About AJAZ NAWAZ

AJAZ NAWAZ · ‎04-15-2018

Apologies I've been off RS for a while ... I need to please ask around use cases for VRF aware DMVPN, particularly in connection with the latest WAN technologies and challenges. There seems to be a shift for branch offices to split-tunnel (even though that term seems to be disappearing), and the challenges around security and web proxy in the cloud. Thanks Ajaz Nawaz CCIE-RS No.15721 JNCIE-SEC No.254

AJAZ NAWAZ · ‎06-08-2016

Hi all Can I ask if anyone has implemented a CoS|QoS policy in their network to expedite Voice|Video flows in their network?. Thank you

AJAZ NAWAZ · ‎03-08-2016

Platform 65k SUP2-T / 10Gig P R1--iBGP--R2 < ====eBGP==== > R3---iBGP---R4 R2 and R3 linked over 10Gig ethernet type circuit - DC interconnect. I'm currently advising a client on doing away with its IGP, OSPF. The organisation changes fairly constantly and OSPF doesn't help with its lacking capabilities in the filtering department, and even more than that, one often ends up with heaps of bewildering redistribution. Fortunately the org is not mission-critical happily accepting 30-60sec failover. The overarching topology is simple and total number of prefixes currently stands at less <100. So we're doing away with OSPF, but what I wanted to please ask was how much tuning is now available for eBGP and iBGP, I mean in terms of fast-failover whats' the quickest I can get these peering to failover / reconverge Thank you

AJAZ NAWAZ · ‎02-17-2016

Replying to my own post here. Thanks Giuseppe. I see whats happening now. Essentially it came down to locally originated which assigns 32768 as you mentioned. The thing is while this prefix entry wins in the BGP table, its seem the router elects to enter the prefix from it first origin which was OSPF. btw the reason why the origin was local is because of the network cmd under bgp. Cheer for that !

AJAZ NAWAZ · ‎02-17-2016

Hi Giuseppe I get you though please can I update you on few points. Redistribution is not mutual [as you may know] and takes place under the OSPF process as follows: router ospf 10 vrf COSTA router-id 1.0.0.100 log-adjacency-changes auto-cost reference-bandwidth 40000 area 0 authentication message-digest area 20 stub redistribute static metric 250 metric-type 1 subnets tag 250 redistribute bgp 65300 metric-type 1 subnets tag 313 passive-interface default no passive-interface GigabitEthernet1/1 no passive-interface Vlan30 no passive-interface Vlan450 ..... ... I am a bgp and ospf speaking router. I am receiving advertisements for two neighbors. One of the neighbors is talking OSPF with me, and the other is eBGP peer. They are sending me 10.3/16 with standard admin distance. I am redistributing the OSPF routes into my BGP process. When I lookup the 10.3/16 prefix in my RT, I see that OSPF route is winning. I accept that redistributing OSPF routes into BGP doesn't mean those routes should appear in my RT as BGP, but I fail to understand why when I am receiving the same prefix from a eBGP speaker, that prefix doesn't win the battle to enter the RT given the 20 admin distance being more superior to 110 of OSPF. Thanks

AJAZ NAWAZ · ‎02-17-2016

duplicate since the new so called 'çloud'server moves like a tortoise, and i clicked on submit twice as I didn't know if something was happening.

AJAZ NAWAZ · ‎02-17-2016

DC1CORE01 #sibvr 10.3.0.0 BGP routing table entry for 65300:10:10.3.0.0/16, version 554421 Paths: (3 available, best #1, table COSTA) Advertised to update-groups: 1 2 3 4 Local 10.10.14.18 from 0.0.0.0 (1.0.0.100) Origin IGP, metric 130, localpref 100, weight 32768, valid, sourced, local, best Extended Community: OSPF DOMAIN ID:0x0005:0x0000000A0200 OSPF RT:0.0.0.0:5:0 OSPF ROUTER ID:1.0.0.100:1280, mpls labels in/out 52/nolabel 65520 39545, (received & used) 10.10.14.89 from 10.10.14.89 (1.0.0.5) Origin IGP, localpref 100, valid, external, mpls labels in/out 52/nolabel Local, (received & used) 10.10.15.253 from 10.10.15.253 (1.0.0.200) Origin IGP, metric 140, localpref 100, valid, internal, mpls labels in/out 52/nolabel DC1CORE01 #

