I'm from Linux world. In Linux I've been doing firewalls, QoS, dynamic routing, tunnels, ipsec, ipv6 and even written custom networking extensions to kernel.
And now I got some Cisco 681 under my control. I understand the basics but I'm constantly hitting some problems, like:
- it's hard to debug (where is tcpdump?!)
- it's easy to hang/crash the thing (especially when debugging)
- I'd need some pracitcal advices on how to manage the thing (copying running-config via scp and back fails ...)
- most of the documentation I'm finding is IMHO corporate crap (to many words, to less information)
I've been googlin' around and reading things, but still I fell very unskilled when dealing with the thing.
For example I'm trying to add a simple class-based QoS for a working configuration of one of the routers.
I've prepared a simple config:
no ip access-list extended RT_PROTOCOLS ip access-list extended RT_PROTOCOLS permit icmp any any permit udp any any eq 53 permit tcp any any eq 22 ! no ip access-list extended HIGH_PROTOCOLS ip access-list extended HIGH_PROTOCOLS permit tcp any any eq 80 permit tcp any any eq 443 ! class-map match-any RT_CLASS match access-group name RT_PROTOCOLS class-map match-any HIGH_CLASS match access-group name HIGH_PROTOCOLS ! policy-map INTERNET_OUT_POLICY class RT_CLASS bandwidth percent 10 random-detect class HIGH_CLASS bandwidth percent 40 random-detect class class-default fair-queue bandwidth percent 40 random-detect ! policy-map INTERNET_OUT_QOS class class-default shape average 8000 service-policy INTERNET_OUT_POLICY ! interface FastEthernet4 no fair-queue service-policy output INTERNET_OUT_QOS !
and I'm copying it via
copy scp://source running-config. The router immediately causes high ping and after around 20 seconds hangs completely.
How do I debug what is wrong?
Any links, docs, advices and tips will be appreciated.