Cisco and Server | AI
2.53K subscribers
1.47K photos
322 videos
204 files
932 links
Tarmoq administratorligi (Cisco) va Tizim administratorligi (Server)ni biz bilan o'rganing.
Bularning hammasi @cisco_server kanalida...
Adminlar bilan bog'lanish uchun ๐Ÿ‘‰
Serverlar bo'yicha: @uzbekiston_erkatoyi
Cisco bo'yicha: @ciscoucell va @Dream_0044
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ3๐Ÿ‘2
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ2
This media is not supported in your browser
VIEW IN TELEGRAM
โค2๐Ÿ‘2
๐Ÿ… 8 ta kursni tugatdingizmi? Endi bilimingizni isbotlash vaqti!

Siz kiberlandshaft, tahdidlar, Splunk va SOC operatsiyalarini o'rgandingiz. Endi rasmiy raqamli badge olish uchun bir qadam qoldi!
Cybersecurity Defense Analyst Pathway Imtihoni โ€” ochiq! ๐Ÿ‘‡

๐Ÿ“ Imtihonda nima tekshiriladi?
โœ… Kiber landshaft, umumiy freymvorklar va standartlar
โœ… Tahdid va hujum turlari, raqib motivlari, TTPlar
โœ… Tahdid razvedkasining darajalari
โœ… SIEM eng yaxshi amaliyotlari va Splunk ES operatsiyalari
โœ… CIM, Data Models, Asset & Identity freymvorklari o'rtasidagi bog'liqlik
โœ… Tergov ish oqimlari, Risk Based Alerting va korrelyatsiya qidiruvlari
โœ… TSTATS, EVAL, REX, LOOKUP buyruqlari bilan samarali SPL yozish
โœ… Anomaliya aniqlash va xulq-atvor tahlili orqali tahdid ovlash
โœ… SOAR playbook'lari va adaptiv javob harakatlari

๐ŸŽ– Imtihondan o'tsangiz nima olasiz?
Rasmiy raqamli badge โ€” uni:

๐Ÿ”น Resumeingizga qo'shing
๐Ÿ”น LinkedIn profilingizda ko'rsating
๐Ÿ”น Ish beruvchilarga bilimingizni rasman tasdiqlang!

๐Ÿ”— Imtihonga ro'yxatdan o'ting:
๐Ÿ‘‰ https://www.netacad.com/exams/splunk-cyber-defense-analyst-pathway?courseLang=en-US&instance_id=25c016a4-f709-4d4f-911c-629880921291

๐Ÿ’ก 8 ta kurs + 1 ta imtihon = Tasdiqlangan Kiberxavfsizlik Analisti! Omad! ๐Ÿ€



@cisco_server

#Sertifikat #Badge #Splunk #SOC #Kiberxavfsizlik #NetAcad #Karyera #LinkedIn
๐Ÿ‘Ž1๐Ÿ˜ด1
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ3
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ2
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ3โค1
#Encore

๐Ÿ“ก ENCOR 350-401 | Chapter 6
IP Routing Essentials

๐Ÿ”ฅ CCNA da aytilmagan KEY POINTS
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

1๏ธโƒฃ TERMINOLOGIYA FARQI

Path โ€” ikki tarmoq orasidagi mavjud havolalar
Route โ€” routing protokoli tanlagan yo'l (RIB da)

โšก๏ธ CCNA da path = route deyiladi
ENCOR da bular FARQ QILADI


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
2๏ธโƒฃ RIP TIMERLAR

๐Ÿ• Update โ†’ 30s (table yuborish)
๐Ÿ• Invalid โ†’ 180s (update kelmasa โ†’ invalid)
๐Ÿ• Holddown โ†’ 180s (yomon info bloklash)
๐Ÿ• Flush โ†’ 240s (table dan o'chirish)

โšก๏ธ Holddown nima qiladi?
Route tushgandan keyin 180s davomida
"yaxshi" yangi ma'lumotni QABUL QILMAYDI
โ†’ Routing loop oldini oladi

โšก๏ธ RIP da Hello YO'Q
Qo'shni o'ligini 180s kutib bilib oladi
(OSPF = 40s, EIGRP = 15s)


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
3๏ธโƒฃ OSPF FLOODING QACHON TUGAYDI?

