At CCMA, Realworld Projects, a lecture you've been waiting for, especially, first of all, to be
fair, it is beyond Shishani.
It is SCMP topic.
However, I will try to make it as simple as possible.
There are a lot of things you can achieve if you go for IPPs ally, but what I want to show you is something
that I use, especially for.
Let me just grab something I can.
Joel with.
ERPs.
Let's go back to my existing topology, because it will be exactly the same in the new one.
You have two links to the Internet, primarily Link, and this is your backup link.
What do you want to do?
You want to browse the Internet.
So imagine that you're out.
You are over here.
You want to browse the Internet using this route.
OK.
What will happen if this link goes down, this firewall has absolutely no idea that this link is down.
What you want to do, you want to use IP, SLA to be proactive, I use IPSI to ping the Internet.
I ask my core router, the router.
Can you be so nice and ping the Internet using this PAF, I ping I think eight eight four four eight
eight eight eight eight eight eight eight eight.
I ping it every twenty five seconds.
Yeah, if something goes wrong with this primary root, my core router says, OK, I am not able to
reach eight eight eight eight.
It means it indicates that there is a problem with this route and I should stop using it.
I should start using my dear friend caller two because it has got a route to the Internet that I could
use.
When when coal one discovers that eight eight eight eight is unavailable, it will change its default
route.
It will stop pointing to Cybercom.
It will start using Zeisel.
And that's what cell is used for in my network.
It's not complicated, it's pretty easy to set up.
I show you what I've done.
And what's more, I show you how we can test it.
I think we'll have to tweak it a little to make it happen.
But that should be OK.
I would type show Ron to show it to you because it is much easier.
You have to get used to it when you have.
A pair of switches, you have a lot of ports.
Hey, we got.
I have cells that says, can you be so nice and paying eight, eight, four, four?
And I want to over test.
That's why I have to change this IP address.
Let's do it now.
I'm pretty sure it will not allow us to do that.
But we yeah, we have to stop it because this this process is running in the background at the moment.
So we have to stop it.
Stop it.
I want to paint something else.
Do not worry, I will show you why in a moment, because we need that for a fight over tests.
I want to ping.
IP as well, I, I think it removed everything right.
Nuh uh.
Exit.
IPSC like to.
S. IPSC, there is no S. command.
So annoying began.
Yeah, I think it removed.
OK, that's fine, it's just.
It's copying.
Change it to Florida, to the to the to.
No IP as I like to, and now I can post hoc.
Now it's up, OK?
All I did, I changed the IP address, if that was too fast.
Well, that is beyond CESI and that's why I, I try to show you what this solution is all about.
I will not talk about that in details, but that should be more than enough for you to to figure out
what what I mean.
OK, now it's up.
That's good.
Now to verify your type show especially.
Statistics, let me show you the number of successes and failures.
Yeah, please note to and code is OK, it means I can reach this network.
When you type show ipsa like config, you will see.
What I have set up so far, it means I want to paying for door to door to door to door, I paying it
every 25 seconds.
There are some additional tools for statistics.
We can ignore it for now.
I know it is working because I will see like three here.
Yeah.
Now you all go, OK, what does it mean?
OK, you're paying the internet.
So us huh.
When I type show, Ron include IP route, you would actually see two static routes, but only one will
be active.
The first one, that's what we are using at the moment here that goes through Sibir on this one.
Has got an additional option in a track, too.
It means it tells the switch, the switch.
Can you be so nice and check if I cannot ping eight or for to the to the to do not use this route anymore,
start using the second one, the backup route.
And that's why the distance is different here.
Because you cannot you I don't want to load balance.
I want you to have a failover scenario here.
Yeah.
So this IOPS salay object has been applied.
It means that if.
The status changes to down this road will be removed and it means the second one will kick in.
That makes sense.
Hope so.
OK, you can see seven, that's fine.
You can ask, OK, how can we test it?
What I will do, the easiest way, of course, would be to disconnect the cable, but it means I would
bring the whole network down.
I don't want to do that.
So what I will do are on the A.S.A. firewall, I will create a roar and say, dear A.S.A., we just
change the size.
Can you be so nice and block, I will create an axis list.
Can you be so nice and block access from 170 to 16 to 215 zero going to.
For that to the doctor, yeah.
And as far as this.
Switch is concerned it can not paying for door to door to the two, it means while the Internet is down,
the Internet is down and it should start using Zeisel.
When I type, show type approach, I will see 172, 16 dot one dot to five four, which is Cybele.
It is a valid route because I can paying for door to door to door to what?
At work.