Enable the Hidden Administrator Account on Windows-7

I was trying to install Mozilla Firefox on my laptop. When i try to install it shows me a mesage "install with Administrator account". I try to install with my account which is Administrator of Laptop but still it says "install with Administrator" and I stuck as i haven't use/seen any Administrator account. After that i search on google and came to know that it's hidden and not enable by default, so we have to enable this account on windowns-7 machine. Here we go :)

1. Go to Command Prompt

2. c:\> net user administrator /active:yes
The command completed successfully

3. The above line shows the successfull result.

4. Now you can use your Administrator account.

I hope this will be informative for you.

Cheers :)

Huawei Basic Commands

Hi Everyone !

I don't have time to talk about the basic commands of huawei, i will talk about the details stuff of it. If one is use to with cisco so he/she will not face any problem in understanding Huawei. I got this site with having the basic commands for huawei. If you want to study so look at Mariusz Stola

I Hope this wil be informative for you !

Cheers :)

The SERDES Module on Subcard NP-3 1 is Failed

I got this problem in our network on one of our NE40E. Before going to the troubleshooting section, I just need to go through the impact of th above problem on a system. Actually we have three groups of SERDES on NE40E i.e. 0,1 and 2 on the LPU. These SERDES are plot on sub-card 0 and 1. If we have problem on SERDES 0 it will not effet the services on SERDES 1 and like wise.

The problem cause can be identifed by checking the clock of SERDES module. The above problem can result because of:

1. Sub-card-1 not prooperly connected to LPU
2. Sub-card 1 is faulty
3. The Port is not configured correctly
4. The connector between the Sub-card and LPU is faulty
5. The optical module is faulty

Solution

1. We have to check wheather the sub-card ETH_xyz_abc_CARD is registere by using the following command.

display device pic-status

2. If it is registered, then we have to replace our optical module.

3. If Optical module is working normal then plug out from the existing sub-card and plug-in in another card. For Example from Sub-Card 0 to Sub-Card 1.

4. Now again verify by using the above command and collect the trap information.

display trapbuffer
terminal monitor

I hope this will be informative for you.

Long Time...............!

Hi Everyone !!!!!!!! It has been long time that i am not in contact with blog because of my busy schedule. Although i have many stuff to post and many things are waiting in my mind and computer memory, soon i will be back :) Cheers :)

MPLS Configuration

Make sure “ip cef” is running by using “show running” command

R2(config) # ip cef
R2(config) # mpls label protocol ldp

To make LDP router-id (using loopback address)

R2(config) # mpls ldp router-id loopback 0

Perform these steps on R3 and R4 ?

We will enable MPLS on those interface on which neighbor exists.

R2(config) # interface serial 1/1
R2(config-if) # mpls ip

R3(config) # interface serial 1/0
R3(config-if) # mpls ip

R4(config) # interface serial 1/0
R4(config-if) # mpls ip


Operations and Verify

R2 # show mpls ldp discovery
R2 # show mpls interfaces

R2 # show mpls ldp neighbors
Min label: 16
As 0-15 are reserved

R2# show mpls ldp discovery detail

R2# show ip route-------------------------Control Plane

R2# show ip cef----------------------------Data Plane

R2# show mpls ldp bindings-----------LIB

1. Here we will see one local binding and one remote binding as we have one neighbor so onw remote binding

2. For directly connected it will assign implicit Null label
e.g. 2.0.0.0-------imp-null

For 10.0.0.0------------Local Binding 22
and Remote binding 23

R3# show mpls ldp binding
10.0.0.0--------Local Binding 23
Remote Binding 22

R4# show mpls ldp binding

1. Local and Remote can be same on R4.
2. On R4 for network 2.0.0.0------Local Binding 18
--------Remote binding “imp null”
This imp null means that R3 state that 2.0.0.0 is my directly connected so if you want to send some traffic for this network so remove the label as to get rid of the double lookup.

This was just a window to the MPLS configuration. I Hope this will be informative for you.

Cheers :)

What is MPLS ?

