GNS3 Labs

GNS3 0.8.1 VirtualBox Edition Installation and configuration:

2011-12-11T00:01:00.000+05:00

GNS3 0.8.1 VirtualBox Edition release few time back. New version have many improvements and fixed bugs. In this post i will show you that how to install and configure this new version on windows 7. First download this from internet, make sure u download the correct one that is GNS3 v0.8.1 VBE all-in-one. Which include the following software packages

pathon
Pyqtgpl
pywin32
WinPCAP
wire shark

Start the set up wizard by click on setup file wizard will start and install all above packages one by one.

Process started with gns3 installation...

Then Pathon and pyqt GPL installation starts.

Winpcap Installation

Wireshark Installation

After installation it prompt for dynamips setting, use the default setting click on test button to confirm the setting.

How to fix Generic Host Process For win32 services has encountered a problem and needs to close | windows (active directory) server Solution

2011-12-06T22:27:00.002+05:00

Here are some possible solutions for "Generic Host Process For Win32 Services Encountered A Problem and needs to close."

This article include solutions for this error for both Domain host Having this Problem and stand alone local PC.
Solution for Generic Host Process For Win32 Services for Domain User (Microsoft Active directory user):

If a Microsoft Active directory user have this issue then log on to that PC with administrator account or with any other domain user and check that windows again show this error or not.
If not then rename that user profile. For windows XP you can find profile from c:\document and setting\ and in windows 7 you find this profile folder at C:\Users. e.g. user viki have this problem then you need to rename this viki folder with any other name like viki1.
Now log on again with that user having "Generic Host Process For Win32 error" after login. This time system will not find any profile for that user and will create a new profile for this user.
After login this error will not be shown and if it shown again then you need to run a system repair.

Solution for Generic Host Process For Win32 Services for Stand alone user:

You can also try above mention solution for stand alone PC.
Open the registry by typing regedit in run and go to KEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters and find the file TransportBindName in left dialog box and set it value to blank.

That all for my end hope Your problem will resolve from my experience thanks.

What is BGP Border Gateway Protocol

2011-11-29T23:03:00.003+05:00

BGP stands for "border gateway protocol". BGP is protocol of internet, ISPs used this protocol for routing. BGP belongs to EGP(exterior gateway protocol). There are two types of protocol i.e. EGP and IGP.
IGP (Interior gateway protocol) made the network to work in an organization where as EGP is used for communicating two AS (autonomous systems). In start EGP is himself a protocol, now this become a category.

BGP Facts:

BGP have Multihoming and use shortest path among the two or more ISPs
BGP runs on top of TCP (port 179)
BGP updates are triggered, only change is send to neighbours not the whole routing table
BGP routing table can be of >100 MB

BGP Routing Algorithms:

BGP is technically a distance vector protocol, but mostly call it a path vector protocol. Without tuning BDP behaves just like RIP, use hop-count for shortest path but hope-count in this case is a AS or ISP

BGP Tables:
Three tables in BGP that are as follow:

Neighbour Table: The directly connect BGP friends.
BGP Table: A list of all GBP routes this can be big.
Routing Table: Contain the best Path.

GNS3 Installation on Ubuntu 11.04 | Network Simulator for Ubuntu

2011-11-08T21:18:00.003+05:00

There are some different ways to install softwares and packages for Ubuntu, you can install software by console interface. But in this post i am using an easy way to install GNS3 on Ubuntu 11.04.

First open Ubuntu Software Center from Application\Ubuntu Software Center and click on "get software" tab and type gns3 and press search button.

In search result you will find "gns3 Graphical Network Simulator" click on install button. Then it will ask you for administrator password, type tour password.

After this installation process will start which will take a few minutes to complete.

After the successful installation you can run GNS3 from Application\Accessories\GNS3. You can see installation process video on you tube by clicking this link: Easy way to install gns3 on ubuntu 11.04.

thanks.

How to install flash player on Ubuntu 11.04 | Linux software install

2011-11-07T22:46:00.001+05:00

In this post i will show you that how to install flash plugin for Ubuntu 11.04. There are some other ways to install the software on Ubuntu but i am using a very easy way to install flash plugin on Ubuntu.

