Costin's place

How to change NTP server on HP 3PAR 7200c

Wed, 16 Sep 2020 00:00:00 +0200

Recently I had to add more NTP servers to a HP 3PAR 7200c storage. Here’s how I did it:

3PAR_hostname cli% setnet ntp -add 10.90.221.13
NTP server successfully updated.

Show current NTP server(s):

3PAR_hostname cli% shownet
IP Address  Netmask/PrefixLen Nodes Active Speed Duplex AutoNeg Status
10.23.155.8   255.255.255.192    01      1  1000 Full   Yes     Active

Default route :                                     10.23.155.1
NTP server    :   {} 10.102.102.132 10.102.102.133 10.90.221.13
DNS server    :                                            None

Remove one NTP server:

3PAR_hostname cli% setnet ntp -remove 10.90.221.13
NTP server successfully updated.

3PAR_hostname cli% shownet
IP Address  Netmask/PrefixLen Nodes Active Speed Duplex AutoNeg Status
10.23.155.8   255.255.255.192    01      1  1000 Full   Yes     Active

Default route :                        10.23.155.1
NTP server    :   {} 10.102.102.132 10.102.102.133
DNS server    :                               None
3PAR_hostname cli%

#can’t add more than 1 server at a time:

m4sxhpst1P01 cli% setnet ntp -add 10.90.221.13 10.90.221.29 10.90.221.45
setnet: Incorrect number of arguments.

And the maximum ammount of severs is 4, in case you were asking:

3PAR_hostname cli% setnet ntp -add 10.90.221.61
Cannot configure more than 4 NTP servers.
3PAR_hostname cli% setnet ntp -remove 10.102.102.132
NTP server successfully updated.

That’s it! That simple. More info can be found in the original documentation: https://support.hpe.com/hpesc/public/docDisplay?docId=c03583615&docLocale=en_US

How to bypass Chrome error "Your connection is not private"

Tue, 30 Jun 2020 00:00:00 +0200

If you’re an IT professional that has to deal with old systems that have self-signed certificates you most probably had to add exceptions to your browser many times. Maybe even import those self-signed certificates locally.

Unfortunately when you’re working on a customer’s jump host this is not an option. And starting with more recent version of Chrome this is not possible anymore, you don’t have the option to Add it as an exception.

Luckily there’s a fix

All you have to do is press on Advanced tab and type thisisunsafe

You don’t have to type it in the URL field, just type it in the main window of Chrome. In some older versions of Chrome the safeword was badidea

This, of course, should be done only if you know what you’re doing, but if you reached this website I’m almost sure you do :)

Thanks @Răzvan for the tip.

How to quickly enable a low-resource webserver

Wed, 29 Apr 2020 00:00:00 +0200

Have you ever wanted to just start a Webserver in a second, for a quick and dirty task but didn’t want to install a full LAMP/LEMP stack? This is possible with the help of a python module and here it is in action:

costin@ubuntu:~$ mkdir testare
costin@ubuntu:~$ cd testare/
costin@ubuntu:~/testare$ echo MERGE! > index.html
costin@ubuntu:~/testare$ pushd $PWD; python3 -m http.server; popd
~/testare ~/testare
Serving HTTP on 0.0.0.0 port 8000 (http://0.0.0.0:8000/) ...
192.168.1.126 - - [29/Apr/2020 14:16:10] "GET / HTTP/1.1" 200 -
192.168.1.126 - - [29/Apr/2020 14:16:10] code 404, message File not found
192.168.1.126 - - [29/Apr/2020 14:16:10] "GET /favicon.ico HTTP/1.1" 404 -

root@ubuntu:~# curl http://192.168.1.94:8000/
MERGE!

Oh and this is cross-platform, of course. If you have python installed on a Windows machine.

Not to mention that this is possible even from low-priviledge user accounts.

For more details about this module please see the official documentation.

How to create a SSL profile when you don't know the key passphrase

Mon, 24 Feb 2020 00:00:00 +0100

On F5 BigIP LTM you can create a SSL profile even if you don’t know the private key passphrase

This workaround can be applied only if you’ve used the private key on the same F5 BigIP node already. In my case, I had to reuse the same cert+key from a server-ssl profile on a client-ssl profile. And because business was in a hurry and they didn’t have the private key anymore, I had to find alternative ways of making it work.