Down โ†’ Init โ†’ 2-Way โ†’ Exchange โ†’ FULL

โšก๏ธ Router "tugadi" deb bilmaydi
U LSDB ni qo'shnisi bilan TAQQOSLAYDI
Full state = LSDB bir xil = sinxron


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
4๏ธโƒฃ PATH SELECTION โ€” 3 QADAM

1. Prefix Length /28 > /26 > /24
2. AD past AD โ†’ ustun
3. Metric past metric โ†’ ustun

๐Ÿ“‹ DEFAULT AD JADVALI

Connected โ†’ 0
Static โ†’ 1
eBGP โ†’ 20
EIGRP internal โ†’ 90 โœ…
OSPF โ†’ 110 โœ…
IS-IS โ†’ 115
RIPv2 โ†’ 120
EIGRP external โ†’ 170
iBGP โ†’ 200 โœ…

โšก๏ธ iBGP AD = 200
CCNA da o'tilmaydi
BGP iBGP path tanlasa โ†’ RIB ga AD=200
OSPF (110) uni preempt QILMAYDI


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
5๏ธโƒฃ ECMP vs UNEQUAL LOAD BALANCING

ECMP โ†’ barcha IGP (RIP, EIGRP, OSPF, IS-IS)
โ€ข Metric bir xil โ†’ ikkala path RIB ga
โ€ข Traffic teng taqsimlanadi

Unequal-Cost โ†’ FAQAT EIGRP
โ€ข Default o'chiq โ€” variance bilan yoqiladi
โ€ข Metric farqli โ†’ nisbatga qarab taqsimlaydi

โšก๏ธ show ip route โ€” ECMP ko'rinadi
โšก๏ธ show ip route x.x.x.x โ€” traffic share count


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
6๏ธโƒฃ STATIC ROUTE โ€” 3 TUR

Directly Attached
ip route net mask INTERFACE
โ†’ Faqat P2P (Serial) da ishlating!

Recursive
ip route net mask NEXT-HOP-IP
โ†’ Ethernet da xavfli โ€” link tushsa
noto'g'ri interfeysga o'tib ketadi

Fully Specified โœ…
ip route net mask INTERFACE NEXT-HOP-IP
โ†’ Ethernet + static = HAR DOIM shu!

โšก๏ธ Ethernet + Directly Attached = XATO
Har paket uchun ARP ishlaydi
โ†’ CPU va xotira sarflanadi โ†’ tizim beqaror

โšก๏ธ Ethernet + Recursive = XAVFLI
Link tushsa โ†’ RIP 180s kutadi
Static darhol noto'g'ri yo'lga o'tadi


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
7๏ธโƒฃ FLOATING STATIC โ€” BACKUP TEXNIKA

ip route 10.0.0.0 255.0.0.0 10.1.1.2 10
ip route 10.0.0.0 255.0.0.0 Serial1/0 210

AD=10 โ†’ asosiy (RIB da ko'rinadi)
AD=210 โ†’ backup (asosiy tushsa faollashadi)

โšก๏ธ AD o'zgartirish routing loop ga
olib kelishi mumkin โ€” ehtiyot bo'ling!


