DHCP Snooping Illustrated

DHCP Snooping is a subject of many different articles that can be found on the Internet. There are some students, however, who are still having troubles trying to understand the foundations of this feature. In this post we are going to examine a simple network (where...

IOS IPS

IPS functionality available on IOS is limited comparing to NGIPS/FirePOWER4200 or older devices such as ASA’s AIP SSC/SSM modules. We still have plenty of signatures, matching those offered by the above-mentioned products, but only a subset of them can be enabled at a...

Router IP Traffic Export

Router IP Traffic Export (RITE), or simply IP Traffic Export, is a method of copying traffic directly from a router to an external device, such as a Protocol Analyzer or an Intrusion Detection System (IDS). This feature can be used to replace SPAN/RSPAN configurations...

IPv6 DMVPN Routing

In my last post we talked about IPv6 over IPv4 DMVPN configuration, where IPv4 transport was used to tunnel IPv6 traffic. Now I would like to show you how to deploy pure IPv6 DMVPN network, and even more importantly, how to enable different IPv6 Routing Protocols in...

DMVPN for IPv6

As you might already know, every DMVPN network consists of multiple GRE tunnels that are established dynamically. At the beginning, every Spoke in the Cloud is supposed to build a direct tunnel to the Hub. Then, once the Control Plane converges, the Spokes can...