This can be achieavable by copying the config snippet from bigip.conf:

ltm profile server-ssl /Common/<name> {
    app-service none
    ca-file /Common/XXXXXXcertXXXXX.crt
    cert /Common/XXXXXXcertXXXXX.crt
    cert-key-chain {
        XXXXXXkeyXXXXX_privkey {
            cert /Common/XXXXXXcertXXXXX.crt
            key /Common/XXXXXXkeyXXXXX_privkey.key
            passphrase <random hash value>
        }
    }
    chain none
    defaults-from /Common/serverssl
    inherit-certkeychain false
    key /Common/XXXXXXkeyXXXXX_privkey.key
    passphrase <different hash value>
    peer-cert-mode require
}

And re-added in bigip.conf as a client-ssl profile.

ltm profile client-ssl /Common/<name> {
    app-service none
    ca-file /Common/XXXXXXcertXXXXX.crt
    cert /Common/XXXXXXcertXXXXX.crt
    cert-key-chain {
        XXXXXXkeyXXXXX_privkey {
            cert /Common/XXXXXXcertXXXXX.crt
            key /Common/XXXXXXkeyXXXXX_privkey.key
            passphrase <random hash value>
        }
    }
    chain none
    defaults-from /Common/clientssl
    inherit-certkeychain false
    key /Common/XXXXXXkeyXXXXX_privkey.key
    passphrase <different hash value>
    peer-cert-mode require
}

then verify the config: tmsh load sys config verify. If you don’t get errors just drop the verify part in order to load the new config: tmsh load sys config These commands work only from linux shell, if you’re already in tmsh just ignore the tmsh part of the command.

And that’s it. Make sure to have the same passphrase and to do this on the Standby node. If everything is ok and you see the change in the config, just sync it to the Active peer node. I’ve tried to add the lines to a new file and just merge the config but it didn’t work as it couldn’t get the passphrase to read the key. This was the only option I could find. Good luck!

How to fix do-agent exited with a return code 100

Sun, 16 Feb 2020 00:00:00 +0100

So recently I’ve encountered the error in the subject. This came after 2 major changes (OS upgrade and PHP upgrade). So definitely it had to do with one of them. My money were on the first one. I’ve looked around on the internet and the only thing I could see was this old article that had no solution: https://www.digitalocean.com/community/questions/do-agent-exited-with-a-return-code-100

So I knew I had to take the matters in my own hands. I’ve started by looking at that cron entry that was failing. run-parts: /etc/cron.daily/do-agent exited with return code 100

The cron itself was pretty simple, just a bash script.

root@server:/etc/logrotate.d# cat /etc/cron.daily/do-agent
#!/bin/sh
/bin/bash /opt/digitalocean/do-agent/scripts/update.sh >/dev/null 2>&1

The update.sh script is also very simple:

root@server:/etc/logrotate.d# cat /opt/digitalocean/do-agent/scripts/update.sh
#!/bin/bash
# vim: noexpandtab

main() {
        # add some jitter to prevent overloading the packaging machines
        sleep $(( RANDOM % 900 ))

        export DEBIAN_FRONTEND="noninteractive"
        if command -v apt-get 2&>/dev/null; then
                apt-get -qq update -o Dir::Etc::SourceParts=/dev/null -o APT::Get::List-Cleanup=no -o Dir::Etc::SourceList="sources.list.d/digitalocean-agent.list"
                apt-get -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" -qq install -y --only-upgrade do-agent
        elif command -v yum 2&>/dev/null; then
                yum -q -y --disablerepo="*" --enablerepo="digitalocean-agent" makecache
                yum -q -y update do-agent
        fi
}

main
root@server:/etc/logrotate.d#

I’ve ran the command manually and after a long (timeout?) period it exited with status code 100. So just like in my emails.