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
8๏ธโƒฃ NULL0 โ€” LOOP OLDINI OLISH

ip route 172.16.0.0 255.255.240.0 Null0

Aniq route (longer match) โ†’ yo'naltiriladi โœ…
Aniq route yo'q โ†’ Null0 DROP โœ… (loop yo'q)

โšก๏ธ Summary route + Null0 = standart pattern
ISP lar va enterprise da keng ishlatiladi


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
9๏ธโƒฃ VRF โ€” KOMANDALAR TARTIBI

vrf definition MGMT
address-family ipv4

interface GigabitEthernet0/3
vrf forwarding MGMT
ip address 10.0.3.1 255.255.255.0

โšก๏ธ vrf forwarding kiritilganda
IP manzil AVTOMATIK o'chadi โ€” normal holat!
Keyin qayta yozing

โšก๏ธ show ip route โ€” VRF interfeyslar KO'RINMAYDI
show ip route vrf MGMT โ€” ko'rinadi


โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”Ÿ RIB vs FIB โ€” ENG MUHIM FARQ

RIB (Routing Table)
โ€ข Control Plane
โ€ข RAM da saqlanadi
โ€ข Best path hisoblash
โ€ข show ip route

FIB / CEF (Forwarding Table)
โ€ข Data Plane
โ€ข TCAM โ€” hardware darajasida
โ€ข Real paket yo'naltirish
โ€ข show ip cef

โšก๏ธ SDN va Controller-based arxitekturada
Control Plane va Data Plane ajratish
ENCOR ning asosiy mavzularidan biri

๐Ÿ“š ENCOR 350-401 Official Cert Guide
2nd Edition โ€” Chapter 6

โœ๏ธ CCIE Enterprise Infrastructure seriyasidan @cisco_server
๐Ÿ‘4โค3๐Ÿ‘1
Cisco and Server | AI
Video message
Qarmoqlar.pdf
209.5 KB
Deyarli hammamizda vaqt yo'q, ulgurmayapman, nimadan boshlashni bilmayapman degan hisiyotlar o'tadi.

""Kompyuterda uzoq vaqtdan buyon yopilmay yotgan "Vkladkalar" qanchalik RAMni sarflasa, oxiriga yetmagan ishlarimiz bilan ham huddi shunday bo'ladi""

Shu muammodan qutilish uchun ushbu qarmoqlar usulidan foydalaning , miyyangizdagi hamma o'y fikrlarni daftarga tushirib qo'ying.

Shunda miyya ancha bo'shaydi, ana endi o'sha ishlarni ichidan bir qarab chiqib 2-5 minutda bitadiganlarini birinchi ajratib olib xozirni o'zida bajarib qo'ying.

Qolgan katta zadachalaringizni qanday bajarish maqqulligi qiziq bo'lsa, reaksiyalaringizga qarab uni ham ossonroq hal etish yo'lini o'rgataman.

@cisco_server
๐Ÿ‘12๐Ÿ”ฅ3โค2
#Encore

๐Ÿ“ก ENCOR 350-401 | Chapter 7

๐Ÿ“ก EIGRP โ€” CCNA da aytilmagan KEY POINTS

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿง  DUAL Algoritmi
EIGRP oddiy distance vector emas. DUAL
(Diffusing Update Algorithm) loop-free
backup yo'llarni oldindan hisoblaydi va
convergence ni tezlashtiradi.

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ“Š FD, RD va Feasibility Condition

- FD (Feasible Distance) โ€” router o'zi
hisoblagan to'liq path metric

- RD (Reported Distance) โ€” qo'shni
e'lon qilgan o'z masofasi

- Feasibility Condition:
โœ… RD < FD โ†’ Feasible Successor
โŒ RD โ‰ฅ FD โ†’ Backup sifatida qabul
qilinmaydi (loop xavfi)

๐Ÿ’ก RD โ€” bu qo'shni masofasi, to'liq
path metric emas! Path metric = RD +
o'zingning link cost.

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

โš–๏ธ Unequal-Cost Load Balancing

EIGRP variance multiplier orqali har xil
metrikdagi yo'llarni bir vaqtda ishlatadi.

