Cisco CSR1000v Router as NAT Instance on AWS

We’ll use the below scanrio in this tutorial in which we’ll configure Cisco CSR1000v Router as custom NAT Instance within our vpc on AWS.

Authenticate the Cisco Devices using FreeRADIUS on Ubuntu

We want to authenticate and authorize the user on Cisco devices using the Free Radius on Ubuntu Server. In this tutorial, we want to create two users, Arbab and Ali. Arbab have full access to Cisco devices (privilege level 15) while Ali has custom access (like show commands including show running and interface configurations) only.

FreeRADIUS configuration on Ubuntu:

Install FreeRADIUS by using the following command:

sudo apt-get install freeradius

OpenVPN Client Configuration on Ubuntu 12.04

To use the Ubuntu as OpenVPN client, install these packages:

sudo apt-get install network-manager-openvpn

Authenticate the Cisco Devices using Active Directory

We want to authenticate and authorize the user on Cisco devices using the Microsoft Active Directory. In this tutorial, we want to create two Active Directory groups, Network Admin and Network Tech. Network Admin have full access to Cisco devices (privilege level 15) while Network Tech have custom access (like show commands including show running and interface configurations) only.

arbab belong to the Network Admin group

ali  belong to the Network Tech group

Network Policy and Access Services:

Before starting this tutorial, I assume that you have installed the Active Directory and it is up and running. Let’s start the tutorial by adding the NPS Role:

Start -> Administrative Tools -> Server Manager

How to Change the Network Cards Priority in Windows 7

Scenario:

We are connecting with the two different networks using the wired and wireless cards simultaneously . We want to access the local resources (e.g: file server, print server, application server etc) using the wired connection while  want to browse the Internet using the wireless connection.

To check the default Network Cards Priority, open up a command prompt and issue this command:

netstat -r

Multiple DHCP Servers on single Mikrotik

Scenario:

Mikrotik dhcp server with 3 network cards (LAN,Wireless,WAN), WAN is connected to Internet, Wireless is connected to the 10.10.10.0/24 subnet and serve as dhcp server  while LAN interface serve for 172.16.10.0/24 subnet.

Configure Mikrotik DHCP to assign ip address to only authorized client(s) {2nd Method}

To achieve the same goal, you can also consult this post and decide yourself that which method suit you better!

Scenario:

Mikrotik is working as dhcp, dns, and default gateway for local network.

How to setup vsftpd FTP with SSL on Ubuntu 12.04

This tutorial teaches you, how to setup vsftpd server on Linux based dedicated Web server. The tutorial also teaches you how to add the ftp users and lock the directory to individual users(In this scenario,lock the users into their individual web directory).

In Ubuntu 12.04, vsftpd with chrooted users gives the following error message:

500 OOPS: vsftpd: refusing to run with writable root inside chroot ()

To overcome this problem, we need to add the following vsftpd PPA:

sudo add-apt-repository ppa:thefrontiergroup/vsftpd

Updates the local repository (package list):

sudo apt-get update

How to convert PPK file to ssh remote server in ubuntu

To convert the ppk file into openssh standard, we need to install the puttygen tool:

sudo apt-get install putty

Here is the ppk key that we want to convert:

OSPF routing between Cisco,Ubuntu,CentOS and Mikrotik Router!

Scenario:

• Routers: 1 Ubuntu Linux with 3 nics, 1 Centos Linux with 3 nics, 1 Cisco 3640 Router with 3 FastEthernet interfaces and 1 Mikrotik Router with 2 interfaces.
• Clients: 3 Windows Xp with 1 nic.

IP Details

All the Routers in this scenario have a default password of “zebra“.

Cisco Router:

• fe0/0: 10.10.10.1/24
• fe1/0:10.10.50.1 /24
• fe2/0: Getting through DHCP

UbuntuRouter:

• eth0: 10.10.10.2/24
• eth1: 172.16.10.1/24
• eth2: 10.10.100.1/24

CentOSRouter:

• eth0: 172.16.10.2/24
• eth1: 192.168.10.1/24
• eth2: 10.10.150.1/24

Mikrotik Router:

• ether1: 192.168.10.2/24
• ether2: 10.10.200.1/24

Clients:

• Ubuntu-Desktop: 10.10.50.50/24
• WinXP-1: 10.10.100.50/24
• WinXP-2: 10.10.150.50/24
• WinXP-3: 10.10.200.50/24

Cisco Router Configuration:

UbuntuRouter Configuration:

Restart the Router!!!

CentOSRouter Configuration:

Restart the Router!!!

Mikrotik Router Configuration:

Neighbor verification from Routers:

Route verification from Routers:

Test from Clients:

Make a simple test from Ubuntu-Desktop.

Make a simple test from WinXP-1.

Make a simple test from WinXP-2.

Make a simple test from WinXP-3.

Configure NAT on Cisco Router:

This is just a bonus section, in which we will configure the NAT on Cisco router and also propagate the default route in OSPF. I connect my Cisco Router to DSL Modem and configure it so that it will take IP address through DHCP, as well as configure the inside and outside interface for NAT.

Lazy man access -list for NAT (This is not the perfect access list):

NAT Overload:

Originate the default route in OSPF:

Verify the last resort information on Cisco Router:

Check default route information on all routers 🙂

Hope this will help you!

Please Remember me in your prayers!

Enjoy 🙂

Name(required)

Email(required)

Website

Comment(required)

Submit

Δ