Here we go……! The very first blog from me on MPLS, I have a lot stuff to publish and write on many things but because of the hectic schedule I am unable to write things, anyway I will try to be regular now onwards. First let’s talk about what is this lovely term MPLS?? ? Anyone?? ? No Idea :( hmmm! Let me explain what this, “Multiprotocol Label Switching (MPLS) is a new forwarding mechanism in which packets are forwarded based on labels”. MPLS comes in to our life because of some problems in the traditional IP routing like:

1. Routing Lookup is performed on every hop (router)

2. When IP is carrying over ATM or Frame Relay so Layer-2 and Layer-3 topology many be different which results in the least best path or suboptimal path and link utilization.

3. At times data only goes through the primary link and not use the other link means we can’t do Traffic Engineering. In traditional IP routing we can do so by using PBR (Policy Based Routing) but that is strongly recommended not to use.
MPLS comes into our life and solve the Problems of traditional IP routing. MPLS is a layer 2.5 technology and it is called “Multiprotocol” because it supports forwarding of other protocol as well. If we can say that end of the day what MPLS will give us so we can say that “Optimization” and “Scalability”. Speed can never be in the definition of MPLS because now a day’s IP is also too fast because of the hardware enhancement.


Modes of Operation

1. MPLS use a 32-bit label field that is inserted between Layer-2 and Layer-3 header (Frame Mode).
2. MPLS over ATM use the ATM header as the label (Cell Mode).

MPLS Architecture

MPLS has two major components i.e. Control Plane and Data Plane

1. Control Plane: Exchange Layer-3 information and label
2. Data Plane: Forward packets based on Label

Let me briefly explain how the two planes behave when a packet comes to it:
a) When the incoming packet is IP based so request comes to RIB (control plane) which then consult FIB (data plane).
b) When the incoming packet is label so request comes to LIB (control plane) which then consult LFIB (data plane).
c) Outgoing packet doesn’t matter whether it is packet (IP) or label.

We can have total of four tables in MPLS, i.e. LIB, RIB, FIB and LFIB.

1. RIB (Routing Information Base)
2. LIB (Label Information Base)
3. FIB (Forwarding Information Base)
4. LFIB (Label Forwarding Information Base)

Label Format

MPLS uses 32-bit label field that contains the following information.
1. 20-bit Label
2. 3-bit experimental field and this is used for Quality of Service (QoS)
3. 1-bit bottom of stack indicator, this play role when we are using multiple label
4. 8-bit Time-to-live (TTL) field, when a packet is in a loop so it brings that out of that state.

Router Terminologies in MPLS Domain

1. Edge LSR (Label Switch Router), It can be either Egress LSR or Ingress LSR. The nature of the router depends on the flow of the data; a router can be Egress LSR or Ingress LSR at one time. For example data comes as IP based so the router which receive the IP packet is Ingress LSR at this point and forward the packet to the MPLS domain and on a router where this packet leaves the MPLS domain so that is Egress LSR. The duty of Edge LSR to received IP based packet and assign label and send to MPLS domain and vice versa.
2. LSR (Label Switch Router) which is in the MPLS domain and whose duty is to forward labeled packets means duty just include Label swapping and forwarding.

Label Switch Path (LSP)

LSP is the path which the packet follows forms the point where it enters the domain till it leaves the domain. LSP is unidirectional means from Router-A to Router-B we can have two LSP in opposite direction.
A very little and brief introduction to MPLS, I hope this will be informative for you. Soon you will get more blogs on it.

I Hope this will be informative for you !

Cheers :)

Quality of Service (QoS)

Finally I am going to say something about Quality of Service (QoS). QoS is becoming the need of every network now a days and one should be aware of this technology and one have to implement this in his network in order to have smooth communication. In this part of QoS I will be talking about the following few concept and slowly we will be going in dept of QoS.

 Brief History
 QoS Requirement
 QoS Deploying Methods
 QoS Toolbelt

History

Best-Effort Model was based on first come and get, means whoever comes in so they will be assigned the bandwidth, then Integrated Services comes in and that was the first QoS application which uses RSVP to reserve bandwidth for our traffic. Differentiated Services was another application which was based on or gives services on per-hop basis to prioritized traffic, more flexible than Integrated Services as we don’t need to do reservation. After this MPLS/VPN QoS comes in, then Auto QoS then QoS for security, NBAR (Network Based Application Recognition) is used by QoS for security; I will discuss NBAR in detail later on in this QoS series.

