skip to main |
skip to sidebar
Multicast and ACL...
Multicast
- "ip msdp peer [address] connect-source [interface]" sets up the msdp peer relationship.
- bgp and msdp peer ip must match.
- "ip pim neighbor-filter [acl]" can filter PIM neighbor relationships.
- "ip igmp helper-address [address]" is an interface level command to forward igmp requests to multicast capable router, much like DHCP.
ACL
- "ip telnet source-interface [x]" can tell a router which interface to use for telnet access.
- "autocommand access-enable host" links dynamic ACL to telnet authorization.
- "clear ip access-template [line] [dynamic ACL name] host [x] port [y].." clears a dynamic ACL line.
- "autocommand access-enable host timeout [x]" creates dynamic acl timeout for dynamic ACL entries.
- "access-list 100 dynamic [name] timeout [y] permit ip any any" creates static timeout for dynamic ACL entries.
- "rotary [x]" is a line command to create a telnet session on 300[x]. ie; rotary 3 creates telnet access on port 3003.
- "ip reflexive-list timeout 120" is a global command to limit reflexive ACL entries.
- "ip tacacs source-interface [y]" assigns an interface to use for TACACS source requests.
- When using authentication default, it does not need assigned to any line/port.
IP Services
- "ip dhcp ping [packets] timeout [y]" changes DHCP behavior. DHCP will ping [packet] number of times with a timeout of [y] before re-assigning a previously used address.
- manual DHCP bindings require their own pool.
- interface level command "standby use-bia" will use MAC burned-in address for HSRP mac.
- preemption is enabled by default in VRRP.
NAT
- inside local is local IP of private host on your network.
- inside global is public IP address that the outside network sees as the IP of your local host.
- outside local is the local IP from the private network which your local hosts sees as IP of remote host.
- outside global is public ip of remote host.
- "extendable" allows you to have to NAT entries for the same source IP address.
- You can use a route-map to "permit" local to global mappings.
- You can create stateful NAT translations to assign to HSRP groups by using a mapping-ID.
- You can create stateful NAT translations and assign a primary and backup NAT router (ip nat stateful..)
- I hate NAT....
- I really hate NAT....
- Why can I not understand the NAT syntax?
No comments:
Post a Comment