Key Takeaways
* Every EVPN service on a dual-homed server is built from the same three blocks: the server attachment (bundle or single interface, plus its Ethernet Segment), the VLAN (subinterface and bridge-domain), and an
Security3 min read
MACsec (802.1AE) Fundamentals
Layer 2 link encryption with IEEE 802.1AE: CAK and CKN, MKA key agreement, key-server election, SAK rotation, and IOS-XR configuration.
WAN & SD-WAN4 min read
Segment Routing (SR-MPLS) Fundamentals
Segment Routing over MPLS: Prefix- and Adjacency-SIDs, the SRGB label formula, IGP distribution, and IOS-XR configuration and verification.
Switching4 min read
Spanning Tree Protocol (STP) and RSTP Fundamentals
How STP and RSTP prevent Layer 2 loops: root bridge election, port roles and states, the proposal/agreement handshake, and Cisco IOS configuration.
1 min read
Service Flow Chart
2 min read
MACSec
inter-site links between nodes within the sites are encrypted at Layer 2 using MACsec (IEEE 802.1AE)
* MACsec on the NCS 540 (IOS XR 7.9.x / 25.2.x) requires the k9sec crypto
2 min read
Git Strategy
This branching strategy is intended to describe a way to simplify the process of working together on the same code base using git and a scm (Source Control Management) environment using git.
In our
WAN & SD-WAN3 min read
EVPN-IOS-XR
Node names in this article have been generalized from the original system (Node A / Node B / Node C / Node D) to keep internal naming out of the write-up — each label refers consistently to one
1 min read
Coming soon
This is IPNET, a brand new site by Bashar that's just getting started. Things will be up and running here shortly, but you can subscribe in the meantime if you'd