Securing OSPFv2

glitchlist Blog Leave a Comment

OSPF is a king routing protocol that speaks on Multicast addresses 224.0.0.5 and 224.0.0.6. Once the neighborhood relationship is installed and LSAs are exchanged, the SPF algorithm starts running. If the new OSPF peer is a malicious router it can cause a lot of damage to your routing table such as: Network congestions Dos attacks Loops LSA flooding and why …

ip route-static

glitchlist Blog Leave a Comment

In Huawei, there are some options to make a static route less static and more dynamic! Now, you can bind a static IP route on certain events that happen in your network. Events can be triggered by: BFD session EFM state NQA An example could be forward a network on a Core Router without using a routing protocol: .glitchlist crew

runts, giants and throttles

glitchlist Blog Leave a Comment

show interface is maybe the most famous command that is entered when we start troubleshooting.Interpreting the output of this command is like reading the results of the blood analysis, some results are easy to understand, while others are very cryptic but very useful to take us to another level of troubleshooting! Let’s see runts, giants an throttles: RUNTS are frames …

Huawei S5700 Parity Check Error

glitchlist Blog Leave a Comment

If you find this warning in your switches S5700: According to Huawei: This is a soft error with a low probability. The device is not physically damaged and no hardware failure occurs. In the logs we found that single bit destoryed chip table was repaired by the software, but many “parity logs” also record. In the end the solution was to replace …

HUAWEI – enable IGMP-snooping

glitchlist Blog Leave a Comment

igmp-snooping is not a protocol but a feature that switches have to control multicast traffic. In a broadcast domain, multicast is flooded on all ports so the snooping mechanism listen for an IGMP client and send multicast traffic only on the necessary ports in the multicast forwarding table. Troubleshooting commands: .glitchlist crew

OSPF silent-interface

glitchlist Blog Leave a Comment

When you want to interconnect 2 OSPF processes in static mode for design requirements or just temporary in a migration scenario you have to instruct routers to not receive routing update information and to not advertize networks to another router. By default when you start an OSPF process all interfaces of the router send Hello packets to discovery neighborships. To …

Huawei AP5030DN Fit to Fat

glitchlist Blog Leave a Comment

Huawei APs are “Fit” Access Points by default. It means AP Controller is needed to work. If you want to install a single AP and you don’t need an AP Controller you must convert/change firmware of the AP. Easy step-by-step: Login on Huawei Enterprise Support and Download AP-FAT firmware Login on AP console port system-view ap-mode-switch prepare ap-mode-switch check ap-mode-switch …