Archive for May, 2009

Access Control Lists (ACLs) – Part 2

In ACLs – Part 1 we learned the basics of access lists, including the facts that ACLs:

  • Are created in global config mode
  • End with an implicit “deny any” (which can be overridden)
  • Must be placed into service somewhere to have any effect

Thus, the commands:

  • Router#conf t
  • Router(config)#access-list 3 deny 172.16.1.1
  • Router(config)#access-list 3 deny 172.16.1.2
  • Router(config)#access-list 3 deny 172.16.1.3
  • Router(config)#access-list 3 permit any
  • Router(config)#interface g1/2
  • Router(config-if)#ip access-group 3 out

Will create an ACL 3 (denying traffic from hosts 172.16.1, 2 and 3, while permitting all other traffic), and place it in service on the GigEthernet1/2 interface in the outbound direction.

Continue reading ‘Access Control Lists (ACLs) – Part 2′

UCVUG off to a promising start

msucvug

The Microsoft Unified Communications Virtual User Group (UCVUG) had a successful first meeting with around 25 total participants. A recording of the meeting is available, though they missed the first 10 minutes (oops).

According to their website:

This user group was formed to provide resources, education, and collaboration to professionals who are interested in Microsoft UC products. UCVUG meets every quarter and all meetings are held online using Microsoft UC products such as Live Meeting.

We are independent and are not affiliated with Microsoft. We sometimes even have presentations from other vendors such as Microsoft partners. However all presentations will be related to the Microsoft UC platform.

Memberships are free and allows you access to exclusive member content, plus they have occasional prize drawings.

Video calls at your desktop: CUVA makes it happen

Video to the desktop is a feature of Cisco Unified Communications Manager (CUCM) that was first introduced in Call Manager 4.0. The video to the desktop feature requires the Cisco Unified Video Advantage (CUVA) client software and hardware (USB video camera). (The related Cisco Unified Personal Communicator (CUPC) client is a software client that combines a soft phone, video, and instant messaging client. CUPC requires a Cisco Unified Presence Server (CUPS) in the Unified Communications deployment.)

End users don’t need much training to take advantage of the CUVA video to the desktop solution. The calling party picks up their Cisco IP phone and dials the destination phone number. The phone call is transparently transformed into a video call in which the handset of the phone is used for the audio portion of the video call and the monitor is used for the video portion of the call.

Continue reading ‘Video calls at your desktop: CUVA makes it happen’

What’s the Value of CCNA Wireless?

As we have discussed in previous posts, Cisco has introduced three new concentrations: CCNA Security, CCNA Voice, and CCNA Wireless. Cisco announced the introduction of these three new concentrations to augment its popular CCNA associate-level career certification on June 24, 2008, at last year’s Cisco Live! event in Orlando, Florida.

By expanding the CCNA portfolio, Cisco is implementing a company-wide initiative to address the global IT talent shortage, accelerate the expansion of the information economy, and improve the productivity of the technical community. By expanding on the competencies and skills acquired through CCNA training and curricula, these new, specialized concentrations offer individuals the first step into to an expanded career path using the converged technologies that make up many of today’s modern networks.

Both technical and business decision makers feel confident that the growth in networks of all sizes will play a key role in stimulating a sustained economic recovery and growth. As such, the need for networking talent will grow in importance. However, the supply of professionals with the technical expertise to manage sophisticated networks has been diminishing, with particularly strong shortfalls in converged and advanced networking technologies such as security, voice, and wireless applications.

Continue reading ‘What’s the Value of CCNA Wireless?’

Real vs. virtual practice labs?

For past couple of years, the number of training companies offering students the ability to practice on remote or simulated labs for Cisco certification preparation has risen. The offering of remote equipment or simulated labs has had a very positive response from many new and seasoned engineers that might not have the money to buy the sometimes expensive items to set-up their own labs for testing purposes, including myself.

However, after my most recent attempt to pass the CCIE Voice test, and after using remote labs for my studies, I’ve come to realize the importance of buying your own lab equipment. I’ve come to the conclusion that remote labs and simulators don’t cut it when trying to acquire an advanced certification such as the CCIE.

Don’t take this out of context, remote or simulator labs are great for new engineers who are just learning the commands to configure a router or switch, or someone who is studying for the CCENT, but that changes once you start to move up the ladder.

Remote labs are very limited in terms of time. Most of the remote labs offer 6 to 8 hour blocks which are very good, but sometimes the price can range from $30 to $75 a session, depending heavily on the track. It is not realistic to work on a lab for 8 hours per day, especially when there are distractions such as kids, wife, and work.

Having a real lab either at home or the office, offers flexibility and real world experience. With remote labs, you are not able to change the network infrastructure as you see fit. In most cases, when there is a problem with the equipment you have to submit a trouble ticket which can take 15 to 30 minutes for a technician on the other side to resolve (that is if you are lucky) subtracted from your lab time. But remote labs are great when you don’t have the money to buy your own equipment.

Bottom line, if you anticipate needing to spend 300 or more hours on lab equipment I would suggest either investing the money in the equipment. Or sign up for training that provides real equipment for you to work on. Not only will you learn how to use it, but it’s real experience that you are adding to your resume.