Variance = Feasible Successor FD รท
Successor FD (yuqoriga yaxlitlanadi)

Feasible Successor FD < Variance qiymati
bo'lsa โ†’ RIB ga o'rnatiladi.

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ”„ Convergence: Passive vs Active

- Passive (P) โ†’ topology barqaror โœ…
- Active (A) โ†’ yo'l yo'qoldi, DUAL
hisoblash boshlandi โš™๏ธ

Feasible Successor bor โ†’ darhol
Passive ga qaytadi (hech kim bilmaydi)

Feasible Successor yo'q โ†’ Query jarayoni
boshlanadi.

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ“จ Query / Reply Mexanizmi

Query kelganda router MAJBURIY javob
berishi shart. 2 ta to'g'ri javob:
1๏ธโƒฃ "Bu prefix menda yo'q"
2๏ธโƒฃ "Menda boshqa yo'l bor" (+ attributes)

Jim qolish = o'lim ๐Ÿ’€

Reply Status Flag โ€” router yuborgan har
bir query uchun, har bir qo'shni bo'yicha
alohida kuzatiladi. Barcha flag = 0
bo'lganda DUAL yakunlanadi.

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ†˜ SIA โ€” Stuck In Active

Query ga 3 daqiqada reply kelmasa โ†’
adjacency RESET (faqat o'sha prefix emas,
BARCHA prefix lar uchun!)

1.5 daqiqada SIA-Query yuboriladi:
"Sen tiriksan, lekin nima bo'ldi?"

Hello timer โ‰  SIA-Query:
- Hello โ†’ "Qo'shni tirikmi?" (adjacency)
- SIA-Query โ†’ "DUAL hisoblash
tugatdingmi?" (computation)

Router tirik bo'la turib ham javob bera
olmasligi mumkin โ€” chunki u ham chuqurroq
birovni kutmoqda!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ“ฆ Classic vs Wide Metrics

Classic โ†’ delay 10ฮผs, bandwidth kbps
โŒ 11 Gbps va 50 Gbps ni ajrata olmaydi

Wide โ†’ delay pikosekund (10โปยนยฒ),
65,536 ga ko'paytirilgan
โœ… 655 Tbps gacha masshtab

Kโ‚† โ†’ jitter, energy kabi extended
attribute lar uchun qo'shimcha qiymat

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

๐Ÿ—บ Route Summarization โ€” Null0 siri

R2 summary advertise qilganda o'z
routing table iga avtomatik:
172.16.0.0/16 โ†’ Null0 โ›”๏ธ
qo'shadi.

Mavjud bo'lmagan /24 ga paket kelsa:
โ†’ Longest Match โ†’ Null0 โ†’ DROP
โ†’ Loop emas, Black Hole nazorat ostida

โš ๏ธ Summarization ishlashi uchun har bir
region ga UNIQUE address blok berilishi
shart. Bir xil summary โ†’ Black Hole!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
โฑ๏ธ Timers

Fast Slow (T1โ†“)
Hello โ”‚ 5 sec โ”‚ 60 sec
Hold โ”‚ 15 sec โ”‚ 180 sec

Hold = Hello ร— 3 (default)
Hold = 0 โ†’ neighbor unreachable โ†’
DUAL ga topology change xabari

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

#EIGRP #CCNP #ENCOR #Networking

@cisco_server
โค2๐Ÿ‘1
๐Ÿ”ฅ Ko'pchilik bilmagan OSPF sirlari โ€” #1
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
โ“ Savol: Quyidagi komanda nima qiladi?
router ospf 1
network 10.0.0.0 0.0.0.255 area 0

