Saturday, May 30, 2009

Configuring RMON Support

I didn’t found a document that describes a RMON feature in the order that it need to be configured so here is the right way to configure it:

 

RMON – is used to create event driven SNMP traps based on MIB’s that a Cisco device supports. RMON is made up of two sections, the first being an event and the second the alarm. Alarms are what occur on the router i.e. an increase/decrease in a MIB value. An RMON alarm is defined by issuing the rmon alarm global configuration command, and tracks the value of a MIB based on the delta (relative change) of the variable, or the absolute change of the variable. RMON can be used to track interface utilization. [Stephen Bowes] The main commands are rmon alarm... & rmon event.., verification involves show rmon alarms & sh rmon events.

 

For example we would like to configure a log description “interface f0/0 queue is full” when the queue rising to 75% and “interface f0/0 queue is ok” when queue is decreasing for 40% load. The MIB that we will query is ifEntry.20.

 

1) First we need to enable SNMP on the router:

 

R8>en

R8#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R8(config)#snmp-server enable traps

R8(config)#end

R8#

 

Following that all traps will appear on the router configuration.

 

2) We will check what is the MIB number on the interface router need to query:

 

R8#show snmp mib ifmib ifindex f0/0   

FastEthernet0/0: Ifindex = 2

R8#

 

3) Then we will make number “2” that identifies the MIB permanent.

 

R8(config)#snmp-server ifindex persist

 

4) Configure the destination for the logs:

 

R8(config)#logging on

R8(config)#logging buffered

R8(config)#logging monitor critical

 

5) Configuration of RMON event (name configuration for the alarm):

 

R8(config)#rmon event 1 log description "interface f0/0 queue full"

R8(config)#rmon event 2 log description "interface f0/0 queue ok"

 

6) Configuration of RMON alarm (trigger configuration):

 

R8(config)#rmon alarm 1 ifEntry.20.2 60 absolute rising-threshold 75 1 falling-threshold 40 2

 

The full configuration will be:

 

logging buffered 4096 debugging

logging monitor critical

!

snmp-server ifindex persist

snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart

snmp-server enable traps tty

snmp-server enable traps casa

snmp-server enable traps gatekeeper

snmp-server enable traps xgcp

snmp-server enable traps director server-up server-down

snmp-server enable traps isdn call-information

snmp-server enable traps isdn layer2

snmp-server enable traps isdn chan-not-avail

snmp-server enable traps isdn ietf

snmp-server enable traps hsrp

snmp-server enable traps config

snmp-server enable traps entity

snmp-server enable traps config-copy

snmp-server enable traps envmon

snmp-server enable traps ds0-busyout

snmp-server enable traps ds1-loopback

snmp-server enable traps bgp

snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message

snmp-server enable traps ipmulticast

snmp-server enable traps msdp

snmp-server enable traps rsvp

snmp-server enable traps frame-relay

snmp-server enable traps frame-relay subif

snmp-server enable traps syslog

snmp-server enable traps rtr

snmp-server enable traps mpls ldp

snmp-server enable traps mpls traffic-eng

snmp-server enable traps mpls vpn

snmp-server enable traps cnpd

snmp-server enable traps stun

snmp-server enable traps dlsw

snmp-server enable traps bstun

snmp-server enable traps pppoe

snmp-server enable traps atm subif

snmp-server enable traps dial

snmp-server enable traps dsp card-status

snmp-server enable traps ipmobile

snmp-server enable traps vtp

snmp-server enable traps vsimaster

snmp-server enable traps voice poor-qov

snmp-server enable traps dnis

!

rmon event 1 log description "interface f0/0 queue full" owner config

rmon event 2 log description "interface f0/0 queue ok" owner config

rmon alarm 1 ifEntry.20.2 60 absolute rising-threshold 75 1 falling-threshold 40 2 owner config


R8#show rmon alarms 

Alarm 1 is active, owned by config

 Monitors ifEntry.20.2 every 60 second(s)

 Taking absolute samples, last value was 0

 Rising threshold is 75, assigned to event 1

 Falling threshold is 40, assigned to event 2

 On startup enable rising or falling alarm

   

R8#show rmon events 

Event 1 is active, owned by config

 Description is interface f0/0 queue full

 Event firing causes log,

 last event fired at  0y0w0d,00:00:00,

 Current uptime       0y0w0d,06:27:12

Event 2 is active, owned by config

 Description is interface f0/0 queue ok

 Event firing causes log,

 last event fired at  0y0w0d,06:23:46,

 Current uptime       0y0w0d,06:27:12

 Current log entries:

  index  uptime              description

  1      0y0w0d,06:23:46     interface f0/0 queue ok


R8#show rmon history 

History Control table is empty

      