I went further on with my troubleshooting and added debug to bash and removed the redirect to /dev/null part. And this time I’ve noticed that there was no timeout, but just a random sleep that’s at the beginning of update.sh

root@server:/etc/apt/sources.list.d# time /bin/bash -x /opt/digitalocean/do-agent/scripts/update.sh
+ main
+ sleep 650

If you don’t want to wait 650 seconds then you can stop and start it again, hoping to get a shorter number, or just comment that part in the script. But I didn’t want to alter the script, just to fix it. So I chose to stop and re-start it till I get a shorter sleep timer.

root@server:/etc/apt/sources.list.d# time /bin/bash -x /opt/digitalocean/do-agent/scripts/update.sh
+ main
+ sleep 812
^C

real    0m1.218s
user    0m0.004s
sys     0m0.000s

root@server:/etc/apt/sources.list.d# time /bin/bash -x /opt/digitalocean/do-agent/scripts/update.sh
+ main
+ sleep 13
+ export DEBIAN_FRONTEND=noninteractive
+ DEBIAN_FRONTEND=noninteractive
+ command -v apt-get 2
+ apt-get -qq update -o Dir::Etc::SourceParts=/dev/null -o APT::Get::List-Cleanup=no -o Dir::Etc::SourceList=sources.list.d/digitalocean-agent.list
+ apt-get -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold -qq install -y --only-upgrade do-agent
Setting up apache2 (2.4.29-1ubuntu4.11) ...
ERROR: Module reqtimeout does not exist!
dpkg: error processing package apache2 (--configure):
 installed apache2 package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 apache2
E: Sub-process /usr/bin/dpkg returned an error code (1)

real    0m22.398s
user    0m8.120s
sys     0m0.876s
root@server:/etc/apt/sources.list.d# echo $?
100

Now I have it :) It seems that the update script fails due to some apache2 module missing. And this is normal, because I don’t have apache on my server.

So to fix it I just had to remove all apache-related packages from the machine. Which were installed by the latest PHP upgrade. So it wasn’t due to OS upgrade like I first suspected :)

root@server:~# apt-get purge apache2*
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'apache2-ssl-dev' for glob 'apache2*'
Note, selecting 'apache2.2-common' for glob 'apache2*'
Note, selecting 'apache2-suexec-pristine' for glob 'apache2*'
Note, selecting 'apache2-api-20120211' for glob 'apache2*'
Note, selecting 'apache2-data' for glob 'apache2*'
Note, selecting 'apache2-api-20120211-openssl1.1' for glob 'apache2*'
Note, selecting 'apache2-suexec' for glob 'apache2*'
Note, selecting 'apache2-bin' for glob 'apache2*'
Note, selecting 'apache2.2-bin' for glob 'apache2*'
Note, selecting 'apache2-dbg' for glob 'apache2*'
Note, selecting 'apache2-dev' for glob 'apache2*'
Note, selecting 'apache2-doc' for glob 'apache2*'
Note, selecting 'apache2-suexec-custom' for glob 'apache2*'
Note, selecting 'apache2' for glob 'apache2*'
Note, selecting 'apache2-utils' for glob 'apache2*'
Note, selecting 'apache2-mpm-itk' for glob 'apache2*'
Package 'apache2.2-bin' is not installed, so not removed
Package 'apache2.2-common' is not installed, so not removed
Note, selecting 'apache2-bin' instead of 'apache2-api-20120211'
Note, selecting 'apache2-bin' instead of 'apache2-api-20120211-openssl1.1'
Package 'apache2-mpm-itk' is not installed, so not removed
Package 'apache2-dbg' is not installed, so not removed
Package 'apache2-dev' is not installed, so not removed
Package 'apache2-doc' is not installed, so not removed
Package 'apache2-ssl-dev' is not installed, so not removed
Package 'apache2-suexec-custom' is not installed, so not removed
Package 'apache2-suexec-pristine' is not installed, so not removed

This time the script ended successfuly with status code 0.

root@server:~# time /bin/bash -x /opt/digitalocean/do-agent/scripts/update.sh
+ main
+ sleep 61
+ export DEBIAN_FRONTEND=noninteractive
+ DEBIAN_FRONTEND=noninteractive
+ command -v apt-get 2
+ apt-get -qq update -o Dir::Etc::SourceParts=/dev/null -o APT::Get::List-Cleanup=no -o Dir::Etc::SourceList=sources.list.d/digitalocean-agent.list
+ apt-get -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold -qq install -y --only-upgrade do-agent

real    1m6.107s
user    0m4.184s
sys     0m0.552s
root@server:~# echo $?
0

Your error might be related to something else, but anyhow, in case you run into this sort of issues I hope this helps you speed-up the troubleshooting phase.

How to CTRL+ALT+DEL in RDP

Tue, 22 May 2018 00:00:00 +0200

ctrl+alt+end

How to fix Microsoft Lync/Outlook has stopped working

Tue, 15 May 2018 00:00:00 +0200

Recently I had this issue that ate a big part of my day. Here’s how I fixed it.

