Friday, March 5, 2010

Enabling Cisco device to authenticate locally to VTY/Con line

'
My wife called me yesterday asking how to enable authentication on VTY line using the created local account. I try to walk her thru and ask her some details about the username command with are the command to create local account and password respectively. She said that they already done that part but when they try to remote the device the account and password is not accepted. So the next thing I ask is to check what the config they put inside the VTY line is. Cut the story short we end the call without resolving the issue and I told her that I will simulate this when I arrive at the office.

At round 6PM and I'm already free I decide to go with the simulation using the two catalyst Cisco switch on my cubicle. Setup the switch with the power cable and the console cable connection to my PC. I starting to configure the switch with "username deviceadmin privilege 15 secret 0 MyPasswd" then instead of using the VTY line I decided to use the con lines since I was already connected to it. I enter the con line then try to search the list of available commands, the only command that I find relevant to my problem is the login command with the parameter of local. I use the command save my config the reload the switch.

After the reload I was ask for the user and password so I enter the username information that I just created and it’s was a success. My newly created local account was used to authenticate access to my console. I move further and created another account with lesser privilege and again it was accepted with the limitation of not being able to enter configure terminal. For the complete command please check below.

Commands:

SW01#conf t

SW01(config)#username deviceadmin privilege 15 secret 0 MyPasswd

SW01(config)#exit

Sw01#line con 0

Sw01(config-line)#login local

Thursday, March 4, 2010

STP VLAN root primary|secondary 2nd post

'
I just find out today from my lead that we are not really using the command above as part of our VLAN creation steps instead we statically set VLAN priority to 8192 for the root bridge and 16384 for the secondary root bridge.
We just try to use the Cisco macro command root primary and root secondary because our boss insisted on using it. Now we know that this command give's/set 24576 and 28372 priority value to the root and the secondary root bridge respectively.
I don't really see any problem in using the macro command or setting the priority value by your self as long as your being consistent and not mix the two command in a single setup.

Wednesday, March 3, 2010

Job Interview with Lawson

'
I went to Lawson office at Net2 bldg. Bonifacio Global City today for an interview for Network Administrator position. At about 10:30 my contact person from HR named Lara called my name and ask me to follow her on the interview room. She ask me HR stuff like why I'm applying? What am looking for a job? etc. After a short chat with her she endorse me to the technical guys for the technical interview.

Two guys arrived I believed from the network department of Lawson, I wasn't able to get the name of the other guy but the other one named Marku. When they arrive they start going through with my resume, since they only have one copy so i offered the copy that i brought. Marku start by asking me personal and HR type of question like, what i think i need to improve my self? I was caught off gourd with the questions because i was expecting a technical interview. I try to answer all the mushy question with the best of my ability and we get into a little argument when they told me that my answers are contradicting. When we finally went to the technical stuff they only ask me one scenario question and that's it, where done. I think that technical question is just formality they already maid up their mind that I'm not the guy, after the personal question that they thrown at me.

I guess I'm not that good with interview any more but with the questions that was thrown at me with those two BS I think they are not really looking for a technical savvy network engineer, they are more looking for someone to be their PA or something.

Will that's life, applying for a job really sucks all I want right now is to complete my CCNP and have a better chances of being pirated so that i wont have to undergo the whole recruitment process.

Tuesday, March 2, 2010

STP VLAN root primary|secondary

'
I just was testing this on live network. We are trying to find out how this Cisco Macro command will be able to set the STP priority. We expect that we get a priority of 8192 for the primary root bridge and 16384 for the secondary root bridge, but after we created a new VLAN and implemented the commands on our primary core switch as the primary root and secondary core as the secondary root and we get the following setting below:

Core1:

Core1#sh run | i span

Spanning-tree vlan 999 priority 24576

Core2:

Core2#sh run | i span

Spanning-tree vlan 999 priority 28372

We really don’t know why this priority setting is deferent from the previous VLAN STP implementations done on the same core switches.

I’ll be posting the answers if I can find out the explanation behind this.