For the artical, will summary how to mpls over gre on NCS5500, NCS5500 only enable decap mode of GRE(6.1.x support the feature), that feature will flexible terminal GRE session that from DC servers. Btw, in order to verify packets from the tester, will capture packets by ERSPAN on NCS55A1.

Topology

• NCS55A1-2 learn eBGP route 200.1.0.0/24 from tester 5/2
• Ony IPv4/IGP forwarding from Terster 5/1 -> 55A1-1 -> 55A1-2
• Send traffics(GRE + EPE ) from tester 5/1, and terminate at NCS55A1-2, then forward to EPE link

完整阅读

Not update any NSO article to my blog, I will put more NSO info to here, wish that will help more guys. The article will include more hands-on experiences, help beginner fast connect xr devices with nso by cli or netconf ned. For netcong NED, build by Pioneer at former, that need to manual exclude the Yang file that no support. In the article, will build netconf ned by native tool of NSO 5.2.0.

Platform Info

[root@nso opt]# ncs --version
5.2.0.1
[root@nso opt]# cat /etc/redhat-release 
CentOS Linux release 7.6.1810 (Core) 

RP/0/RP0/CPU0:frank#show ins ac sum
Wed Aug  7 01:53:03.286 UTC
    Active Packages: 1
        xrv9k-xr-6.6.3.14I version=6.6.3.14I [Boot image]

完整阅读

At last article Direct activate XRv9k Smart License, I summarized how to direct activate XRv9k Smart License. Before doing that, XRv9k must be able to access the Internet(Cisco License web). Same as follow picture “Direct Deployment”. But some customers couldn’t let devices access the internet due to security. So we must activate the smart license in another way. That is Smart Software Manager satellite, same as “Mediated Deployment” in the following picture.

完整阅读

My VPS(Bandwagon) include OpenVPN script, but only support Centos6.x that version not good for docker (my blog deploy by docker Blog顺利完成搬家之Bandwagonhost VPS), so need to do by other scripts. OpenWRT config OpenVPN client has some different, so summary the info to the article for review.

But due to GFW, OpenVPN couldn’t establish at last, reset happened between server and client, but the setup should workable.

Deploy OpenVPN at Server

Don’t know why couldn’t find OpenVPN pacakage by yum, even if have epel source

[root@frank ~]# rpm -qa |grep epel
epel-release-7-11.noarch
[root@frank ~]# yum install openvpn
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirrors.usc.edu
 * extras: repos.lax.quadranet.com
 * updates: mirror.fileplanet.com
No package openvpn available.
Error: Nothing to do

Config call-home that active smart license

xrv9k should have some default call-home, in some scenario, need to add some extra configuration, as follow:

domain name cisco.com
domain name-server x.x.x.x  >>> dns server
call-home
 service active
 contact smart-licensing
 http-proxy y.y.y.y port 80  >>> proxy server
 profile CiscoTAC-1
  active
  destination transport-method http
 !
!

Add crypto config

conf
crypto ca trustpool policy crl optional
commit

完整阅读