Firstly, some background info

I’m using a Win 10 (Version 10.0.14393) OS with Office 2013 [15.0.4569.1503]. The previous day I’ve been prompted to restart my laptop to complete the new updates. I’ve left in a hurry and just closed the lid. The laptop didn’t close and I had to use the power button to stop it. I knew I was in trouble at this point, but had to attend a meeting and didn’t have time to wait for the updates.

The following morning Microsoft Outlook greeted me with the message in the picture. And so did Skype for Business.

Faulting application name: OUTLOOK.EXE, version: 15.0.5023.1000, time stamp: 0x5aa78315
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0xc0000005
Fault offset: 0x000173a5
Faulting process id: 0x2f94
Faulting application start time: 0x01d3ece4824e69d2
Faulting application path: C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE
Faulting module path: C:\windows\SYSTEM32\MSVCR100.dll
Report Id: 2ed214cc-58d8-11e8-822d-b4b676a83afd
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: lync.exe, version: 15.0.5023.1000, time stamp: 0x5aa7802d
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0xc0000005
Fault offset: 0x000173a5
Faulting process id: 0x1c78
Faulting application start time: 0x01d3ece617a52df9
Faulting application path: C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
Faulting module path: C:\windows\SYSTEM32\MSVCR100.dll
Report Id: 9a24552e-58d9-11e8-822e-b4b676a83afd
Faulting package full name: 
Faulting package-relative application ID: 

I’ve tried everything I could think of (check for updates on the system to continue what was left; remove the updates one by one; update again; do a system restore with a day before; do another system restore with 5 days earlier; reinstalled the office suite. NOTHING. Same error.

After a system restore, the faulty module changed, but the situation was the same. Event viewer displayed the following errors:

Faulting application name: OUTLOOK.EXE, version: 15.0.4569.1503, time stamp: 0x52b0b282
Faulting module name: KERNELBASE.dll, version: 10.0.14393.2189, time stamp: 0x5abda7d6
Exception code: 0x80000003
Fault offset: 0x00154922
Faulting process id: 0x11ec
Faulting application start time: 0x01d3ed163b7e5cfc
Faulting application path: C:\PROGRA~2\MICROS~1\Office15\OUTLOOK.EXE
Faulting module path: C:\windows\System32\KERNELBASE.dll
Report Id: b3cacfd0-ea82-41d0-83b2-1955e51d6a53
Faulting package full name: 
Faulting package-relative application ID: 

I’ve also ran a system scan to no avail.

C:\windows\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files and successfully repaired
them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.

Microsoft Community forum didn’t help much. But I’ve learned that you can start Outlook in safe mode (outlook /safe). And even though it didn’t connect to the server in the beginning, it did ran without the error. During one of the reboots of Outlook I’ve been prompted to create a new account (in safe mode), and when I recreated my profile, BANG, it worked! Now the problem that I had was that Lync was still not working. Same error message when starting.

THE FIX

The fix was to simply rename/delete the .ost file for my profile (you can find it in C:\Users\/\AppData\Local\Microsoft\Outlook\/<youremailaddress@domain>.ost

That was it. I hope this helps in case you run into this.

Networking training materials

Mon, 11 Dec 2017 00:00:00 +0100

I’ve stumbled upon this great list of materials you can use to get started on IT, and Networking in particular. I have to admit that some are new for me, even after being in this field for over 12 years.

2018-01-03 note, I’ve update the list with more resources


/r/ITCareerQuestions Wiki
/r/CSCareerQuestions Wiki
/r/Sysadmin Wiki
/r/Networking Wiki
/r/NetSec Wiki
/r/NetSecStudents Wiki

Certifications
IT Certification Road Map

Cisco Training & certification Info Center
Juniper Networks Certification Programs
Microsoft Learning Info Center
Red Hat Certification Info Center
VMware Certification Info Center

Microsoft

Microsoft Learning Portal - Powered by EdX
Microsoft Virtual Academy
Microsoft MSDN Product Evaluation Center – Free Downloads
Microsoft TechNet Product Evaluation Center – More Free Downloads
Microsoft Azure Cloud Services Free Trial Center
Microsoft Training Info Center
Microsoft Ignite Training Convention Video Center
Microsoft MSDN Video Training Portal