First click on application\ Ubuntu software center, which will open the add and remove software utility for Ubuntu.

Then click on get software and in search field type key word "flash plugin". Select your required flash player as i am selecting flash player for Mozilla. Click on install button, then it will ask you to enter your administrative log in password and installation process will start.

This may take a few minutes and after the installation you can verify this by clicking on "Installed Software" button, there you will find the flash plugin software.

Ubuntu Virtualization | Installation of ubuntu-11.04 on Vmware with Windows 7

2011-11-03T22:56:00.069+05:00

What is Virtualization:

Virtualization is trend that is swaping IT envirment and adding virtual machines in our data centers. According to one report there are more than 6 mission intel servers in data centers all over the world. These server are running only one application and one operating system at a time. These are high cost solution for IT organization. Average utlization of each server is 6-12 %.

By Virtualization tecnology you can run multiple applications and OS on single server Hardware. Each virtual OS have its own CPU including its own Memory Disk storage and Ethernet.

Ubuntu11.04 on Vmware
Vmware is best virtualization software for ubuntu. Today i will show you that how to install Ubuntu 11.4 on Vmware with windows 7. Installing Ubuntu on vmware is a piece of cake. You need to just follow the simple steps.

First you need a Ubuntu 11.4 DVD or ISO image file.
Start Vmware 7 and click on new virtual machine, give name to new VM machine and then this wizard will asked you to identify the Ubuntu image and RAM and disk storage. I select the 512 RAM and 20GB disk, you can define yours.

Complete this wizard and start your VM. Ubuntu booting process will start.

Then select your language.

After this Ubuntu 11.4 installation process is start.

This installation process will take 20-30 minutes to complete and after this a log in screen will appear click on login icon and enjoy the beautiful interface of Ubuntu Linux OS.

Convert DMG image to ISO using dmg2img 1.6 on windows7

2011-10-17T18:31:00.007+05:00

In this small article i will show you how to convert .dmg image file to an .iso image.
What is a DMG file?
Dmg is image file extension for Mac OS, where as extension like ISO and BIN are related to windows image files.
You cannot use DMG file on windows you need to convert this type to some windows know extension like ISO. dmg2img is dmg to iso converter.
Following are step for converting a .dmg to .iso using dmg2img
Step-1:
Download and extract dmg2img, you can easily download free this software from internet. After the extraction you will find following three files.

Step-2:
Open the command promt by typing "cmd" in run.
Step-3:
To convert a dmg into iso using dmg2img you need to type the command according to following syntax.
dmg2img <source dmg file Directory(location)> <Destination iso image location>
In my case these parameters are as follow:
dmg2img software Location: C:\mac
DMG image Location: C:\mac\mac.dmg
Destination iso : C:\mac\mac7.iso
So first open the mac folder in cmd using cd "C:|mac" and then type the command
dmg2img C:\mac\mac.dmg C:\mac\mac7.iso

press enter and converting process is start and new iso imag is appear in mac folder.

Cisco AAA Radius Server Configuration on GNS3

2011-09-04T19:32:00.007+05:00

In this tutorial I will explain shortly what is AAA and how to enable AAA on a Cisco router and some basic AAA authentication configuration. Please note that this is only about the router end configuration.

What is AAA?

AAA services are like a security package, which provides a massive security to a device.

AAA stands for Authentication, authorization and accounting.

Authentication:

Validate who you are, instead of enable secret now u have username and password to login.

Authorization:

Tells you what you can do. Define different user’s privileges and access levels.

Accounting:

Use for monitoring and for keeping history. Tracks what you did on a device.

By using AAA u can control PPP links, aux port, dialup modem, VTY, VPN access anything that required password.

AAA Protocols:

There are two famous protocols use for AAA services that are

ü Radius

ü Tacacs

Radius server is open standard where as Tacacs+ server is Cisco proprietary. You can also use the Microsoft Active directory services as AAA server.

