Posts on ittechnetworkk

vPC on Cisco Nexus 9000

Wed, 08 Apr 2026 10:00:00 +0200

What is vPC?

Virtual Port Channel (vPC) lets two Nexus switches appear as a single logical switch to downstream devices. Connected hosts or switches see one port-channel spanning both peers — if one peer fails, traffic continues through the other with no STP reconvergence.

Key components:

vPC Peer Link — carries BPDUs, HSRP, control traffic, and orphan port traffic between the two peers. Always a port-channel with at least two 10G/40G/100G members
vPC Peer Keepalive — a lightweight heartbeat (UDP 3200) used only to detect a dual-active (split-brain) scenario. Runs over a dedicated port-channel in a separate VRF — keeping it off the management plane for security and redundancy
vPC Member Ports — port-channels on each peer that share a common vpc ID, forming a single logical channel to the downstream device
vPC Domain — the logical grouping that binds the two peers together

Topology

            ┌──────────┐       ┌──────────┐
            │  NEXUS-1 │       │  NEXUS-2 │
            │ (vPC Pri)│       │ (vPC Sec)│
            └──┬──┬──┬─┘       └─┬──┬──┬──┘
               │  │  │           │  │  │
    Keepalive──│──│──│───────────│──│──│──Keepalive
   (Po20/VRF)  │  │  │           │  │  │ (Po20/VRF)
               │  │  └───────────┘  │  │
               │  │   Peer Link     │  │
               │  │  (Po10: 2x40G)  │  │
               │  │                 │  │
               │  └────────┬────────┘  │
               │      vPC Member       │
               │     (Po100: 2x10G)    │
               │           │           │
               │      ┌────┴────┐      │
               │      │ SERVER  │      │
               └──────┤ / ToR   ├──────┘
                      └─────────┘

Addressing Reference

Device	Interface	IP Address	Purpose
NEXUS-1	Po20 (VRF VPC-KA)	10.10.10.1/30	Peer Keepalive
NEXUS-2	Po20 (VRF VPC-KA)	10.10.10.2/30	Peer Keepalive
NEXUS-1	Vlan100	172.16.100.2/24	HSRP VIP gateway
NEXUS-2	Vlan100	172.16.100.3/24	HSRP VIP gateway
HSRP VIP	—	172.16.100.1/24	Default gateway

Configuration

We’ll build this in order — each step depends on the previous one.

MPLS L3VPN Lab

Wed, 01 Apr 2026 12:48:42 +0200

Overview

This lab builds a full MPLS L3VPN service across an ISP core (AS 35500) with OSPF Area 0 as the IGP, LDP for label distribution, and MP-BGP (VPNv4) for customer route exchange. Two VPNs — RED (AS 25942) and BLUE (AS 48273) — carry overlapping address space through the same physical infrastructure, demonstrating VRF isolation.

Key design choices:

P1 and P4 act as BGP Route Reflectors — PEs only peer with these two, no full-mesh iBGP required
as-override on all PE-CE peerings since both RED CEs share an AS and both BLUE CEs share an AS
OSPF point-to-point network type on all /30 core links (skips DR/BDR election)
All BGP loopback peerings use update-source Loopback0

Here is the topology:

DMVPN Phase 3 Dual Hub with IPSec Lab

Wed, 01 Apr 2026 08:00:00 +0000

Hi everyone, in this lab I’ll walk you through how to configure a Dual Hub DMVPN Phase3 - IPSec topology.

OSPF Route Filtering

Mon, 16 Feb 2026 11:22:31 +0100

Hi everyone, in this article I will walk you through how to configure OSPF Route Filtering through a lab in the exhibit.

Wireshark Filters

Mon, 16 Feb 2026 11:10:21 +0100

ICMP Request and Reply

Wazuh ClamAV Monitoring

Tue, 20 Jan 2026 10:58:28 +0100

This guide will walk you through setting up ClamAV antivirus integrating it with Wazuh for centralized security monitoring. This setup enables automatic malware detection, detailed logging through the Wazuh security platform.