QoS Requirement

We can have traffic in our network like DATA, VOICE or VEDIO; normally data is not that much important in comparison to Voice or Video and data is not that much bandwidth hungry like video. Voice is giving priority than all other traffic including video as we should have voice clear and a bit delay in video is acceptable. Now days we having video conferencing (Voice + Video):

There are four evils of your network:

Lack of Bandwidth is when you not sufficient bandwidth available in your network for data.

Packet Loss is when you lose your data traffic because of delay or jitter.

Delay means how long it takes a packet to reach from one point to another point, For example ITU said that for PSTN the delay (one side) can be < 150 ms.

Jitter is known as Delay Variation means one packet take 100 ms to reach from point-A to point-B and another packet take 130 ms, so the variation in the delay is called jitter. We can say that in this communication the jitter is 30 ms which results in packet loss.

QoS Deploying Methods

1. Command-Line Interface (CLI)
2. Modular QoS CLI (MQC)
3. Auto QoS
4. QoS Policy Manager (QPM)

QoS Toolbelt

1. Classification & Marking
2. Policing & Shaping
3. Congestion Avoidance
4. Congestion Management
5. Link Efficiency Tools

Study this site for more about the QoS in the coming posts.

I Hope this will be informative for you

Cheers :)

Resetting Netscreen Device (Juniper Firewall)

While thinking to start working on juniper, when I picked up Juniper Firewall (Netscreen-50) I was unable to login using the default username and password i.e. Netscreen and Netscreen, Now I had to reset the device in order to get in and enjoy configuring Juniper Firewall but same time you will loss all your configuration. When I consult the Netscreen-50 manual, I got two ways which can be used to reset the firewall, let’s look at the both ways:

1. Using RESET Button

a) On you device near power switch there is a small pinhole which can be used to reset you device.

b) Use a small paper pin or any other narrow pin and insert that into this pinhole and push, while pushing the status of the LED will turn into AMBER

c) Now after releasing the status will turn into GREEN

d) Now wait for two to three seconds

e) After that insert the pin into pinhole again and press for five to six seconds when the status of LED turn into RED, release you pin

f) Now your device will resets into the default factory settings.

g) Now you can enter into your device using the default username (Netscreen) and password (Netscreen)

2. Using Device Serial Number

a) This just needs your device to connect using consol cable.

b) We can also reset our device using the device serial number, note down the serial number from the back of the device.

c) Enter the serial number at the login prompt like

Login: 000099991111 (example)
d) Again enter the same number at the password prompt

Password: 000099991111

!!! lost password reset/!! you ha ye initiated a command to reset the device to factory defaults, clearing ah current configuration, keys and settings. would you like to continue? y/in!

Enter Y

Again you will see the following message:

!! reconfirm lost password reset 111fyou continue, the entire configuration of the device will be erased. in addition, a permanent counter will be incremented to signify that this device has been reset. this is your last chance to cancel this command. if you proceed, the device will return to factory default configuration, which is: system ip: 192.188.1.1; username: netscreen;password' netscreen. would you like to continue? y/[n]

Enter Y

Now you can login using the default username and password. The device recovery feature is enable by default but we can disable it by using following command:

unset admin device-reset

I hope this will be informative for you.

Cheers :)

Low Heap Memory Size Configuring IPS using SDM

To have a secure network we must be aware of the technologies which can really help us in securing our network, I was studying CCNA-Security last day and a task was about to perform on Cisco router, “Implementing Router Based IPS”. In my case I took 1841 series router and access through SDM. when I select IPS from the left panel I got the following message……….! Banggggg :(

“Your current Java memory heap size is less than 256MB, the amount required for IOS to run. To change the Java memory heap size, open the java control panel and enter -Xmx256m in the Java Applet Runtime Settings dialog. This dialog is in the Java tab, or in the Advance tab of the Java control panel. After you have changed the Java heap size, restart Cisco SDM”.

I consult Google and SDM help so got the solution, Its very simple just follow the following steps:

1. Select START, click on Control Panel

2. Double Click on JAVA

3. Click on ADVANCE tab, and Click on “Java Runtime” if you not able to see this then follow Step-4

4. Click on JAVA tab and click on “View” under “Java Applet Runtime Settings”

5. In the window under “Java Runtime Parameters” write down “-Xmx256m”.

6. Click OK

7. Click Apply and OK

8. Restart your SDM

9. Enjoy IPS Configuration :)

I hope this will be informative for you :)