Packetswitch Networking Blog

Cisco FMC HTTPS certificate with OpenSSL

ProblemYou want to install HTTPS certificate for the Cisco FirePower Management Centre (FMC) SolutionI already have an Internal CA certificate created with OpenSSL. You only need two commands to create one for you. #Generate private key openssl genrsa -des3 -out internalCA.key 2048 #Generate

cisco

Cisco ASA syslog with Splunk

In this blog post, I will show you how to send and visualize Cisco ASA syslog in Splunk. Splunk is used to search and analyse the data/logs generated from various devices. As you can see below the syslog generated from the ASA are

firewall

Palo Alto NAT Example

In this blog post, I will show you how to configure NAT on Palo Alto Firewalls. One of the main functions of the NAT is to translate private IP addresses to globally-routable IP addresses, thereby conserving an organization’s routable IP addresses. NAT examples

ansible

Palo Alto and Ansible Example

In this blog post, I will show you how to use Ansible to deploy configurations to the Palo Alto Firewalls. Setting up the environmentI'm using Ubuntu 18.04 server for this example. Ansible Galaxy Role pip pan-os SDK Palo Alto Networks Ansible Galaxy Rolehttps:

ansible

Network Configuration Backup with Ansible and Git

The typical way you would perform Network Configuration Backup is by using NCM software such as Solarwinds NCM, Rancid, Oxidized etc. However, you can also utilise Ansible and Git to perform the backups. I know it sounds silly, why would anyone do it? But

terraform

Terraform VPC example with for_each loop

On my previous post, we used count parameter to deploy multiple resources of the same kind. This method may cause some unintended results. Let's take a look at the route table as an example. You can check out my previous post here: Terraform AWS

cisco

Cisco 9300 IOS upgrade and Smart Licensing

IntroductionThis blog post describes how to upgrade Cisco Catalyst C9300 Series Switch using Install mode. The example shows the upgrade procedure for a C9300-48P switch upgrading from 16.6.3 to 16.12.4. Please note that devices running IOS-XE starting from 16.9.

aws

Setup AWS Network Firewall

What is it?AWS Network Firewall is a managed firewall service for our VPC. We can use Network Firewall to filter traffic at the perimeter of our VPC. Network Firewall includes filtering traffic going to and coming from IGW, NAT Gateway, VPN and Direct

ansible

Ansible with Cisco - Part 2 ios_config module

Cisco IOS configurations use a simple block indent file syntax for segmenting configuration into sections. Ansible ios_config module provides an implementation for working with IOS configuration sections in a deterministic way. This post continues my previous post Anisble with Cisco Part 1. Ansible

ansible

Ansible with Cisco - Part 1 Installation and basic set up

InstallationI'm going to install Ansible on my Raspberry Pi for this examle. You can use any other OS including Ubuntu, MacOS etc. Our end goal is to manage both of the routers via Ansible. In this example, we will get the 'show version | incl

firewall

Configuring Palo Alto Administrator Authentication with Cisco ISE

OverviewYou can use Radius to authenticate users into the Palo Alto Firewall. You can also use Radius to manage authorization (admin role) by defining Vendor-Specific Attributes (VSAs). The article describes the steps to configure and verify Palo Alto admin authentication/authorization with Cisco ISE.

firewall

Palo Alto Packet Capture

Packet capture is very useful when you troubleshoot network connectivity issues or monitor suspicious activity. DiagramDiagramFew things to consider Four packet capture filters can be added with a variety of attributes. Packet captures are session/flow based, so having a single filter is enough

juniper

Configuring PIM AnyCast RP with MSDP on Juniper

What problem does AnyCast RP solves?Having a single active rendezvous point (RP) is a single point of failure. Anycast RP allows two or more rendezvous points (RPs) to share the load for source registration and the ability to act as hot backup routers

juniper

Juniper Source-Specific Multicast (SSM)

In the previous articles, we have discussed about PIM Dense Mode and PIM Sparse Mode. Both protocols use IGMPv2 and known as Any Source Multicast (ASM). You can check out both articles below: Juniper Multicast PIM Dense ModeMulticast Overview IP has three fundamental types

juniper

Juniper Multicast PIM Sparse Mode

PIM Sparse mode uses an 'explicit join' approach whereas PIM Dense mode uses 'implicit join' approach. With PIM Sparse mode, only network segments with active receivers that have explicitly requested the data will receive the traffic. ‌‌‌‌ PIM sparse mode distributes information about active sources

juniper

Juniper Multicast PIM Dense Mode

Multicast OverviewIP has three fundamental types of addresses: unicast, broadcast, and multicast. A unicast address is used to send a packet to a single destination. A broadcast address is used to send a packet to an entire local subnet. A multicast address is used

aws

ASA to AWS asymmetric routing - BGP

By default, instances that we launch into an Amazon VPC can't communicate with our on-prem network. We can enable access to our network from the VPC by creating an AWS managed Site-to-Site VPN connection, and configuring routing to pass traffic through the connection. A

juniper

Configuring Junos OSPF Stub and NSSA Areas

In the previous post, we discussed about the Type-4 and Type-5 LSAs. This article focuses on Stub and NSSA areas. I highly recommend you to read my previous post here: OSPF Type-4 & Type-5 LSAs - JunosIn the previous posts, we discussed about the

juniper

OSPF Type-4 & Type-5 LSAs - Junos

In the previous posts, we discussed about the Type-1, Type-2 and Type-3 LSAs. This article focuses on Type-4 and Type-5 LSAs. This is the fourth post in the Junos OSPF series. Let's look at the Type-5 LSA first. Type-5 External LSAs are originated by

cisco

Cisco 3850 Switch Stack Upgrade

Introduction This blog post describes how to upgrade Cisco Catalyst 3850 Series Stack Switches using Install mode. The example shows the upgrade procedure for 2 x stack switches upgrading from 16.6.3 to 16.6.8 There are minor differences between the Install

cisco

Cisco %Error opening ftp://x.x.x.x (Incorrect Login/Password)

ProblemWhen attempting to copy file via FTP to a Cisco Switch you see the following error cisco-3850#copy ftp flash Address or name of remote host [10.10.10.10]? 10.10.10.10 Source filename [cat3k_caa-universalk9.16.09.05.SPA.bin]? Destination

juniper

Juniper OSPF Route Summarization

In the previous posts, we discussed about Type-1, Type-2 and Type-3 LSAs. This article focuses on OSPF Route summarization. I highly recommend you to read my previous posts here: Juniper OSPF Configuration ExampleIn this blog post, I will go through Junos Single area OSPF

juniper

OSPF Type-3 Summary LSAs

In the previous post, we discussed about the single-area OSPF and Type-1, Type-2 LSAs. This article focuses on multi-area OSPF and Type-3 Summary LSAs. I highly recommend you to read my previous post here: Juniper OSPF Configuration ExampleIn this blog post, I will go

juniper

Junos single-area OSPF

In this blog post, I will go through Junos Single area OSPF configuration and verification using Juniper vLAB Sandbox. Interfaces and OSPF configurations are already done for us, so we can jump straight into exploring and understanding various Junos OSPF features. Kudos to Juniper

aws

Site-to-site VPN between AWS and Palo Alto (non-BGP)

In this blog post I will show you how to configure site-to-site VPN between AWS VPC and Palo Alto Firewall. AWS offers two VPN tunnels between a virtual private gateway or a transit gateway on the AWS side, and a customer gateway on the