Ccieblog.co.uk Website Review

in this post, i will go through the ospf filter-lists (in & out) and explain how they are working.  i’ll start of with easy scenario’s, then gradually make them more complex to understand.  the thing to remember is that you can only filter type 3 lsa’s on abrs. when filtering in or out of an area, you are actually filtering the lsa 3 in or out of the specified area. the topology i will use is this post will discuss the transit capability feature that is enabled by default in ospfv2 and above.  to understand the transit capability, the network needs a virtual-link involved.  so i have pre-configured the network shown in the diagram below ready for the virtual-link to be configured.  ospf been configured with just with a very basic config to get the areas up and running. i have also configured all interfaces to use an ospf cost of 1, with the only exception that r4’s gi1.46 interface is set with an interface cost this topic very accurately describes how the wide metric calculation works (and boy, is there a lot of bullsh*t on the web about this calculation with wide metrics).  below is a simple topology to demonstrate how the eigrp wide metrics work. this post shows you how to configure anyconnect with ad group authentication.  i.e. users must be part of a certain security group inside of ad in order to be authenticated on the anyconnect client. below is the complete configuration.  i will run through how it works underneath. aaa-server ad (inside) host 1.1.1.1  ldap-base-dn dc=google,dc=com  ldap-scope subtree  ldap-naming-attribute samaccountname  ldap-login-pas*word $tr0ngp@$$w0rd  ldap-login-dn cn=ciscoasa,ou=service account,ou=uk,dc=test,dc=com  server-type microsoft  ldap-attribute-map map-anyconnect-login  dns-server value 8.8.8.8  vpn-simultaneous-logins 500  vpn-tunnel-protocol ssl-client  split-tunnel-policy tunnelall #### attribute-map section #### ldap attribute-map map-anyconnect-login basically authenticates the firewall to ad (with the username ciscoasa), so that it can make queries with ad to authenticate