Author: Chris Foster

add to del.icio.us add to furl Digg it Stumble It! post to facebook post to technorati


Editor’s Note: Global Knowledge offers a free white paper on Building a Home Lab Environment for Cisco Unified Communications. We also offer live remote labs that let you practice and hone your networking and system administration skills using real hardware and software.

Exploring the CUBE

IP telephony service providers (ITSP) offer a cheaper, efficient, and redundant PSTN call routing paradigm shift using voice over IP technology. This blog will investigate the Cisco Unified Border Element (CUBE) and the ITSP value proposition.

Enterprises have been using T1 and E1 time division multiplexing (TDM) circuits to connect to the public switched telephone network (PSTN) for many decades. An ISDN based T1 PRI allows up to 23 phone calls to be routed to the PSTN at one time. Large organizations and call centers with high call volumes require dozens of T1 interfaces to the PSTN. Each T1 interface requires capital (hardware) and operational (support) expenditures. Each T1 interfaces must be housed in HWIC (high density voice/WAN Interface card) slot on a Cisco router with the necessary digital signal processors (DSP) available in the PVDM2 modules. Cisco Smartnet support contracts carry a recurring cost to support and warranty the necessary hardware purchases. The ITSP models allow hundreds of phone calls to be routed over one Ethernet based data link without the added capital (CAPEX) or operational (OPEX) expenditures associated with traditional T1 interfaces. Ethernet based interfaces are much cheaper than T1 interfaces and they do not require DSPs.

Continue reading ‘Exploring the CUBE’

Routing Tables – Part 2

In Routing Tables part one, we covered the basic purpose of a routing table and how an end device or intermediate device such as a router or multilayer switch can route based off its table. We also viewed different routing tables and how they are used to find a given destination network. In this blog, we will cover the purpose of routing metrics, administrative distance, and static routing and how they are important to routing table with the SHOW IP ROUTE command.

As a quick review, I mentioned that routers will always route between directly connected interfaces. A routing protocol isn’t needed to forward packets between these subnets.

EXAMPLE 1

Continue reading ‘Routing Tables – Part 2′

Fax, Modem, and Text over IP

G.711 (64kbps) is the default audio codec used for phone conversation used in the following platforms:

  • Cisco Unified Communications Manager (CUCM)
  • Cisco Unified Communications Manager Express (CUCME)
  • Cisco Unified Communications Manager Business Edition (CUCMBE)

Many IP Telephony deployments use the G.729 (8kbps) audio codec over wide area network (WAN) links to save bandwidth. G.729 has a very negligible voice quality impact while using 1/8 of the bandwidth of uncompressed G.711 voice. G.729 is the default audio codec used on voip dial-peers in a Cisco IOS based gateway routers. G.729 was created to compress human voice, not to compress fax, modem, or text communications. Many IP telephony deployments are performed without optimizing the infrastructure for fax, modem, and text communications.

This post will look at the challenges and available solutions to transmitting fax messages over IP, focusing on H.323 and SIP controlled gateways. The MGCP gateway protocol has very unique coverage of fax messages since the MGCP call agent (CUCM) is very involved in every call.

VoIP dial peers use G.729 by default and the only fax rate that uses 8kbps or less is a fax rate of 7200 bps. The fax rate of the VoIP dial peer should be changed to the highest possible fax rate, which is currently 14400 bps (fax rate 14400). Cisco routers support the analog G3 fax standard which is capable of sending fax messages at up to 14.4kbps. Super G3 fax machines can send and receive faxes at up to 33.6kbps, but Cisco routers only support the G3 fax standard. If using super G3 fax machines, it is recommended to provision the necessary gateway configuration commands that allow the gateway to negotiate between super G3 and G3 (fax relay sg3-to-g3). The references portion of this blog includes links to places where you obtain the necessary commands for anything mentioned in this blog.

The default fax protocol used in Cisco routers is the Cisco fax, fax relay mechanism. The Cisco fax relay mechanism includes logic in which the Cisco gateway recognizes a fax call based on the unique negotiated tones fax machines transmit and receive (T.30). The Cisco router recognizes these tones and the digital signal processor (DSP) of the router treats the call uniquely in order to properly handle the fax call. The International Telecommunications Union (ITU) subsequently standardized a fax relay approach that was given the designator of T.38. T.38 fax relay and Cisco fax relay are mutually exclusive, but many of the commands used to implement such are used for both. Fax relay requires less bandwidth over the IP WAN than another approach we will discuss called fax pass through.

