Friday 23 November 2018

Lightweight to Autonomous and Vice Versa


Lightweight to Autonomous Conversion


Configure the IP Address in AP
APLWAPPTOIOS#debug capwap console cli (command to enter into config terminal)
APLWAPPTOIOS#config terminal
APLWAPPTOIOS(config)#Interface bvi1
APLWAPPTOIOS(config-if)#Ip address x.x.x.x x.x.x.x
APLWAPPTOIOS(config-if)#Ip add dhcp (to configure interface to obtain IP from DHCP)

Command to load Autonomous Image from TFTP
APLWAPPTOIOS#archive download-sw /force-reload /overwrite tftp://<tftp ip address>/<image name.tar>

Autonomous to Lightweight Conversion

Configure the IP Address in AP
APIOSTOLWAPP#config terminal
APIOSTOLWAPP(config)#Interface bvi1
APIOSTOLWAPP(config-if)#Ip address x.x.x.x x.x.x.x
APIOSTOLWAPP(config-if)#Ip add dhcp (to configure interface to obtain IP from DHCP)

Command to load Lightweight AP Image from TFTP
APLWAPPTOIOS#archive download-sw /force-reload /overwrite tftp://<tftp ip address>/<image name.tar>

Wednesday 21 November 2018

BPDU Guard and BPDU Filter


BPDU Guard
BPDU Guard is used to protect STP topology from BPDU attacks.

BPDU Guard must be enabled on a port that should never receive a BPDU from its connected device.

End devices like workstations, server, printers etc. are not supposed to generate BPDUs, because BPDU messages are exchanged by network switches.

If someone plugs switch/hub from switchport then BPDUs will be exchanged and can cause issue in our network.

When a BPDU Guard enabled port receive BPDU from the connected device, BPDU Guard disables the port and the port state is changed to Err disable state.

Global Config
switch(config)#spanning-tree portfast edge bpduguard default
To remove, use no command 
Interface Config
switch(config-if)#spanning-tree bpduguard enable
To disable use disable at the end 

BPDU Filter
BPDU filter is a feature used to filter sending or receiving BPDUs on a switchport.

When BPDU Filter is enabled globally and If any BPDUs are received on switchports, the PortFast feature is disabled and the port will become a normal STP port.

When BPDU Filter is enabled at an Interface, BPDU Filter will not send out BPDUs and avoid the processing of received BPDUs. This will completely disable the Spanning Tree Protocol (STP) on that interface.

Global Config
switch(config)#spanning-tree portfast edge bpdufilter defaultTo remove, use no command 
Interface Config
switch(config-if)#spanning-tree bpdufilter enable.
To disable use disable at the end

What are Sticky Clients ?

What are Sticky Clients ? CREDIT : http://wifinigel.blogspot.com/2015/03/what-are-sticky-clients.html One term you'll often hear banded ...