http://www.kuncar.net/blog Wed, 12 May 2010 00:09:53 +0000 en hourly 1 http://wordpress.org/?v=3.0 http://www.kuncar.net/blog/from-huawei-to-hp/2010/ http://www.kuncar.net/blog/from-huawei-to-hp/2010/#comments Wed, 12 May 2010 00:09:53 +0000 tnk http://www.kuncar.net/blog/?p=523 http://www.kuncar.net/blog/from-huawei-to-hp/2010/feed/ 1 http://www.kuncar.net/blog/frame-relay-multilink-and-vrf-on-ar46-platform-with-vrp-340/2009/ http://www.kuncar.net/blog/frame-relay-multilink-and-vrf-on-ar46-platform-with-vrp-340/2009/#comments Sun, 17 May 2009 23:10:14 +0000 tnk http://www.kuncar.net/blog/?p=58 http://www.kuncar.net/blog/frame-relay-multilink-and-vrf-on-ar46-platform-with-vrp-340/2009/feed/ 3 http://www.kuncar.net/blog/l2tp-over-ipsec-scenario/2009/ http://www.kuncar.net/blog/l2tp-over-ipsec-scenario/2009/#comments Sat, 09 May 2009 23:59:14 +0000 tnk http://www.kuncar.net/blog/?p=77 http://www.kuncar.net/blog/l2tp-over-ipsec-scenario/2009/feed/ 5 http://www.kuncar.net/blog/mac-forced-forwarding/2009/ http://www.kuncar.net/blog/mac-forced-forwarding/2009/#comments Thu, 09 Apr 2009 16:28:10 +0000 tnk http://www.kuncar.net/blog/?p=211 Let me first say that these two features are supposed to do very similar things - they are designed to separate access users so their traffic cannot go directly between them without any control. This is a must as most of the attacks are actually executed from inside your own network and specifically in the same subnet where the]]> http://www.kuncar.net/blog/mac-forced-forwarding/2009/feed/ 1 http://www.kuncar.net/blog/huaweis-send-command/2009/ http://www.kuncar.net/blog/huaweis-send-command/2009/#comments Mon, 06 Apr 2009 22:21:28 +0000 tnk http://www.kuncar.net/blog/?p=177 This article is just about small, handy and not-so-widely known command in all Huawei's equipment. The command is in user-view and is called send. If you are wandering what exactly does this do the answer is quite simple - it is sort of instant messaging built into every VRP I have seen. It enables to send message to any console/terminal]]> http://www.kuncar.net/blog/huaweis-send-command/2009/feed/ 0 http://www.kuncar.net/blog/troubleshooting-ipsec-on-huawei-routers/2009/ http://www.kuncar.net/blog/troubleshooting-ipsec-on-huawei-routers/2009/#comments Sun, 11 Jan 2009 00:23:07 +0000 tnk http://www.kuncar.net/blog/?p=62 Ok so in my previous posts I described the most common config of IPsec with IKE. For troubleshooting this config there are few simple things one should check for basic troubleshoot. No. 1 Check display IKE sa command in user view Output of this command should show you two IKE entries. It is necessary to be two because if there is]]> http://www.kuncar.net/blog/troubleshooting-ipsec-on-huawei-routers/2009/feed/ 3 http://www.kuncar.net/blog/few-notes-to-comparison-between-vrp-340-and-520/2008/ http://www.kuncar.net/blog/few-notes-to-comparison-between-vrp-340-and-520/2008/#comments Fri, 26 Dec 2008 01:11:54 +0000 tnk http://www.kuncar.net/blog/?p=54 As on the AR 19-X boxes I had an opportunity to work on new VRP (which stands for Versatile Routing Platform and is equal to CISCO's IOS) the version was 5.20 and 5.20 release 1618. I have to admit  that I was kind of disappointed. There are two major setbacks.

• The CLI is forcing you to use complete commands

This would]]> http://www.kuncar.net/blog/few-notes-to-comparison-between-vrp-340-and-520/2008/feed/ 0 http://www.kuncar.net/blog/some-gre-ipsec-and-basic-qos-ar-19-x-and-vrp-520-part-i/2008/ http://www.kuncar.net/blog/some-gre-ipsec-and-basic-qos-ar-19-x-and-vrp-520-part-i/2008/#comments Thu, 25 Dec 2008 02:21:29 +0000 tnk http://www.kuncar.net/blog/?p=44 As I promised there goes some stuff I was having fun with lately. Followingscenario is from real life and includes some interesting combinations of features. The problem is stated as follows:

1. AR 19-X is a CPE that is connected to ADSL (SHDSL) line of ISP
2. You need to use GRE tunnel for transporting L3 multicast (especially for OSPF) and IPSec for

]]> http://www.kuncar.net/blog/some-gre-ipsec-and-basic-qos-ar-19-x-and-vrp-520-part-i/2008/feed/ 6 http://www.kuncar.net/blog/qos-on-ar-19-1x-and-29-x-series/2008/ http://www.kuncar.net/blog/qos-on-ar-19-1x-and-29-x-series/2008/#comments Tue, 09 Dec 2008 23:56:39 +0000 tnk http://www.kuncar.net/blog/?p=40 http://www.kuncar.net/blog/qos-on-ar-19-1x-and-29-x-series/2008/feed/ 0 http://www.kuncar.net/blog/unlocking-cisco-devices-to-work-with-unsupported-sfp/2008/ http://www.kuncar.net/blog/unlocking-cisco-devices-to-work-with-unsupported-sfp/2008/#comments Sun, 21 Sep 2008 17:42:37 +0000 tnk http://www.kuncar.net/blog/?p=24 In cisco equipment there is one very irritating problem - it works only with "cisco" SFPs. Well actually cisco is not manufacturing sfps so basically there is just some check going on inside the router/switch. It can drive you crazy if your only cisco sfp dies and you have nothing except for some normal 3rd party sfp (which is by cisco standard]]> http://www.kuncar.net/blog/unlocking-cisco-devices-to-work-with-unsupported-sfp/2008/feed/ 4