Velociraptor Installation

Mon, 05 Jan 2026 10:46:36 +0100

Velociraptor is a powerful digital forensics and incident response (DFIR) platform that allows security teams to collect, monitor, and hunt across endpoints. This guide will walk you through installing both the Velociraptor server and client components.

A Honeypot Research

Sun, 16 Nov 2025 21:30:48 +0100

Hi everyone! In this article, I would like to share my latest research about a script I’ve recently observed on my honeypot project.

Beelzebub Dashboard

Tue, 11 Nov 2025 17:22:34 +0100

Hi everyone, in this article I would like to introduce you to my new project about visualizing Beelzebub logs, which is an AI-supported open-source honeypot solution that I modified slightly to achieve higher efficiency.

Wazuh Fail2ban Integration

Fri, 07 Nov 2025 17:17:44 +0100

Hi everyone! In this article I’ll walk you through installing and configuring Fail2Ban and then show you how to integrate it with Wazuh.

Wazuh Auditd Integration

Fri, 07 Nov 2025 17:11:11 +0100

Hi everyone! In this article I’ll walk you through installing Auditd on a Linux system and integrating it with Wazuh.

Wazuh Suricata Integration

Fri, 07 Nov 2025 17:06:01 +0100

Hi everyone! In this article I will walk you through installing Suricata on Ubuntu 24.04 and integrating its logs with Wazuh for centralized monitoring.

Wazuh File Integrity Monitoring (FIM)

Fri, 07 Nov 2025 16:59:49 +0100

Hi everyone, in this article I’ll introduce you to Wazuh’s File Integrity Monitoring feature.

A Honeypot Story

Wed, 29 Oct 2025 10:36:54 +0100

Hi everyone. In this article, I’ll walk you through my research on an AI-powered honeypot project that I deployed in the cloud to observe various attacker Tactic and Technics.

Splunk Installation

Thu, 02 Oct 2025 23:09:17 +0200

Hi everyone, in this article I will guide you how to install Splunk Enterprise on Linux server and Universal Forwarder on Ubuntu Client.

Proxmox NAT Configuration

Thu, 02 Oct 2025 23:03:30 +0200

Hi everyone!

Vmware to Proxmox Migration Automatically

Thu, 02 Oct 2025 22:50:18 +0200

Hi everyone, in this article I will discuss the second way of migration from VMware to Proxmox.

Understanding YARA Rules

Sun, 31 Aug 2025 04:14:34 +0200

Hi everyone! In this article, I’d like to introduce you to YARA rules, which are powerful detection rules widely used in cybersecurity to identify malware and other suspicious patterns.

Windows Logon Types

Sun, 31 Aug 2025 04:04:25 +0200

Hi everyone,

Remove a Client on Wazuh Server

Sun, 31 Aug 2025 03:53:01 +0200

Hi everyone,

DHCP Server Installation On Windows Server 2022

Sun, 31 Aug 2025 03:37:10 +0200

Hi everyone,

Security Operation Center Setup

Sun, 17 Aug 2025 15:38:38 +0200

Hi everyone! In this article, I will take you through my Security Operation Center environment on Hetzner, which is a German company that provides web hosting services and data centers.

Wazuh Sysmon Integration

Tue, 12 Aug 2025 00:33:51 +0200

Hi everyone, in this article I will guide you how to integrate Sysmon and Wazuh SIEM tool.

Fortigate Wazuh Integration

Sat, 19 Jul 2025 15:26:52 +0200

Hi everyone, in this article I will guide you through how to integrate Fortigate firewall with the Wazuh SIEM tool for centralized logging and monitoring.

Cisco Device Syslog Integration with Wazuh SIEM

Sat, 19 Jul 2025 14:50:44 +0200

Hi everyone, in this article I will guide you through how to integrate Cisco devices (switches and routers) with the Wazuh SIEM tool for centralized logging and monitoring.