Ko'pchilikning fikri::
"10.0.0.0 tarmoqni OSPF ga e'lon qiladi" โ€” NOTO'G'RI โŒ

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
โœ… To'g'ri javob:
network komandasi tarmoqni emas โ€” interfeysdagi OSPF ni YOQADI!
Keyin o'sha interfeys LSA orqali o'zi e'lon qilinadi ๐Ÿ“ก
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿง  Misol bilan tushunamiz:
Router 3 ta interfeysi bor:
Gi0/0 โ†’ 10.0.0.1  โœ… mos keladi
Gi0/1 โ†’ 10.0.10.1 โŒ mos kelmaydi
Gi0/2 โ†’ 192.168.1.1 โŒ mos kelmaydi

network 10.0.0.0 0.0.0.255 area 0 ๐Ÿ‘† Bu komanda faqat Gi0/0 da OSPF ni yoqadi
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐ŸŽฏ Wildcard mask nima qiladi?
Wildcard
Ma'nosi
0.0.0.0
Faqat aynan shu IP
0.0.0.255
/24 dagi barcha IP lar
255.255.255.255
Barcha interfeyslari
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ’ก 1 gap bilan yodla:
Network statement โ€” tarmoq e'lon qilmaydi, interfeysdagi OSPF ni YOQADI!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ“Œ Bu bilim CCNP/CCIE imtihonlarida tez-tez chiqadi!

๐Ÿ‘‡ Buni bilardingmidingiz?
Komentariyada kutib qolamiz!



@cisco_server
#OSPF #Cisco #CCNA #CCNP #CCIE #Networking #Tarmoq
๐Ÿ‘2๐Ÿคฏ1
๐Ÿง  CCNA da aytishmagan OSPF sirlari! (Chapter 8 โ€” ENCOR 350-401)
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#1 โ€” DR preemption yo'q! ๐Ÿšซ
Ko'pchilik bilmaydi: DR saylovdan keyin yangi, yaxshiroq router kelsa ham DR o'zgarmaydi!
R4 = DR (priority: 1)
R1 keldi (priority: 100) ๐Ÿ‘‘

Natija: R4 HALI HAM DR! ๐Ÿ˜ฎ

DR o'zgarishi uchun:
clear ip ospf process โ† majburiy!

OSPF DR preemptive emas โ€” bu dizayn qarori!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#2 โ€” Wait Timer: Ko'pchilik bilmagan taymะตั€ โณ
Router yonganda darhol DR saylovga qatnashmaydi!
Router yondi
โ†“
Wait Timer = 40 soniya โณ
โ†“
Boshqalar yonishini kutadi
โ†“
Keyin saylov! โœ…

Nega?
Agar kutmasะฐ โ†’ Birinchi yongan router doim DR bo'lib qolardi! โŒ

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#3 โ€” OSPF Cost muammosi ๐Ÿ“Š
Default reference bandwidth = 100 Mbps
FastEthernet (100M) โ†’ Cost: 1
GigabitEthernet (1G) โ†’ Cost: 1
10 GigabitEthernet โ†’ Cost: 1

โŒ Hammasi bir xil! OSPF tezroq yo'lni topa olmaydi!
Yechim:
auto-cost reference-bandwidth 40000

FastEthernet  โ†’ Cost: 400
GigabitEth โ†’ Cost: 40
10GigE โ†’ Cost: 4

โœ… Endi farq bor!
โš ๏ธ Barcha routerlarda bir xil qiymat bo'lishi SHART!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#4 โ€” Loopback /32 muammosi ๐Ÿ”„
interface Loopback0
ip address 192.168.1.1 255.255.255.0

OSPF e'lon qiladi: 192.168.1.1/32 ๐Ÿ˜ฎ /24 emas!
Yechim:
interface Loopback0
ip ospf network point-to-point

Endi OSPF e'lon qiladi: 192.168.1.0/24 โœ…
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#5 โ€” MTU mismatch: Yashirin dushman ๐Ÿ‘ป
R1 MTU: 1500 byte
R2 MTU: 1400 byte

Natija:
Neighbor: โœ… ko'rinadi
Adjacency: โŒ FULL bo'lmaydi!
Exchange holatida qolib ketadi ๐Ÿ˜ฑ

Tezkor yechim:
ip ospf mtu-ignore โ† tekshirishni o'chir

Professional yechim:
MTU larni bir xil qil! โ† asil yechim

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

Davomi bor...

