The ASCII Construct
Author Archives: The ASCII Construct
- Home → Author's archive:
The ASCII Construct
Cisco’s NXOS EVPN Hybrid mode – interoperability with Asymmetric VTEPs
In this post, we pull back the curtain on this new NXOS EVPN Hybrid mode and understand how it enables interoperability with Asymmetric VTEPs.
Juniper Apstra Part II – Building a data center rack
In this post, we’ll start designing the building blocks for our data center deployment with Juniper Apstra. We’ll look at how to design a rack.
Juniper Apstra Part I – Introducing a true IBNS
With this post, we kick off a new series based on Juniper Apstra. This post serves as an introduction to Apstra - we’ll look at what a true IBN system is, how relational and graph databases are different (and why graph databases are ideal for network infrastructure), concluding with some general workflows in Apstra.
Multi-vendor EVPN VXLAN setup with Containerlab
In this post, we deploy a multivendor EVPN L2 overlay fabric, with BGP in the underlay as well. The entire fabric deployment is automated with Ansible, and Containerlab is used to define and deploy the actual topology.
Junos Part II – BGP and BGP Unnumbered
In this post, we look at BGP on Junos OS and a typical BGP configuration for the underlay, for a 3-stage Clos fabric. We also introduce BGP unnumbered, which is a great way of building the underlay, without the need of any IP addressing.
Juniper vQFX and Containerlab
In this post, we look at how Containerlab can be used to quickly spin up vQFX topologies for network validation and testing. We’ll walk through the entire process - how to build docker images from vQFX images, what happens behind the scenes when bringing these containers up and how to build/verify your topology.
Junos Part I – the basics
In this post, we take an introductory look at the operating system used in Juniper platforms, called Junos OS. This post serves as an introduction to the CLI. We also cover basic bridging.
SDA and Wireless Part II – AP onboarding
In this post, we look at how an Access Point is onboarded in a SD-Access fabric.
SDA and Wireless Part I – integrating a 9800-CL WLC into SDA
In this post, we look at how a 9800-CL WLC is integrated into a SD-Access fabric.
SDA and Wireless Part III – understanding AP configurations on the 9800
In this post, we look at the various access point specific configurations that are pushed to a fabric-enabled WLC.
Cisco SDA and Security Part IV – micro-segmentation in SDA continued (some more)
In this post, we will look at how to leverage SXP tunnels in ISE to achieve a specific use case.
Cisco SDA and Security Part III – micro-segmentation in SDA continued
In this post, we look at how SGACLs are pushed to NADs, with clear packet captures and packet walks. We also see how SGTs are added to the VXLAN header.
Cisco SDA and Security Part II – micro-segmentation in SDA
In this post, we look at microsegmentation in Cisco’s SD-Access fabric, using SGTs.
Cisco SDA and Security Part I – macro segmentation in SDA
In this post, we will look at macro segmentation in Cisco’s SD-Access.
Cisco SDA case study #1 – the case of the traffic that won’t get denied
In this post, we will look at a peculiar case of a SGACL not denying traffic between two hosts in a SD-Access fabric.
SD-Access Programmability Part I – creating a Nornir network inventory from DNAC
In this post, we look at how to generate a Nornir network inventory from DNA-Center, using Python.
Cisco SDA part XII – BSR, Auto-RP for the fabric and a catch-22
In this post, we look at why BSR and Auto-RP do not work with a SD-Access fabric.
Cisco SDA design study #1 – understanding user authentication in the fabric
In this post, we look at how a typical user gets authenticated and authorized in a SD-Access fabric.
Cisco SDA Part XI – understanding ARP in SDA
In this post, we look at how an ARP packet flows within a SD-Access fabric.
Cisco SDA Part X – understanding L2 handoff
In this post, we take a detailed look at the L2 handoff feature in Cisco’s SD-Access.