If using T.38 as a fax relay mechanism, the fax protocol (fax protocol t38) must be specified in voip dial peer or voice service voip configuration mode. A dial peer with the fax rate system command leverages the fax protocol specified globally in voice service voip configuration mode. Some fax machines use proprietary mechanisms to transmit faxes rather than leveraging the ITU T.30 standard. Since Cisco gateways cannot handle these proprietary faxes, the fax nsf 000000 command is used in voip dialpeer configuration mode to force the faxes to use the T.30 standard. Many fax machines use a mechanism called error correction mode (ECM) to ensure the proper transmittal of fax messages. The fax-relay ecm disable command should be used to turn this mechanism off on all voip dial peers that will send fax over IP (FoIP) messages. The use of this command should increase the success rate of fax over IP networks with packet loss and jitter conditions. Fax over IP communications should always be put in the quality of service (QoS) priority queue (PQ) to guarantee low packet loss, delay, and jitter. Fax and modem communications are more susceptible to quality degradation than voice over IP. Voice must normally have a packet loss of less than 1 percent, while fax and modem requirements are 1/10 of the packet loss of 1 percent (.001).

What if you have tried all the fax relay mechanisms and you are still having fax problems such as failed faxes, missing lines, poor quality, etc.? It may be time to implement a fax pass-through mechanism.

References:
Cisco IOS Fax, Modem, and Text Support over IP Configuration Guide, Release 12.4T

Dial Peer Configuration on Voice Gateway Routers

Cisco IOS Voice Command Reference

Fax, Modem, and Text for IP Telephony

Author: Dennis Hartmann

add to del.icio.us add to furl Digg it Stumble It! post to facebook post to technorati

Access Control Lists (ACLs) – Part 1

Welcome back! This time, we’ll take a look at access control lists, often referred to as “access lists” or “ACLs” (sometimes pronounced “ackels”). In Cisco IOS, ACLs are used for many things, including but not limited to:

  • Filtering data packets (“firewalling”)
  • Controlling Telnet or SSH access to a router or switch
  • Filtering routing protocols
  • Specifying Quality of Service (QoS)
  • Controlling encryption
  • Controlling NAT (Network Address Translation)
  • Controlling Dial-on-Demand

The idea of an access list is straightforward: it permits some things, and denies others. What exactly is being “permitted” or “denied” varies according to the application of the ACL. Although access lists for other protocols (such as IPX, AppleTalk, MAC addresses, etc.) exist, we’ll be focusing on IP access lists. In general, only routers and multi-layer switches understand IP access lists (but some Layer-2 switches are ACL-aware to some extent).

For example, let’s say that traffic originating from a host with IP address 192.168.1.1 should be permitted to leave the FastEthernet0/0 interface. An ACL that would accomplish this would be:

  • Router#configure terminal
  • Router(config)#access-list 1 permit 192.168.1.1

The ACL resides in the running config, and can be seen with the command “show access-lists”. There are various options for this command, including “show ip access-lists”, “show access-lists X” where “X” is the ACL identifier, etc.

The ACL created above is now resident in memory, but will not take effect until it is placed into service in some manner. To place it outbound on the FastEthernet0/0 interface, the commands would be:

  • Router(config)#interface fastethernet0/0
  • Router(config-if)#ip access-group 1 out

Continue reading ‘Access Control Lists (ACLs) – Part 1′

Why a Cisco VoIP Certification?

As many of you know, for the last decade the CCNA certification has been the most sought-after entry-level computer-networking certification in the industry. This certification primarily focuses on Router and Switch configurations. And, because of the success of many training programs offered by Cisco’s excellent training partners like Global Knowledge, Routing and Switching certifications are fairly common among IT pros today.

By building on your existing CCNA certification, an incredible opportunity has become available to you. Cisco has announced three new and separate additions to the CCNA certification program:

  • CCNA Voice
  • CCNA Security
  • CCNA Wireless

It is important to understand that these new certifications are not replacing the current 640-802 CCNA exam. You can only qualify for these additional certifications after earning your CCNA.

You may be asking yourself, “Why should I spend the time and effort to qualify for another Cisco certification?” First of all, because there is good potential for increased salary levels. Even though companies are currently experiencing economic downturns in most sectors, the demand for specialized IT professionals will be still be very strong in the coming years. Also, almost 70% of customers surveyed expect to have a dedicated voice technologies specialist in their organization within five years.

In addition, recent salary surveys have indicated that those people with professional-level Cisco Voice certification beyond the CCNA resulted in a 23 percent higher salary. Are you ready for some different challenges? Projections for new job roles available for individuals who obtain a CCNA Voice certification include:

  • Voice Administrators
  • Voice Technicians
  • Voice Engineers

To attain the new CCNA Voice certification, there are two paths you can follow:
Option 1 – Pass the following three exams:
1) Interconnecting Cisco Networking Devices (640-822 ICND1)
2) Interconnecting Cisco Networking Devices (640-816 ICND2)
3) Implementing Internet Unified Communications (640-406 IIUC)

Option 2 – Pass the following two exams:
1) Cisco Certified Network Associate (640-802 CCNA)
2) Implementing Internet Unified Communications (640-406 IIUC)

Voice technology is becoming more and more integrated into today’s networks, and network professionals who have knowledge of and certification in Voice will have a major advantage over those who do not. That’s what the new CCNA Voice certification is all about!

Author: David Stahl

add to del.icio.us add to furl Digg it Stumble It! post to facebook post to technorati

Editor’s Note: If you are interested in pursuing this certification, Global Knowledge offers training courses for each of the exams required:

Next Page »