@cisco_server
โšก2
๐Ÿง  CCNA da aytishmagan OSPF sirlari! (Chapter 8 โ€” ENCOR 350-401) 2-qism.
#6 โ€” OSPF Process izolyatsiyasi ๐Ÿ”’
router ospf 1 โ†’ O'z LSDB si
router ospf 2 โ†’ O'z LSDB si

Ikkalasi bir-birini ko'rmaydi!
redistribute ospf 1 โ† shu bo'lmasa
marshrut o'tmaydi

Real hayotda: Ikki kompaniya birlashdi, har birida alohida OSPF process bor โ€” redistribute qilmasang ular ko'r! ๐Ÿ‘

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#7 โ€” Passive Interface: Noto'g'ri tushuncha โ—๏ธ
Ko'pchilik o'ylaydi:
"Passive interface = OSPF o'chirildi" โŒ

Aslida:
Passive Interface:
โœ… Tarmoq LSDB ga qo'shiladi
โœ… OSPF e'lon qilinadi
โŒ Hello yuborilmaydi
โŒ Neighbor bo'lmaydi

Tarmoqni e'lon qil, lekin neighbor qabul qilma! ๐ŸŽฏ

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#8 โ€” Network Statement haqiqiy vazifasi ๐ŸŽญ
network 10.0.0.0 0.0.0.255 area 0

Ko'pchilik o'ylaydi:
"10.0.0.0 tarmoqni e'lon qiladi" โŒ

Aslida:
"10.0.0.x IP li interfeysdagi OSPF ni YOQADI" โœ…

Interfeysning o'zi LSA orqali e'lon qilinadi โ€” network statement emas!
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#9 โ€” DR saylovida RID tuzog'i โš ๏ธ
Barcha priority = 1 (default)
โ†“
RID taqqoslanadi
โ†“
Eng katta RID = DR

โŒ Yomon amaliyot:
RID ni o'zgartirish orqali DR ni boshqarish

โœ… Professional amaliyot:
ip ospf priority 100 โ† DR bo'lsin
ip ospf priority 0 โ† hech qachon DR bo'lmasin

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#10 โ€” ExStart: Yashirin muammo ๐Ÿ”
Ikki router ExStart holatida qolib ketdi?

Sabab ko'pincha:
MTU mismatch! โ† 90% holat
DBD paket o'tmayapti

Tekshirish:
show ip ospf neighbor โ† ExStart ko'rinsa
show interface โ† MTU tekshir

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ’ฌ Qaysi biri sizni hayratda qoldirdi? Izohda yozing! ๐Ÿ‘‡

@cisco_server
Please open Telegram to view this post
VIEW IN TELEGRAM
โšก2๐Ÿ”ฅ1
๐Ÿ“ก OSPF โ€” CCNA da aytilmagan sirlar
(Chapter 9 โ€” ENCOR 350-401)
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

CCNA da OSPF ni "o'rgandim" deb o'ylaysizmi? ๐Ÿ˜

Mana CCIE darajasidagi haqiqat ๐Ÿ‘‡

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 1. LSA lar โ€” 6 xil, siz 2 tasini bilasiz

CCNA: "Type 1 va Type 2 bor"
Aslida:

Type 1 โ†’ Router o'zi (area ichida)
Type 2 โ†’ DR (multi-access segment)
Type 3 โ†’ ABR (arealar orasida) โญ๏ธ
Type 4 โ†’ ABR (ASBR qayerda?)
Type 5 โ†’ ASBR (external routes)
Type 7 โ†’ NSSA ichida external routes

๐Ÿ’ก Eng muhimi: Type 3 ni ABR yaratadi, router emas!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 2. ABR โ€” oddiy router emas

ABR uchun 3 ta TEMIR QOIDA:

โ–ช๏ธ Type 1 LSA kelsa โ†’ backbone VA non-backbone areaga Type 3 yarat

โ–ช๏ธ Area 0 dan Type 3 kelsa โ†’ faqat non-backbone area uchun yarat

โ–ช๏ธ Non-backbone dan Type 3 kelsa โ†’ boshqa areaga HECH QACHON yuborma!