AJAZ NAWAZ · ‎02-17-2016

Hi all I'm aware of the common reasons why BGP routes are not installed into routing table, however I have come across a scenario which I'm struggling to understand why my ebgp prefix is not winning over ospf. DC1CORE01#sh ip route vrf COSTA 10.3.0.0 Routing entry for 10.3.0.0/16 Known via "ospf 10", distance 110, metric 130 Tag 450, type extern 1 Advertised by bgp 65300 Last update from 10.10.14.18 on Vlan450, 00:00:11 ago Routing Descriptor Blocks: * 10.10.14.18, from 1.0.0.4, 00:00:11 ago, via Vlan450 Route metric is 130, traffic share count is 1 Route tag 450 DC1CORE01 #sh ip route vrf COSTA 10.3.0.0 Routing entry for 10.3.0.0/16 Known via "ospf 10", distance 110, metric 130 Tag 450, type extern 1 Advertised by bgp 65300 Last update from 10.10.14.18 on Vlan450, 00:00:11 ago Routing Descriptor Blocks: * 10.10.14.18, from 1.0.0.4, 00:00:11 ago, via Vlan450 Route metric is 130, traffic share count is 1 Route tag 450 DC1CORE01 #sh ip route vrf COSTA 10.3.0.0 Routing entry for 10.3.0.0/16 Known via "ospf 10", distance 110, metric 130 Tag 450, type extern 1 Advertised by bgp 65300 Last update from 10.10.14.18 on Vlan450, 00:06:11 ago Routing Descriptor Blocks: * 10.10.14.18, from 1.0.0.4, 00:06:11 ago, via Vlan450 Route metric is 130, traffic share count is 1 Route tag 450 DC1CORE01 #sro router ospf 10 vrf COSTA router-id 1.0.0.100 log-adjacency-changes auto-cost reference-bandwidth 40000 area 0 authentication message-digest area 20 stub redistribute static metric 250 metric-type 1 subnets tag 250 redistribute bgp 65300 metric-type 1 subnets tag 313 ... .. btw. 10.10.14.18 is an ospf neighbor DC1CORE01 #sh ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 1.0.0.10 0 FULL/ - 00:00:04 10.10.14.18 Vlan450 1.0.0.3 0 FULL/ - 00:00:35 10.10.14.14 GigabitEthernet1/1 1.0.0.200 20 FULL/BDR 00:00:38 10.10.15.253 Vlan30 DC1CORE01 # Any questions, please resply to post.

AJAZ NAWAZ · ‎12-31-2015

implementing aggressive timers would minimise failover period required for reconvergence. good shout harold !

AJAZ NAWAZ · ‎12-30-2015

please ignore.

AJAZ NAWAZ · ‎12-01-2015

anyone know what the expected behaviour when aggregating bgp prefixes please ...? i.e. the originating more specific route is learned via OSPF I am router running ospf and bgp I am receiving /23 prefix via OSPF I add the same /23 using network command under BGP I add the aggregate-address summ-only cmd to change the /23 to /20 I don't think r> should appear for the summary prefix. One one of my gateways it does, and on another it doesn't. Its odd. Suspect bug or misconfig. Perhaps prefix-list problem...?

AJAZ NAWAZ · ‎03-26-2015

hi. so for ASA i see how to disable DPD, using isakmp keepalive threshold infinite. thats fine, but is there also another hierarchy where DPD can be 'tweaked' : ASA-FW(config)# crypto map Outside_map 5 set connection-type ? configure mode commands/options: answer-only Answer only bidirectional Bidirectional originate-only Originate only What is this all about then?. I can google it, but its worth a discussion a others will inevitably benefit from this post. Thank you

AJAZ NAWAZ · ‎03-16-2015

Really quick and easy one for VPN guru's out there .... Essentially, I'm setting up a backup VPN, but there's NO interesting traffic unfortunately and we need VPN up. So... is it possible? thanks in advance Ajaz

AJAZ NAWAZ · ‎02-12-2015

The option of 'Prioritizing' is there, for example with Voice traffic (dscp ef), but I don't see any control knobs for setting min/max interface bandwidth. btw - ingress and egress is relevant when taking the direction of the flow into consideration. typically egress traffic is what leaves your network and goes out to the internet (for instance). the interface traffic exits out from is whats knows as egress. the term 'ingress interface' is used to describe an interface where traffic is coming into the device. both egress/ingress interfaces are more often than come up when discussing edge devices such as internet facing router. hth

AJAZ NAWAZ · ‎02-12-2015

Hi all. Ample examples out there of QoS on ASA for Voice traffic, but I'm struggling to pin-point config illustrating how to prioritise and allocate BW. The Priority bit seems simple enough, but BW piece is proving illusive. Thank you

Date Registered	‎02-09-2004 03:14 PM
Date Last Visited	‎05-16-2018 07:30 AM
Total Messages Posted	659
Total Helpful Votes Received	288

VRF Aware DMVPN and Use Case in Connect...

Skype for Business Cloud Services - QoS...

BGP Options to Reduce Failover and Reco...

Replying to my own post here.

Hi Giuseppe

duplicate since the new so

DC1CORE01#sibvr 10.3.0.0BGP

eBGP route losing over OSPF E1 Type ......

implementing aggressive

implementing aggressive

anyone know what the expected

hi. so for ASA i see how to

Cisco Site-to-Site VPN - Interesting Tr...

The option of 'Prioritizing'

Cisco ASA VoIP Priority, plus BW Guaran...