Cisco / Networking

Stanford University Free Intro to Networking Online Course
Cisco Learning Center - How to Study for CCNA for Free
Professor Messer’s CompTIA Network+ Training Videos
Cybrary Free CCNA Training Videos
Cisco VIRL - Virtual Router & Firewall Training Tool
GNS3 Vault - Free Practice & Training Labs for Cisco Equipment
Cisco Live Training Convention Video Portal - Free Registration Required
Cisco Design Zone - Best Practices
PacketBomb - WireShark Training Center
NetCraftsmen - Network Consultants Blog
PacketPushers News & Podcasts
IOSHints - Ivan Pepelnjak’s Blog/site
Cumulus Networks SDN Technical Videos
SDX Central - SDN Resources

Information/Computer/Network Security

SANS Reading Room
SANS Certifications
BlackHat Conferences @ YouTube
DEFCON Conferences @ YouTube
RSA Conference @ YouTube
Carnegie Mellon SoftEng Institute @ YouTube
CMU’s Plaid Parliament of Pwning Competitive Hacking Team Blog
Cybrary - Open Source Security Learning
Krebs on Security blog
Google’s Security Blog
US CERT - Computer Emergency Response Team blog
ISC^2 - CISSP - Certified Information Systems Security Professional

Linux Resources

Linux Foundation - Intro to Linux for Free
Linux Foundation - Online Course Catalog - some free some paid
DigitalOcean Linux Tutorials
Docker Self-Paced Training
USENIX Site Reliability Enginering Convention 2014 Presentations - Free
USENIX Site Reliability Enginering Convention 2015 Presentations - Free
USENIX Large Installation System Administration Conference 2014 Presentations - Free
USENIX Large Installation System Administration Conference 2015 Presentations - Free
PuppetConf Convention Videos 2014 - Free Registration Required
PuppetConf Convention Videos 2015 - Free Registration Required
ChefConf Convention Videos 2015
Ansible Video Resources - Including AnsibleFest Convention Videos
SaltStack Video Resources

VMware Resources

VMWorld Convention Session Playback
VMWare Hands-On-Labs Training Labs

The Best of Cisco Live

^(Cisco Live is Cisco’s annual Technology expo & training convention.)
^(All of these presentations are available for free here: http://www.ciscolive.com/online - Many with video presentations of the lectures.)

BRKARC-3001 - Cisco Integrated Services Router G2 - Architectural Overview and Use Cases (2013)
BRKARC-3001 - Cisco Integrated Services Router - Architectural Overview and Use Cases (2016)
BRKARC-2001 - Cisco ASR1000 Series Routers: System & Solution Architectures (2016)
BRKCRS-3147 - Advanced Troubleshooting of the ASR1K and ISR (IOS-XE) made easy (2016)
BRKARC-1009 - Cisco Catalyst 2960-X Series Switching Architecture (2016)
BRKARC-3438 - Cisco Catalyst 3850 and 3650 Series Switching Architecture (2016
BRKCRS-3146 - Troubleshooting Cisco Catalyst 3650 / 3850 Series Switches (2016)
BRKARC-3445 - Cisco Catalyst 4500E Switch Architecture (2016)
BRKCRS-3142 - Troubleshooting Cisco Catalyst 4500 Series Switches (2015)
BRKARC-3465 - Cisco Catalyst 6800 Switch Architectures (2016)
BRKCRS-3143 - Troubleshooting Cisco Catalyst 6500 / 6800 Series Switches (2015)
BRKARC-2222 - Cisco Nexus 9000 Architecture (2015)
BRKDCT-3101 - Nexus 9000 (Standalone) Architecture Brief and Troubleshooting (2016)

BRKCRS-1500 - Wired LAN Deployment Using the Cisco Validated Design for Campus (2016)
BRKCRS-2031 - Enterprise Campus Design: Multilayer Architectures and Design Principles (2016)
BRKCRS-2501 - Campus QoS Design-Simplified (2016)
Cisco Design Zone: Cisco Validated Designs for Campus Networks
Cisco Design Zone: Cisco Validated Designs for Branch Office Networks

BRKDCT-2218 - Data Center Design for the Midsize Enterprise (2016)
BRKSAN-2449 - Storage Area Network Extension Design and Operation (2015)
BRKSAN-2883 - Advanced Storage Area Network Design (2016)

Enjoy it! :)

Credits: VA_Network_Need via reddit.