โš ๏ธ Bu qoidani bilmasang โ†’
Discontiguous network tuzog'iga tushasiz!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 3. LSA Age โ€” router "o'lganini" qanday bilasiz?

Age = 0 โ†’ LSA tug'ildi
Age = 1800s โ†’ Router "Tirikman!" deb yangi LSA yuboradi โ™ป๏ธ
Age = 3600s โ†’ LSA o'ladi,
LSDB dan o'chadi โŒ

๐Ÿ’ก Lekin amalda router o'chsa
40 soniyada Dead Interval ishga tushadi
3600s ni kutmaysiz!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 4. Intra-area DOIM g'alaba qiladi

R1 dan R4 ga 2 ta yo'l:
โ–ช๏ธ Ethernet: metric 5 (inter-area)
โ–ช๏ธ Serial: metric 111 (intra-area)

OSPF serial ni tanlaydi! ๐Ÿ˜ฒ

Sababi:
Intra-area > Inter-area >External
Metrika emas โ€” YO'L TURI muhim!

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 5. Summarization โ€” LSDB ni
o'zgartiradigan qurol

Summarizationsiz:
Area 1 โ†’ 15 ta Type 3 LSA โ†’ Area 0 ๐Ÿ˜“

Summarization bilan:
Area 1 โ†’ 1 ta Type 3 LSA โ†’ Area 0 โœ…

Buyrug'i:
area 12 range 172.16.0.0 255.255.0.0

Bonus: not-advertise qo'shsang โ†’
route filter ham bo'ladi! ๐ŸŽฏ

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ”ด 6. Discontiguous Network โ€”
ko'pchilik tushmaydigan tuzoq

Area 0 uzluksiz bo'lmasa nima bo'ladi?

Area 12 โ€” Area 23 โ€” Area 34

Traffic Area 23 dan o'tmoqchi โ†’
OSPF bu ABR qoidalari tufayli
routelarni inject QILMAYDI โŒ

Yechim: Area 0 ni doim
CONTIGUOUS saqlang! โœ…

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ’Ž XULOSA โ€” CCNA vs CCNP/CCIE

CCNA: "OSPF area bor, DR bor"
CCNP: "LSA turlari, ABR qoidalari"
CCIE: "Nima uchun shunday ishlaydi?"

Eng kuchli network engineer โ€”
protokolni ichidan tushunadigani! ๐Ÿง 

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
๐Ÿ‘‡ Savol bo'lsa โ€” kommentga yozing!

@cisco_server
๐Ÿ”ด OSPFv3 โ€” CCNA da aytilmaydigan narsalar
(Chapter 10 โ€” ENCOR 350-401)
Ko'pchilik OSPFv3 ni "OSPFv2 ning IPv6 versiyasi" deb biladi. Lekin bu to'liq to'g'ri emas. Keling, chuqurroq qaraymiz ๐Ÿ‘‡
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
1๏ธโƒฃ IP manzil va topologiya ajratildi
OSPFv2 da Router LSA ichida topologiya ham, IP prefix ham birga yurardi. Yangi IP qo'shsang โ†’ butun SPF qayta hisoblandi.
OSPFv3 da bular ajratildi: โ†’ Router LSA = faqat topologiya โ†’ Intra-area Prefix LSA = faqat IP manzillar
Natija: IP o'zgarganda SPF qayta ishlamaydi โœ…
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
2๏ธโƒฃ Authentication OSPF dan chiqarildi
OSPFv2 da authentication to'g'ridan-to'g'ri OSPF packet ichida edi.
OSPFv3 da bu vazifa IPsec Extension Header ga o'tkazildi. OSPF packet header 24 byte dan 16 byte ga tushdi.
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
3๏ธโƒฃ Umumiy subnet shart emas
OSPFv2: qo'shni bo'lish uchun bir xil subnet bo'lishi shart โœ‹
OSPFv3: ikki router subnet'lari farqli bo'lsa ham, link-local manzil bir xil linkda bo'lsa โ€” adjacency o'rnatiladi โœ…
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
4๏ธโƒฃ LSA flooding yangicha ishlaydi
Har bir LSA da endi LS Type maydoni bor (16-bit). Uning ichidagi bitlar:
U-bit โ†’ noma'lum LSA ni drop qilma, forward qil S1/S2 โ†’ flooding qayerga borishi kerakligini belgilaydi:
00 โ†’ faqat shu link
01 โ†’ faqat shu area
10 โ†’ butun OSPF domain