R8#show rmon statistics 

Ethernet Statistics table is empty

R8#


10 ccie lab tips for me... can be more

1) Read the entire exam – now I know everyone is saying that and even Cisco it advising that in there site, but this is one of the important things you need to do before you start configuring as when you start configuring, your mind is set to different mode and you will miss important details।
2) Take Notes - In addition to step 1 you must know to take notes, what I mean you ask yourself?! Well when you read the exam you will probably be thinking "am I wasting my time reading when other are typing and almost finishing their exam" I say NO you are not but because you all stress and your brain is speeding in almost 200mph you will not remember if you will not take notes.
3) Work Your Way UP – After first two steps are done you are probably 30 min – 40 min into your exam do not panic, work in a step by step layer 2 to layer 3…
4) Ask The Proctor – there was in my lab a real nice person that I am sorry I didn't ask for his name but for me his name was Mr. Proctor and whenever I had a question about something that I didn't understand or I thought that it is not well asked then I got up from my seat and went to his desk and ASKED, no shame, If you do not understand ASK that is one of his jobs, Accept for escorting you to the dining room J
5) Don't ASK Dumb Questions – The Proctor will not give you an answer to your lab question, he will only answer "yes" or "no" format and only if he understand from your question that you know what you are talking about, so do not go and ask "question 1.1 what do you want me to do here" (In CCIE Routing and Switching Practice Labs, Cisco Press book you can see a lot of questions / Answers like that).
6) Be Polite – the proctor doesn't work for you so be nice, that is the end of proctor candidate relation advice.
7) You Can Jump Back and FWD – the exam is open to your judgment you can say I will do first security then multicast or I will do IPv6 last.
8) Keep Track – the exam have a lot of questions and sections, you need to write down questions and/or sections you finished, I myself written every question and its points, when done I have marked with "ok" when skipped marked with "later" when I have finished I looked on my paper and made sure I didn't left any question without "ok".
9) Know How to check – after every question I did a check to make sure that what they want to work dose work, it is not always sufficient to put the commands as some time one section is relaying on another and putting the command relating to that question will not work until you add or remove other commands, I hope that is not to confusing, but most of the exam time went in my exam to verification. Also once you go to sections like security that may break other sections, I would go back and verify the sections all over again and if they don't work I know where is the problem, if I didn't check every step it would be hard and more stressful when something would not work at the end.
10) Do not panic – that is important and for some it is more for other it is less, when you see the exam for the first time do not panic take it and brake it to small pieces, and do it one step at a time, if you face a problem skip ahead do not try to solve it for 2hr you can come back to it later.

Voice over IP analytical products

In my daily work I need to use a lot of Voice calculation for VOIP traffic. I am using a great online tool that I want to share with you:

 

http://www.voip-calculator.com/

 

Later we will try to explain what i s standing after this calculation and how its work...

Tips for Taking the CCIE SP - Avoid These Common Mistakes

I am recently found this new three PDF documents on the web. Has been released by Cisco but I don’t know if it possible to find through the regular search on cisco.com:

 

1)     Layer 2 VPN Service Interworking—Avoid These Common Mistakes - describe the example of L2VPN configuration and common mistakes in very easy setup. Very useful to who is configuring L2 services for the first time.

 2)     Reload Test Devices – Explaining the needs of restarting the routers in the real lab. Pay attention to very important note that coming from Cisco: “The lab exam evaluation is based on the final submission of the candidate. In other words, grading is based on the work as it exists when the candidate leaves the lab. As outlined in the previous scenario, some configurations might not work after a reload. Therefore, candidates should NOT reload any devices close to the time that they will be leaving the lab, unless they are extremely confident in their work.”

For me it was like a shot from cannon. BOOM. I was absolutely sure till now that proctor before he is testing the lab he is doing reload to the machines. Probably not!!! Need to remember that.

3)     MPLS VPN—Avoid These Common Mistakes - This tip sheet lists some of the common mistakes that candidates should try to avoid when completing the MPLS VPN section of the CCIE SP lab exam.

My SP styding

I am almost 30 days before my CCIE SP exam (second attempt) and I am waiting for this almost as it was my first time to go to RTP and attend aging for the LAB.

I am searching a lot on the web now to find out a new stuff and to learn what people thinking and know about the exam.

 

I want to believe that somewhere in WWW I will find valuable information and step by step I will build the right way to pass this exam.

 

I want to confect that the expiration for me were the blogs of Stephen Bowes http://cciesplab.wordpress.com/2008/09/  and Shivlu Jain http://shivlu.blogspot.com/ .

 

To which of you who want to start the study now the blogs are described above are the best to start with, that describes the personal point of you for each one of the gentlemen’s. Inside of them any candidates can find a lot (and I mean a lot...) of valuable information.

 

So now I will stared to describe how my way of doing the big step to the CCIE SP and I want to compare if this close enough to my associates and I am wondering if we have different ways to do it or not.. So let’s start....