My Netwok Dictionary

With numbered IP access lists to modify a list would have to first delete numbered access list and put it back again with the necessary corrections. In a numbered access list can not delete individual statements.

IP access lists named individual entries can remove a specific list. Deleting individual entries modify access lists without having to remove and reconfigure from scratch. However it is possible to selectively insert items in a list. If you add an item to the list, this is placed at the end of it.

You can not use the same name for multiple access lists. Access lists of different types can not share name. Read the rest of this entry »

In their operations, network control and monitoring systems can use a lot of bandwidth. More controlled devices and is the latest monitoring, but also require much more bandwidth than your system of control than usual traffic on the network.

Configuring a network monitoring tool: basic principles

The tool table is the basic command of a control system network. Usually you type ping host1 to obtain a series of results. But what are the transactions with this command? Read the rest of this entry »

In order for VLANs to communicate between them should be needed the services of a router. To this must be set subinterface FastEthernet, encapsulation and corresponding IP address so that each of these belong to a specific vlan. Read the rest of this entry »

ISDN PRI interface provides leased line T1 or E1. The main tasks of PRI interface settings are:

Use the isdn switch-type command to specify the ISDN switch used by the provider that connects the PRI interface. As with BRI, this command can be entered in global configuration mode or interface configuration.

Router (config) # isdn switch-type primary-Net5

Configuring a T1 or E1 controller is done in four steps: Read the rest of this entry »

Introduction

With Authentication Proxy, users can log into the network or access the Internet via HTTP.
User profiles are automatically obtained from a server TACACS +, which we assume is already configured. (Cisco Secure Access Control Server)
It is assumed that the server TACACS + is the same LAN client and that a user is configured CSACS Default Group, with username and password.

Configure AAA

To configure AAA, the steps are:

a. On the router in global configuration mode:
Router # configure terminal Read the rest of this entry »

Static configuration:

It was performed manually by an administrator assigned to the respective ports VLANs. By default all ports belong to VLAN1 until the administrator change these settings.

Dynamic configuration:

The IOS Catalyst switches support dynamic configuration through a server belonging to VLAN (VMPS). The VMPS server can be a high end switch that is running an operating system based on set (CatOS). Read the rest of this entry »

Let’s see how to protect our home LAN by configuring a Cisco firewall, or PIX 501 (see image below).

First we set the name and the security level associated to the external and the internal interface we are using (after entering the configuration mode by typing commands and then ena conf t):

pixfirewall (config) # nameif ethernet0 outside security0
pixfirewall (config) # nameif inside Ethernet1 security100

As you can see, we call interface ethernet0 “outside” and to it we associate the level of security “security0. A similar concerns interface Ethernet1. Read the rest of this entry »

The materials used in this lab:-

• 2 Cisco Routers with serial interface
• 2 Cables V35-DTE
• Teleco DCE Modem 2 TD-3 604T
• 2 Cables V35-DTE
• 1 Cable RJ11 (modified for the connection of two modems DCE-3)

Read the rest of this entry »

PIX Security Appliance RSSI. Cisco PIX security applications can enforce policies on users and applications. Cisco PIX can protect against many different networks and Internet-based attacks. Cisco PIX provides secure connectivity, using methods such as SSHv2 Secure Shell and two virtual private networks VPNs.

It’s pretty easy to install.

Cisco PIX can provide VoIP Voice over Internet protocol secure.
Internet Protocol Security IPSec can be installed for VPN. Read the rest of this entry »

In this lab Modular QoS CLI is used to ensure minimum bandwidth to the PC according to the criterion IP lowest bigger bandwidth.

Note using the default CBWFQ the sum of bandwidth allocated must not exceed 75% of the total bandwidth of the interface. To change this value using max-reserved-bandwidth [1-100]

access-list 101 permit udp host 192.168.0.101 Any access-list 102 permit udp host 192.168.0.102 Any access-list 103 permit udp host 192.168.0.103 Any class-map match-all pc101 match access-group 101 class-map match- pc_103 to match access-group 103 Class-map match-all pc_102 match access-group 102 policy-map class rules pc101 bandwidth percent 30 percent 20 class class pc_102 bandwidth pc_103 bandwidth percent 10 interface Serial0 ip address 10.0.0.2 255.0.0.0 max- reserved-bandwidth 100 service-policy output rules. Read the rest of this entry »