OSPFv2 da bu "hardcoded" edi ๐Ÿคฏ
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
5๏ธโƒฃ Instance ID โ€” kam bilinadi
Bir xil segmentda turli OSPFv3 guruhlarni ajratish mumkin.
R1 (Instance 0) โ†”๏ธ R2 (Instance 0) โœ…
R1 (Instance 0) โ†”๏ธ R3 (Instance 1) โŒ

Instance ID mos kelmasa โ†’ packet ignore qilinadi. Xuddi "parol" kabi ๐Ÿ”‘
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
6๏ธโƒฃ OSPFv3 = IPv4 + IPv6 bir jarayonda
RFC 5838 ga ko'ra OSPFv3 bitta jarayon ichida IPv4 va IPv6 ni bir vaqtda ishlata oladi.
ospfv3 1 ipv6 area 0  โ†’ IPv6 uchun
ospfv3 1 ipv4 area 0 โ†’ IPv4 uchun

CCNA da bu umuman aytilmaydi ๐Ÿ˜
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
7๏ธโƒฃ IPv6 summarization da yashirin xato
2001:DB8::/65 ni hisoblayotganda ko'pchilik 0x20 = 20 deb o'ylaydi.
To'g'risi: 0x20 = 32 (decimal) โ€ผ๏ธ
Har doim hex kalkulyator ishlatish โ€” bir xatoni oldini oladi.
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

@cisco_server
โค2๐Ÿ‘1
#new_ccna

Shogirtimizdan Hayitga Sovg'a.

Alloh hayirli qilsin.

@uzbekonacisco.uz
๐Ÿ‘13โค10
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ‘8๐Ÿ”ฅ3โค2
This media is not supported in your browser
VIEW IN TELEGRAM
โค1
refplat-20260409-free-iso.zip
3 GB
๐Ÿ–ฅ Cisco CML (Modeling Labs) โ€” Bepul versiya haqida bilasizmi?
Cisco CML โ€” bu tarmoq muhandislari va talabalar uchun virtual laboratoriya muhiti. Real Cisco qurilmalarini simulyatsiya qilish imkonini beradi!
๐Ÿ†“ CML Free versiyasida nima bor?
5 tagacha node ishlatish imkoniyati
Asosiy Cisco qurilmalari (router, switch)
Web-based interfeys
Topologiyalarni saqlash va yuklash
โš™๏ธ Texnik talablar:
8 GB RAM (minimum)
4 vCPU
KVM gipervizoriga asoslangan
Ubuntu Linux muhiti

Free versiyasida faqatgina 5tagacha qurilma qo'shishingiz mumkin, personal va personal + tariflarida 200-400$ to'lab, 20-40tagacha host qo'shib test qilish mumkin.

@cisco_server
โค2
This media is not supported in your browser
VIEW IN TELEGRAM
๐Ÿ”ฅ5โค2๐Ÿ‘2โšก1