For AAA demonstration I have created the following topology in which R1 is enabled for AAA authentication. In first step I have created an AAA authentication group named “viki-group” in which I define server-group priority and radius server address which is not present here but due to priority router first look for an Radius server and then authenticate user from their local database . Second step is enable AAA for your required service in my case I enabled it for VTY access.

R1 config:

R1(config)#int s1/0

R1(config-if)#ip add 1.1.1.1 255.255.255.0

R1(config-if)#no shut

R1(config)#aaa new-model

R1(config)#aaa authentication login viki-login group radius local (Server priority)

R1(config)#radius-server host 192.168.1.1 key password (Server Address)

R1(config)#username viki password cisco (Local user Database)

R1(config)#line vty 0 4

R1(config-line)#password cisco

R1(config-line)#login authentication viki-login (enable AAA for Telnet access)

R1(config-line)#ex

Radious Configuration:

Radious(config)#int s1/0

Radious(config-if)#ip add

Radious(config-if)#ip address 1.1.1.2 255.255.255.0

Radious(config-if)#no shu

Radious(config-if)#no shutdown

For verification telnet to 1.1.1.1 and now router authenticate you with a user name and password.

Site to Site VPN CLI configuration on Gns3:

2011-09-03T12:24:00.007+05:00

What is a VPN?

A Virtual Private Network is a type of a connection that connects remote user s to their central office using internet. An IPSEC VPN is virtual tunnel through your public ISP network. VPN are highly encrypted and secure connections.

how to setup a vpn on Cisco:

Here we shall see VPN site to site CLI configuration on GNS3, It’s not so much the commands.

I shall divide these configurations into few parts to make it easy to understand i.e.

1. Define isakmp policy and transform set:

Isakam is the protocol that allow all of keys exchange to happen automatically no need to manually configure the VPN. In this step we shall define authentication type, encryption type, hash. Lifetime and define what session keys are used.

2. Create an ACl

Define interesting traffic using an access control list, this ACL is not for deny or permitting some IP addresses but it just says which addresses are encrypted

3. Set up cryto Map and assign this to interface:

In this step we shall tie up all piece so that we can apply to an interface

For site to site VPN configuration I have created the following lab in gns3, in this US and Pakistan are our end site routers and IPS cloud is representing the internet cloud but don’t confuse with this cloud this is a simple router with 7200 series IOS, I have changed the router symbol from gns3/edit/symbol manager to give real environment look to my topology. Complete configurations are given below.

Us site config:

US(config)#int s1/0

US(config-if)#ip address 50.0.0.1 255.255.255.0

US(config-if)#no shut

US(config)#int loop 1

US (config-if)#ip address 10.1.1.1 255.255.255.0

US(config)#router rip

US(config-router)#version 2

US(config-router)#network 10.1.1.0

US(config-router)#network 50.0.0.0

US(config-router)#no auto-summary

Step-1 :

US(config)#crypto isakmp policy 7

US(config-isakmp)#authentication pre-share

US(config-isakmp)#encryption aes 128

US(config-isakmp)#group 2

US(config-isakmp)#hash sha

US(config-isakmp)#lifetime 100

US(config-isakmp)#ex

US(config)#crypto isakmp key 0 vpnkey address 192.168.1.1 no-xauth

US(config)#crypto ipsec transform-set vpntrans esp-aes 128 esp-sha-hmac

Step-2

US(config)#ip access-list extended vpn-acl

US(config-ext-nacl)# permit ip 50.0.0.0 0.0.0.255 172.16.0.0 0.0.255.255

Step-3

US(config)#crypto map vpn-map 10 ipsec-isakmp

US(config-crypto-map)#set peer 192.168.1.1

US(config-crypto-map)#match address vpn-acl

US(config-crypto-map)#set transform-set vpntrans

US(config)#int s1/0

US(config-if)#cry

US(config-if)#crypto map vpn-map

ISP configuration:

ISP#conf t

ISP(config)#int s1/0

ISP(config-if)#ip add 50.0.0.2 255.255.255.0

ISP(config-if)#no shut

ISP(config-if)#ex

ISP(config)#int s1/1

ISP(config-if)#ip add 192.168.1.2 255.255.255.0

ISP(config-if)#no shut

ISP(config)#router ri

ISP(config-router)#version 2

ISP(config-router)#network 50.0.0.0

ISP(config-router)#network 192.168.1.0

ISP(config-router)#no auto-summary

Pakistan site config:

Step-1 :

Pakistan#conf t

Pakistan(config)#crypto isakmp policy 7

Pakistan(config-isakmp)# authentication pre-share

Pakistan(config-isakmp)# group 2

Pakistan(config-isakmp)# lifetime 100

Pakistan(config-isakmp)#crypto isakmp key vpnkey address 50.0.0.1 no-xauth

Pakistan(cfg-crypto-trans)#ex

Pakistan(config)#crypto ipsec transform-set vpntrans esp-aes esp-sha-hmac

Step-2

Pakistan(config)#ip access-list extended vpn-acl

Pakistan(config-ext-nacl)# permit ip 172.16.0.0 0.0.255.255 50.0.0.0 0.0.0.255

Pakistan(config-ext-nacl)#ex

Step-3

Pakistan(cfg-crypto-trans)#crypto map vpn-map 10 ipsec-isakmp

Pakistan(config-crypto-map)# set peer 50.0.0.1

Pakistan(config-crypto-map)# set transform-set vpntrans

Pakistan(config-crypto-map)# match address vpn-acl

Pakistan(config)#interface Serial1/0

Pakistan(config-if)#crypto map vpn-map

Site to site VPN verfication Commands:

Show crypto isakam sa

Show crypto ipsec sa

GNS3 | Basic Configuration Of Tinycore Linux 3.4 Qemu image | Windows 7

2011-08-03T22:51:00.009+05:00

In this small article i will show you how to configure the Tinycore Linux 3.4 in GNS3. Unlike the other some qemu images Tinycore Linux 3.4 have a GUI.

To use Tinycore Linux 3.4 image first you have define the path of image in Edit\peferences\qemu\qemu host\binary image.
For basic IP configuration there are two ways that you can use:

Start the Tinycore Linux 3.4 qemu following loading screen is appear.

Wait for complete loading

After loading you will find qemu GUI with bottom Menu. Click on Panel/network, a pop up windows is open and define the IP address & gateway in respective fields.

For second method click on aterm from bottom menu of qemu, console is appear use following commands for IP configuration.

tc@box:$ sudo su
root@box:$ Ifconfig eth0 192.168.1.11 netmask 255.255.255.0
root@box:$ Route add default gw 192.168.1.1 eth0

__________________________________________________________________________________

CCNA Access List Configuration Example on GNS3

2011-08-03T22:49:00.007+05:00

What Is Access Control List?
An access control list (ACL), in datacom Networks is used to assign different permissions e.g deny/permit to an object.

ACL Rules:

List is applied from Top statement to bottom, order is important if first statement is matched then other are neglected ,
Defalt Invisible deny at bottom of every access list, it mean that if you have different hosts in network lets say 192.16.1.1, 192.16.1.2, 192.16.1.100 etc and you have create a access list in which you have only deny 192.16.1.100 to access internet. In this case all other host are also block because of this rule, you have whrite aother statement to permit any other host to correct this.
ACL is applied to an interfaces that may be inbound or outbound direction

Types of Access Control List:

There are two main types of ACL

Standard ACL
Extened ACL

Standard ACL:

ACL Number range is from 1-99
Always apply near to destination
Lower process utilization

Standard ACL Syntax:

Router(config)#access-list <1-99> deny/permit host/network

Access-list practice lab diagram is as follow:

Objective:

Block Qemu5 host to accessing Qemu3 Host
Use standard ACL to block Qemu5 Host to telnetting R1

Lab Configuration:

For basic IP and RIP configuration you can visit RIP on GNS3 and Qemu host configuration.

