Net Scenarios
for day-to-day networking needs
Configuring dialup users in ScreenOS with Group IKE ID
May 30th
You are a network Administrator for ABCBrothers Ltd. Your CIO calls you one day at the office, following the recent acquisition of Juniper SSG firewalls and informs you that the entire sales department needs remote connectivity to the company’s resources all the time. You are given just one day to finish implementing this new feature on the local firewalls. Keeping in mind that there are over fifty employees needing accounts, you need to find a fast solution to create so many users in so little time.
After giving it much thought, you remember that the Juniper SSG has a feature called More >
CCNP BSCI – OSPF Monster Lab – Part 2
Feb 14th
In Part 1 of the OSPF monster lab we configured a multi-area OSPF topology with a NBMA cloud, a broadcast link and point-to-point links. The lab left us with a fully functional and converged network, albeit rather suboptimal in design.
Part 2 of this lab will add external routes and look at summarization.
Step 1. External routesWe’ve ignored R6 in the first part of the lab, time to give him some lovin’. I’ve decided to go with EIGRP between the two, in order to have a bit of fun with route redistribution between the two protocols. It is something that needs to be More >
Configuring IPSEC VPNs with overlapping addresses in Screenos
Feb 11th
You are a network Administrator for ABCBrothers Ltd. One of your clients requests an account to your local FTP server for business purposes. Because the ftp can be accessed only through a VPN connection, you decide to create a new IPSEC tunnel with the client. When you ask him what his LAN ip address class is you get a big surprise, the ip addresses are overlapping. After some discussions, the conclusion is that neither of you can change the ips. The only solution is to do natting on the vpn tunnel. Luckily, the client has the same firewall as you, More >
CCNP BSCI – OSPF Monster Lab – Part 1
Feb 10th
Introduction
This is a lab created to cover most of the OSPF concepts that one needs to know for the BSCI certification. There are a few things that have been left out, like virtual-links and IPv6, which will be touched in different smaller labs.
The action takes place in a multi-area OSPF environment, connected to an external router running EIGRP for some basic redistribution and having external routes present in our OSPF domain. The workflow will be divided in multiple parts, starting from basic configuration, running OSPF successfully everywhere and tuning each area to get the best results.
Step 1. The More >
Configuring redundant IPSec VPN Tunnels using OSPF in Screenos
Feb 7th
You are a network Administrator for ABCBrothers Ltd. The company has just opened a new office in another city and you are required to configure the infrastructure. Because there are applications that need a continuous connection to the central servers, you decide to get two connections from separate ISPs in order to reduce the downtime. Because at the central office you are administering a Juniper firewall, you buy a smaller firewall from the same manufacturer for the new location. Your topology should look like this:
You use interfaces ethernet0/0 and ethernet 0/1 as connections to the ISPs and you add them More >