Udemy offline

Tue, 05 Dec 2017 00:00:00 +0100

Here’s another cool and helpful thing I just discovered that might help you stranger of the internet.

Recently I joined a class on Udemy.com, and because I have other tasks at the moment and can’t dedicate 100% to it, I wanted to download the videos so I started looking for ways how to do it. The official answer is that they don’t have anything against it, but it depends on the instructors. In my case the option to download the video was not present, plus that I wanted to automate the process and not download the videos one by one.

So, first I read about garbage solutions, like installing bluestacks to emulate an Android environment and then install the Udemy app, from where you can enable offline videos that will save them locally. This solution required too many steps and the end result would have been a bunch of files in different folders with a generic filename like video.mp4; again, not optimal.

So the winning solution comes from youtube-dl. With it you can download videos from many sources, including Udemy, of course. Here’s the link on gist on how you should use it. Basically, you just need to provide it the url + your USER and PASS plus the CLASS NAME.

youtube-dl -u USER -p PASS -o "./%(playlist)s/%(chapter_number)s-%(chapter)s/%(autonumber)03d-%(title)s.%(ext)s" https://www.udemy.com/CLASS-NAME/learn/v4/content

After it finishes you’ll find a new folder in your current directory, called “CLASS-NAME” and a new directory for each section. Happy studying! :)

Disclaimer

I’m not supporting piracy. This method is intended only for personal use. And it works only for the courses that you already paid. It will not work if you don’t have an Udemy account and access to the course.

Quagga

Fri, 01 Dec 2017 00:00:00 +0100

After having some interviews where I’ve been asked about routing on linux solutions, I’ve decided to playaround with Quagga. As always, you can find all the info already on the internet. And in my case Brian Kletter had all the necessary info to setup the environment. Here’s the link on how to setup a linux server with quagga software. And here the initial setup for quagga.

For this lab I’ve decided to get familiar with the syntax first and capabilities and then to test a quick ospf scenario.

After setting it up it looks like this:

quagga# sh ip ospf interface ens3
ens3 is up
  ifindex 2, MTU 1500 bytes, BW 0 Kbit <UP,BROADCAST,RUNNING,MULTICAST>
  Internet Address 192.168.1.254/24, Broadcast 192.168.1.255, Area 0.0.0.0
  MTU mismatch detection:enabled
  Router ID 192.168.1.254, Network Type POINTOPOINT, Cost: 10
  Transmit Delay is 1 sec, State Point-To-Point, Priority 1
  No designated router on this network
  No backup designated router on this network
  Multicast group memberships: OSPFAllRouters
  Timer intervals configured, Hello 10s, Dead 40s, Wait 40s, Retransmit 5
    Hello due in 5.011s
  Neighbor Count is 1, Adjacent neighbor count is 1
quagga# sh ip ospf nei

    Neighbor ID Pri State           Dead Time Address         Interface
   RXmtL RqstL DBsmL
3.3.3.3           1 Full/DROther      37.318s 192.168.1.1     ens3:192.168.1.254
       0     0     0

quagga# sh ip ro
Codes: K - kernel route, C - connected, S - static, R - RIP,
       O - OSPF, I - IS-IS, B - BGP, P - PIM, A - Babel,
       > - selected route, * - FIB route

O>* 3.3.3.3/32 [110/11] via 192.168.1.1, ens3, 00:07:28
O>* 10.10.23.0/24 [110/20] via 192.168.1.1, ens3, 00:07:28
C>* 127.0.0.0/8 is directly connected, lo
O   192.168.1.0/24 [110/10] is directly connected, ens3, 00:23:44
C>* 192.168.1.0/24 is directly connected, ens3
C>* 192.168.100.0/24 is directly connected, lo
O>* 192.168.100.1/32 [110/10] is directly connected, lo, 00:01:19

R3#sh ip ro ospf
...
      192.168.100.0/32 is subnetted, 1 subnets
O IA     192.168.100.1 [110/20] via 192.168.1.254, 00:00:42, Ethernet0/0

Also, a really good tutorial can be found here. As a final note I think that this is not that hard to configure if you have some basic unix knowledge, and I’m pleasantly surprised to see that ctrl+z has the same behaviour like on Cisco devices and it doesn’t stops the vtysh process, like a normal shell would do :)

Today is Romania’s National Day, so happy aniversary to all my Romanian folks wherever they may be now.