R3 ACL Configuration (objective-1) :
R3(config)#access-list 1 deny host 172.16.2.10
R3(config)#access-list 1 permit any
R3(config)#int f1/0
R3(config-if)#ip access-group 1 out
R1 ACL Configuration (objective-2) :
R1(config)#line vty 0 4
R1(config-line)#password cisco
R1(config-line)#^Z

R1#conf t
R1(config)#access-list 2 deny 172.16.2.10
R1(config)#access-list 2 permit any
R1(config)#line vty 0 4
R1(config-line)#access-class 2 in

Access Control List Verification Commands:

Ping from 172.16.2.10 to 10.2.2.20 & 10.2.2.50 is unsuccessful

Telnet from 172.16.2.10 to R1 is failed

RIP Lab Configuration On GNS3:

2011-07-24T20:39:00.001+05:00

This is a simple tuttorial for configuring RIP on GNS3, i have create a small lab of three routers and two ethernet switches on GNS3 as shown in network diagram.

RIP routing protocol have simple configuration, you need a just network command to advertised the connected networks.
Configuration for R1:

R1#conf t

R1(config)#int s1/0
R1(config-if)#ip add 100.1.1.2 255.255.255.0
R1(config-if)#no shut
R1(config-if)#int s1/1
R1(config-if)#ip address 20.1.1.1 255.255.255.0
R1(config-if)#no shut
R1(config-if)#ex
RIP Configuration Commands for R1:
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#network 20.1.1.0
R1(config-router)#network 100.1.1.0

Configuration for R2:

R2#config t
R2(config)#int f1/0
R2(config-if)#ip address 172.16.2.1 255.255.0.0
R2(config-if)#no shu
R2(config-if)#int s2/0
R2(config-if)#ip address 100.1.1.1 255.255.255.0
R2(config-if)#no shut
R2(config)#router rip
R2(config-router)#version 2
R2(config-router)#network 172.16.0.0
R2(config-router)#network 100.1.1.0
Configuration for R2:
R3(config)#int s2/0

R3(config-if)#ip add 20.1.1.2 255.255.255.0

R3(config-if)#int f1/0

R3(config-if)#ip add 10.2.2.1 255.255.255.0

R3(config-if)#ex

R3(config)#router rip

R3(config-router)#ver 2

R3(config-router)#network 10.2.2.0

R3(config-router)#network 20.1.1.0

RIP Verification Commands:

Show ip route command should display all RIP networks and end to end ping should be successful.

Microsoft Security Essentials Icon Missing From System Tray

2011-07-20T20:29:00.003+05:00

I am using "Microsoft Security Essentials" for a long time on windows 7 and found it a good software against the different threats/viruses.Few day ago MSE icon is suddenly disappear from system toolbar.
I tried different things to solve this e.g.

Check task Manager but there is no msseses.exe for MSE
Try to manually start MSE service
Uninstalled MSE and install again but no result.
Check notification area icon setting from toolbar/properties/customize, it is selected for show icon

After trying above steps problem was still there,i sense that this may be because of some virus because i had disable MSE's updated few week ago. I installed another antivirus and after restart and system scan my problem is solved.

FireFox/Internet Explorer/Chrome is not working after Avast boot Scan:

2011-07-19T18:45:00.006+05:00

From past few days i had a problem with my "Microsoft Security Essentials", MSE icon is not showing in toolbar. I check task Manager but there are no MSE exe and service running, also try by reinstalling MSE but no result. i guess that this may be because of some virus therefore i installed Avast antivirus, after the installation avast reports some threats/virus found in your system you need a boot scan for complete scan. Therefore i restart my system and after restart avast scan my hole system. When the scan is finish windows 7 is booted and i surprised to see MSE icon is appear at toolbar, but when i open my web browser Firefox to access the internet but Firefox display the proxy server error. i try internet explorer but same results. I check modem setting and ping 4.2.2.2 and found that internet is working fine but web browsers are not opening any site.

Proxy-error after avast boot scan

How to fix this Problem:

I check Firefox setting and found that avast treated firefox as a treat and add a proxy server address as follow

Since in my home network i don't running any proxy server therefore to fix this you need to selected "no Proxy" from option/network/setting as below

For internet explorer go to internet option/connection/Lan setting and then unchecked the proxy server check box.

Hope this post will be helpful for you thanks.