Anouar BELKACEM - Ingénieur Réseaux et Sécurité Me contacter Vous aussi, créez Gratuitement votre CV sur www.doyoubuzz.com

Ingénieur Réseaux et Sécurité

Anouar BELKACEM

    Infos
  • 29 ans
  • Lyon  (69) France

Situation professionnelle
En poste

Emploi et carrière En simple veille

CV d'Ingénieur Réseaux et Sécurité

Passionné par les technologies liées aux réseaux et sécurité. J'étudie, propose et mets en œuvre les solutions adéquates aux problèmes identifiés. Je conduits mes projets avec rigueur, patience et détermination.
Très bonne visite.

Blog

Capcorne's Blog

Share ideas and hints

Cisco Icons for Visio

05/03/2010

Hi falks,

I was trying to download the Cisco Icons for Visio from here but the link is missing. After some searching I found the direct link here (thanks to thumpercisco for sharing this). The link is : http://www.cisco.com/web/about/ac50/ac47/PPT_vss.zip.

Have fun.


Tagged: Cisco, Schema Drawing, Visio Icons

New year, new news, new theme

27/02/2010

Hi all,

Long time I didn’t post… sorry for that
I began a new job as a Network engineer in a motorway company. The job is great and interesting, peaple are nice. There are many networks for differents needs, so many thing to understand and learn.

Hope you enjoy the new theme, if not let me know.


Preparing the BSCI exam

27/10/2009

As I’m free (no job yet), I’m preparing myself for the Cisco BSCI exam for the CCNP… Say me good luck :-)

One of my (may be) future colleague said me that it’s more interesting to have a Juniper certification… what’s your opinion ? mine : if I had enough time I will pass the two :-)


Tagged: BSCI, Cisco

Feedback on Cisco’s REP

27/10/2009

Me again,

I wanted to have your feedback about Cisco’s REP (Resilient Ethernet Protocol) :
- where do you use it
- equipments needed
- reliability
- efficiency

Thanks in advance


Small screenshot tools under Linux

27/10/2009

Hi all,

I don’t like to have heavy software under my notebook. To accomplish some screenshots you don’t need ksnapshot or something like that.

Just install scrot and qiv

Scrot is a cmd line tool to make screenshots and Qiv a really small and quick tool to view images.

To use Scrot :
$ scrot -s -d 3 test.png
-s to select the windows or rectangle to save
-d for the delay to wait before taking the snapshot

and then view the image :
$ qiv test.png


ip virtual-reassembly exceeded issue

07/09/2009

Hi all,

Days ago I was facing an issue concerning a VRRP cluster (using keepalived). Every hour, the backup server was changing its VRRP state to master and two second later (after forced re-election) goes back to the backup state.

The same number of NICs are connected to every server, each NIC is configured in a vrrp_instance. But only one vrrp_instance on the backup server changed its state to master, the others did the same cause they belong to the same vrrp_sync_group.

The NIC changing its state is connected to a Cisco VPN router.

After many days of investigation (looking at if the server is receiving VRRP packets, if there were errors on the packets… if there were dropped packets…) I discovered in the log of the VPN router some messages which warn that virtual-reassembly parameter was exceeded… Heu ???

After searching, I increased this parameter on each interface of the Cisco VPN router :

ip virtual-reassembly max-reassemblies 32

This solves the problem, but until now I don’t know what was the real problem, sniffing didn’t give me too much information to analyse…


Tagged: Cisco, HA, keepalived, Linux, VPN, VRRP

Cisco SDM doesn’t start cause of Java error

07/08/2009

Hi falks,

Today I tried to use for the first time the Cisco SDM. Unfortunatly, when the Cisco SDM Express launched, I got nothing. Bad news…

I looked at the Java JRE console and I found an IndexOutOfRange error !

In my workstation I had the Java 1.6.0_13 installed, after googling, I found this post where gays suggest to downgrade or upgrade Java JRE to resolve the problem.

I upgraded the JRE to 1.6.0_15 and now the SDM is working…


Tagged: Cisco, Routing

Gateway High Availability

23/07/2009

Hi,

In this article I will explain the different techniques used for gateway high availability.

So first let’s explain what is a HA gateway ?
A high available gateway is a first-hope router (layer 3) that is available 100% (or almost) of time. This can be achieved using many strategies.

The most used, well known and reliable strategy is the first-hop redundancy where two or more routers act as a unique virtual gateway.
This strategy is divided into two techniques : Failover and Loadbalancing.

The failover technique defines a router as the master of the group and the others routers as the backups. When the master router goes down a backup router (depending on his priority) becomes the master.
The loadbalancing technique uses all the routers (all of them are masters). Every router is used, for example, in round robin manner.

The HSRP protocol (proprietary and no more supported by Cisco) and the VRRP protocol (Virtual Router Redundancy Protocol) are two protocols used for failover redundancy.

GLPB (Gateway Load Balancing Protocol) is a Cisco proprietary protocol that can be used for load balancing traffic between many gateways.

Here is a very nice cheat sheet from stretch


Tagged: Failover LoadBalancing, Gateway First-Hop, HA, HSRP VRRP, Redundancy

I’m CCDA certified

22/07/2009

Hi all,

I was a little bit buzy to prepare my Cisco CCDA (640-863) exam… but the important thing is that I passed it !

Now, I’m going to prepare the CCNA…


Tagged: CCDA, Cisco

Connect to a router’s inside interface

27/06/2009

Hi folks,

Two months ago we implemented a DRP network in a branch office. The connection between the main office and the branch one is done with a site-to-site IPSec VPN.

Here is the global schema :

VPN

VPN

Everything was ok until I tried to connect to the F0/0 IP of the remote VPN router (VPN-2). Thus, I was unable to get connected.

I checked ACLs, routes, … everything is ok.
Being connected on the VPN-2 (indirectly connected), I tried to telnet back to the 192.168.1.1 machine, then I got a Host unreachable error.

Strange, routes are ok (a default route exists throughout the ISP router)… The error suggests there is no route to the host, so I added an explicit route on VPN-2 indicating the ISP router as the gateway to connect to the 192.168.1.0/24 network.

ip route 192.168.1.0 255.255.255.0 A.B.C.D

As expected, this solved the problem.

After this, I thought why the default route wasn’t been used ?
My suggestion :
192.168.1.0/24 is a RFC1918 network and may be the IOS default route doesn’t hundle these networks.

Your comments are welcome.


Tagged: Cisco, IPSec, netwo, Network, Routing, VPN