About fabrice75

fabrice75 · ‎06-04-2016

Hi, I can't seem to be able to access the APIC-EM sandbox Login - APIC - Enterprise Module anynore with the following credential; username = "admin" password = "C!sc0123" Can someone confirm if the credentials have been changed and if yes what are the new one? Regards, Fabou

fabrice75 · ‎10-19-2015

According to the APIC-EM overview in the southband section; The use of the CLI ensures that APIC EM works with your existing Cisco legacy products. Future versions of APIC EM will leverage other southbound technology such as onePK, OpenFlow, and other device APIs as they are implemented. So to me it look like that APIC-EM will make use of onePK so I assume it would still be supported on the devices for a while. Fabrice

fabrice75 · ‎10-16-2015

Thanks Brett, If I get correctly I can acheive this using APIC EM SDN controller but 1) The product is not available yet for general public? 2) When it will come out it will only be supported on Cisco UCS (not possible to install it on Ubuntu Server)? Thanks, Fabrice

fabrice75 · ‎10-15-2015

Hi guys, I am a bit confused on where to start for programmatically getting information from devices on the network. I have a web application written in python that holds my network inventory where devices are entered manually. It’s all working fine at the moment but I am looking at adding some “cleverness” to it. It is really simple all I want to do is enter a device IP and get the app to discover it i.e. I don’t need to do any changes on those devices just pull information from them. I was looking into Python/OnePK to do that but it seem that Cisco OnePK is being left aside (at least for now) https://communities.cisco.com/thread/51582 . Now looking at APIC-EM if I understand correctly it comes with its own web frontend as seen in https://sandboxapic.cisco.com/ it doesn’t really help me as I want to keep my own web frontend that I have created in Python. Cisco Open SDN controller is not an option for me because it is a commercial product and it is also overkill for what I want to do. Can someone please give some direction on how I can achieve what I want? To me Cisco OnePK was the best solution but I am reluctant to use something that is no longer maintained or looked after. Any suggestion?

fabrice75 · ‎03-20-2014

Thanks, It would be interesting to know why is that? I do understand that you would not want to do that for neighboring but for simple network annoucement, I don't see an issue with it really.

fabrice75 · ‎03-20-2014

Hi Guys, Thanks for your answers, however I fear that I have not been understood. Agreed with you LA, I am not trying to establish neighbor for two OSPF process on same interface, this is not supported. I can't put production config here but I have writen a sample configuration. Please note that it is not applied to any devices so won't be able to produce any output commands this is just to give you a better idea. Router A ! interface Loopback0 description MGNT Interface ip address 1.1.1.1 255.255.255.255 ! interface GigabitEthernet1/1 description User LAN ip address 192.168.1.1 255.255.255.0 ! interface GigabitEthernet1/10 description To router B fo OSPF 10 ONLY ip address 10.1.1.1 255.255.255.252 ! interface GigabitEthernet1/20 description To router B fo OSPF 20 ONLY ip address 20.1.1.1 255.255.255.252 ! router ospf 10 router-id 10.1.1.1 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet1/10 network 10.1.1.0 0.0.0.3 area 0 network 1.1.1.1 0.0.0.0 area 0 network 192.168.1.0 0.0.0.255 are 0 ! router ospf 20 router-id 20.1.1.1 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet1/20 network 20.1.1.0 0.0.0.3 area 0 network 1.1.1.1 0.0.0.0 area 0 network 192.168.1.0 0.0.0.255 are 0 distance 150 Router B ! interface GigabitEthernet1/10 description To router A fo OSPF 10 ONLY ip address 10.1.1.2 255.255.255.252 ! interface GigabitEthernet1/20 description To router A fo OSPF 20 ONLY ip address 20.1.1.2 255.255.255.252 ! router ospf 10 router-id 10.1.1.2 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet1/10 network 10.1.1.0 0.0.0.3 area 0 ! router ospf 20 router-id 20.1.1.2 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet1/20 network 20.1.1.0 0.0.0.3 area 0 distance 150 Now if you look on Router B you will not see network 1.1.1.1 & 192.168.1.0 under the OSPF process 20 database if you have entered the network command on OSPF 10 first on Router A. If you look on Router A with "show ip ospf int brief" you won't even see interface Loo0 and Gi1/1 listed. After tresting around it seems that I can't have both of those network present in both database, whatever I try. If I want have those networks present in OSPF 20 I have first to remove them from OSPF 10 and then put them on OSPF 20. I just wanted to know if this is normal behaviour or not? Thanks,

