this post I will explain about EIGRP metric calculation, and explain what is the meaning of "EIGRP calculates the minimum bandwidth along the path"

in the following topology:

 we are running EIGRP all over the network above, R2 wants to reach loopback of R6 (6.6.6.6/32)

there are two paths, however they are not equal in metric, since EIGRP selects the best metric "lowest metric", then this will mean EIGRP will have a specific way of calculating this metric which is using  two things (delay, Bandwidth)
these two will be put into EIGRP metric calculation formula, and the lowest metric value between the two paths will be installed in the routing table, the second best route will be used as backup and will be installed in EIGRP topology table.

the formula is as this:
256  x  [ (10^7 / minimum bandwidth through the destination)  X   ( Sum of delays / 10 )]


ok, but what is the meaning of minimum bandwidth? well, when EIGRP calculate the metric it will choose the lowest metric to be calculated on the best path selected, for example, the best path in our topology is (R2-R4-R5-R6)

R2 will check the lowest bandwidth on the two paths and then calculate the composite metric using the formula, even if its other interface via R3 had a better Bandwidth configured, the reason is the link from R4 to R5 has a better metric (5500Kbps), this same value which is the minimum bandwidth on the path will be used for the calculation, check highlighted below:

R2#show ip eigrp topology 6.6.6.6/32
EIGRP-IPv4 Topology Entry for AS(100)/ID(2.2.2.2) for 6.6.6.6/32
  State is Passive, Query origin flag is 1, 1 Successor(s), FD is 670208
  Descriptor Blocks:
  24.0.0.4 (Ethernet0/2), from 24.0.0.4, Send flag is 0x0
      Composite metric is (670208/644608), route is Internal
      Vector metric:
        Minimum bandwidth is 5500 Kbit
        Total delay is 8000 microseconds
        Reliability is 255/255
        Load is 1/255
        Minimum MTU is 1500
        Hop count is 3
        Originating router is 6.6.6.6
  23.0.0.3 (Ethernet0/1), from 23.0.0.3, Send flag is 0x0
      Composite metric is (716800/691200), route is Internal
      Vector metric:
        Minimum bandwidth is 5000 Kbit
        Total delay is 8000 microseconds
        Reliability is 255/255
        Load is 1/255
        Minimum MTU is 1500
        Hop count is 3
        Originating router is 6.6.6.6



===============================
below displays interface bandwidth, even though E0/1 that goes to R3 has a better bandwidth, R2 will use the better reported distance value
interface Ethernet0/1
Description TO-R3
 bandwidth 7000
 ip address 23.0.0.2 255.255.255.0
end

R2#show run inter e0/2
Building configuration...

Current configuration : 80 bytes
!
interface Ethernet0/2
Description TO-R4
 bandwidth 6000
 ip address 24.0.0.2 255.255.255.0
end

R2#

So again, R2 will take the minimum bandwidth from each of the paths it has to the destination, then put them separately into the formula mentioned above then the results will be compared and the lowest will be chosen. 


NOTE: it's recommended to use DELAY in the path manipulation in EIGRP instead of Bandwidth for the reasons mentioned above. 

I hope this was helpful.

Cisco Firepower Task Scheduling

Cisco Firepower can be scheduled to do tasks automatically; this is very useful tool to help managing the Firepower in following items:

1. Backup
2. Updating CRL
3. Deploy Policies
4.NMAP Scan
5. Reporting
6.Downloading latest updates
7. Installing latest updates
8.Push Latest Updates
9.Update URL filtering database

For each item, you can use Firepower Scheduling tool to create a task that run for once or recurring

In this example I will create a Task that make a backup on Weekly basis, ok let's begin:

1. Login to Firepower
2. Go to System > Tools > Scheduling

3. Click Add Task
4. From the drop list select (Backup)
5. Filling the following information:

6. A backup profile can be created by going to System> tools >backup/restore > Backup Profile> create profile :  the profile will contain the remote server that you will use for your scheduled backups, for example below image, I have Storage path created in (System>Configuration>Remote Storage Device), and select backup configuration, and other options like email notification when backup is done is really good

7. Save and Go back to Schedule, you will see the task is created and added to the Calendar.

I hope this was helpful.

Firepower Automatic Reporting to Email

In this post I'm going to show you how to create automated  reports that will be sent from Fire sight management system to your email periodically

First we have to create a schedule:

Go to system >  Tools > scheduling










  

Click on Add Task, fill the job name, choose recurring and the starting date, select the repeat option and the time you want to the report to start run and the day
then from Report Template (Firepower Report) from the drop list

fill the email address of the status of the job you want to create, and tick the last option as well.




Ok, now lets go and edit the report that we want to get on weekly basis:

you can click on the edit on the Report template or you can go to Overview > reporting > Report Templates

in here you select the report template (Firepower Report: $<Customer Name> in order to edit

then click on Generate




A window will open that you can edit:
1. choose output format
2. the ip address of your exchange server should be already configured and in my case its 10.211.0.30
3.Customer name (this name will be showing in the created Report that you will receive)
4.choose Network that you will get the report for and I will choose all the network (0.0.0.0/0)
5. email options: send email must be selected
6. fill the recipient list, fill the subject and the body of the message
7. click on Close and then the save, don't click on generate unless you want to get report manually.

check below settings for the mentioned steps above:



Usually the time is inherited and I think it will be report for the last hour, which is not good, you can edit all the report by scrolling down and changing the time window as in the picture below:






I hope this was helpful.

you can test the report by making the task run in near time.

Good luck!