My Posts

Cisco QOS for SSH preference

Thanks to Saku Ytti, I have a little config snippet that will enable low delay QoS for Cisco 877W (with Advanced IP services) (Your mileage may vary on other Cisco's). It guarantees bandwidth on packets with a max of 200 bytes. This includes interactive SSH, icmp, VOIP and most games.

class-map match-any LOW-DELAY
match packet length max 200
!
policy-map EGRESS
class LOW-DELAY
priority percent 75
class class-default
fair-queue
random-detect
!
interface ATM0
pvc 0/35
vbr-nrt 800 800
tx-ring-limit 3
service-policy output EGRESS
!

Make vbr-nrt to match your current DSL upstream speed or lower. As you want it to prioritize as soon as possible! This QoS implementation will NOT limit your upstream. This is different to other implementations like the Linux LARTC Wondershaper implementation.

---{}---

Phoebe: Signing off!

As some of you might know, phoebe is the oldest computer I have been running here.

It began all in 98 when the machine hercules was born. It was a debian install and moved along with me using apt-get dist-upgrade :) When the big name change occured it went from hercules to phoebe. It ran as an NFS fileserver, mail and primary shell server for years. Until recently I bought dropkick and moved mail and primary shell to this machine, because it was colocated, had raid and a lot more performance. Phoebe only was being used as an NFS fileserver for only 1 other machine, my workstation. It had another task as a print server. As the printer that's with phoebe is Kuess's printer and she will move out very soon it will be gone. So this task of phoebe will no longer exist. As the NFS fileserving was only for one other machine it was pretty meaningless to let it do this task.

 At the moment I'm moving all data to an USB2 disk and moving the physical /home drive to paige. I know have quite a bunch of disks left I can use in paige.

Phoebe will be signing off at around 22:00 if all goes well. See you phoebe!

---{}---

Cisco 877W Configuration

As promised in my last post I promised to put some configuration online for WIFI configuration on a 877W. But first, I experienced some problems getting VLANs working on the Ethernet ports. It seems you need an Advanced IP Services IOS for this and NOT the default Advanced Security Services IOS. Remember to get 12.4(4)T2 if you want ADSL2+ support!

The relevent WIFI config snippets:

interface Dot11Radio0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
!
broadcast-key vlan 10 change 45
!
!
encryption vlan 10 key 1 size 128bit 7 F47A5A746A5EAF7F174B2C13A145 transmit-key
encryption vlan 10 mode wep mandatory
!
ssid gs19-cisco
vlan 10
authentication open
guest-mode
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
rts threshold 2312
channel 2422
station-role root
!
interface Dot11Radio0.10
description Cisco Closed
encapsulation dot1Q 10
ip address 62.133.205.129 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
no snmp trap link-status
!
This code snippet contains WEP encryption and a SSID broadcast on the gs19-cisco SSID. It's running DHCP on this interface but that's out of the scope of this post.

---{}---

New DSL router/wifi

I just got myself a new DSL router with wifi. It's an Cisco 877W and it features a built-in 4 port manageable switch, VLAN support, WIFI with up to 10 SSIDs, ADSL2+ and so on... Migrating from my current Cisco 837 was easy. Just tftp the config from the 837 to a machine. Edit 'ethernet0' so that it reads 'Vlan1' and you are set to go.

However getting WIFI running on this router is a little more work. Currently it's not working yet in my setup. Clients can associate with the router and even get DHCP, but that's all, not traffic exchange is possible. I'll get this issue fixed this weekend and I'll get back to you :)

---{}---