fabrice75 · ‎03-19-2014

Hi, I am migrating a current OSPF network to a new one so I have created an new OSPF process on all devices in the network but with a larger administrative distance so that I don't disturb the exisiting one. The plan was to do the migration by further increasing the admin distance on the old OSPF process and then remove it at a later date. The OSPF peering addressing for the new process is unique to that process so no issues there but when I copy all the networks statements from the old OSPF process to the new one they do not appear on "show ip OSPF interface brief" In fact I realised that I have to remove them first from the old OSPF process then put it on the new OSPF process otherwise it won't work. I want to be clear that the network statements that I want to copy are not for neighbor purpose (they are passive interfaces) the purpose is just to have the network announced in both OSPF processes so I have almost the exact same OSPF database on both. In other words I know that it is not possible to run OSPF neighbor over the same IPs on from two differents processes on the same box but I was expecting to see those network present on both OSPF databases which is not the case. Thanks,

fabrice75 · ‎06-08-2012

Thanks to all for your input. I can definitely see that that architech is not for me at least for a few years (until I get bored with conf t), I also don't have the skills listed above. As for design it will depend on where I end up working for. Thanks, Fab

fabrice75 · ‎06-07-2012

Thanks for your answer Marwan. Anyone else wanted to share more thoughs on the topics?

fabrice75 · ‎05-25-2012

Hi Laurent, I will assume that the untagged frame received by the provider switch will be treated as native VLAN ==> VLAN1 (since untagged). Since you didn't configure tag native VLAN1 will still flow untagged through the network. I still can't see how you would get double tagging on this setup, only tag for VLAN1000 should be present in your ISP network. Since you have setup this in a LAB I would suggest that you configure a SPAN session and use wireshark to see what's hapening. make sure tha you use replicate option if configuring SPAN session on lower end switch (3700 etc...) and/or that the port is configured as trunk for other device type (6500 etc...) Make sure that the driver on your wireshark PC don't strip off VLAN tags You didn't mentioned anything about MTU size I assume that you have it under control. Cheers, Fab

fabrice75 · ‎05-25-2012

Hi David, It is an iBGP requirement that a full mesh should be done between neighbors so yes you would need it if you want BGP on all four devices otherwise you will run into routing issues. The is no much to understand here, it is the way that BGP works. RR is there to minimize neighbor sessions by bypassing the rule stated above. RR is really useful when dealing with a loot iBGP in networks. You only have 4 devices on yours so I don’t think you should consider RR in this scenario. The real question here is do you need to run BGP on all devices? I don’t think so, if you follow Giuseppe's advices you will have a more simple routing topology if you let EIGRP deal with default routes. Cheers, Fab

fabrice75 · ‎05-25-2012

Bonjour Laurent, Your question is a bit weird to me as I don't understand why the client is not in trunk mode, I would be curious to know why you would do a setup like this? Unless you use the "vlan dot1q tag native" command on switches the native VLANs are sent untagged over a trunk so I really doubt that you will have a double tagged frame in your case. Rgds, Fab

fabrice75 · ‎05-24-2012

Hi all, Not sure if this post will be welcomed here since it’s not technical related. Basically I am looking for career advice and couldn’t find a better place With more than 10 years in the network field (emphasis on Cisco technologies) I have always been working in mixed environment implementation/testing/design/support with design being where I am less experienced. I would like know to look for pure design/architect roles but I have some interrogations; I have some difficulties to understand the difference between design and architect roles, can someone share some tough about it? I really like hands on work, is there a risk that I lose it if I move to a pure design/architect role? In fact I am really afraid to get bored with doing too much documentation compared to hands on work. I am currently studying for the CCDA (as well as learning more security stuff) but would like to open myself to other technologies/vendors. What’s other studying path would you advice ? What resource can I use to learn the design/architect job? Apart of cisco website what website/blogs are using to keep on top of new technologies and learn new stuffs? I am currently following on PaketPushers, PacketLife, Etherealmind I hope that’s not too much questions and that some wise/experienced design/architect will be able to share some experience with me. Regards, Fab

Date Registered	‎07-30-2007 11:26 PM
Date Last Visited	‎10-04-2019 03:08 PM
Total Messages Posted	16
Total Helpful Votes Received	2

APIC-EM Sandbox Credentials changed?

Re: Cisco OnePK vs ACPI-EM or other

Re: Cisco OnePK vs ACPI-EM or other

Cisco OnePK vs ACPI-EM or other

Thanks,It would be

Hi Guys,Thanks for your

Multiple OSPF routing process same netw...

Re: Design/Architect Career Advice

Design/Architect Career Advice

Re: 802.1Q tunneling native VLAN questi...

Re: How we should run the iBGP session ...

Re: 802.1Q tunneling native VLAN questi...

Design/Architect Career Advice