Network Time Protocol (NTP)

Tue, 13 May 2025 21:23:07 +0200

In modern networks, accurate time synchronization is crucial for tasks such as logging, authentication, and system coordination. Network Time Protocol (NTP) is a widely used protocol that allows devices on a network to synchronize their clocks with a reliable time source. This guide will walk you through the configuration of NTP on Cisco devices, including manual time setup, using a device as an NTP server, authentication, and debugging.

Network Address Translation (NAT)

Tue, 13 May 2025 21:08:38 +0200

Hi everyone,

Vmware to Proxmox Migration

Sat, 19 Apr 2025 23:09:46 +0200

Hi everyone, in this article I will show you two methods for migrating virtual machines from VMware to Proxmox.

Proxmox Live Migration

Sat, 19 Apr 2025 23:08:02 +0200

Hi everyone, in this article I will show you how to migrate virtual machines between nodes where in the cluster.

Proxmox LACP

Sat, 19 Apr 2025 23:05:27 +0200

Hi everyone, in this article I will show you how to configure LACP between Proxmox and a L2 Cisco Switch.

Proxmox Cluster Creation

Sat, 19 Apr 2025 22:59:48 +0200

Hi everyone, in this article I will show you how to create Proxmox Cluster and how a node joins to the cluster.

Dynamic Trunking Protocol (DTP)

Wed, 02 Apr 2025 22:02:02 +0200

Hi everyone, in this article, I will explain what DTP is and how it works.

Junos Dynamic Routing

Wed, 02 Apr 2025 21:49:12 +0200

Hi everyone, in this article I will show you how to configure dynamic routing in Junos.

Junos Static Routing

Wed, 02 Apr 2025 21:46:23 +0200

In Junos devices static routing configuration will be done in the following way.

Junos User Accounts

Wed, 02 Apr 2025 21:40:28 +0200

In this article I will show you user accounts in Junos.

Junos Initial Configuration

Wed, 02 Apr 2025 21:05:37 +0200

Hi everyone, in this article I will cover on how to make initial configuration in Junos.

Active Directory Domain Controller Installation

Tue, 18 Mar 2025 11:14:26 +0100

Hi everyone, in this article I will show you how to install the Active Directory Domain Controller role on a Windows Server 2022.

ESXi Creating Virtual Machine

Tue, 18 Mar 2025 11:11:14 +0100

Hi everyone,

ESXi Initial Configuration

Tue, 18 Mar 2025 11:05:52 +0100

Hi everyone, in this article I will show you ESXi initial configuration and demonstrate how to install Windows Server 2022 as a virtual machine.

ESXi Installation

Sun, 09 Mar 2025 23:13:13 +0100

In this article I will show you how to install ESXi that a commonly used virtualization software in the industry providing lots of feature to solve issues that help IT guys quite a lot.

GRE Over IPSEC LAB

Fri, 21 Feb 2025 22:19:46 +0100

Hello everyone, in this LAB I will configure GRE over IPSec Tunnels with following topology.

GRE LAB

Fri, 21 Feb 2025 22:18:30 +0100

Hello everyone, in this LAB I will configure GRE Tunnels.

VRF-Lite Configuration

Fri, 21 Feb 2025 02:36:28 +0100

Hello everyone, in this LAB I will configure GRE Tunnels with following topology.

SSH Server Configuration

Sat, 08 Feb 2025 15:23:57 +0100

Hi everyone, in this article, I will show you how to configure an SSH server in detail.

NetworkManager Installation

Fri, 24 Jan 2025 21:46:46 +0100

Hi there, in this article, I will show you how to switch netplan to NetworkManager to manage network interfaces on Ubuntu.

DHCP Server Configuration

Thu, 23 Jan 2025 01:06:35 +0100

Hello there!

Linux Process Prioritization

Sat, 11 Jan 2025 05:03:17 +0100

In this article I am going to talk about Linux process Prioritization.