With a view to tackle today’s enterprise security challenges Cisco has evolved a new architecture for enterprise security that will help enable business users to access information from any device and any location with a high degree of ease and security, The Secure Borderless Network architecture focuses on four critical anchors: enterprise end-points (mobile or [...]
How to Check an AAA-Server Authentication on Cisco ASA/PIX/FWSM
CISCO-ASA-LAB#
CISCO-ASA-LAB# test aaa-sever ?
test aaa-server [authentication|authorization] [host |] username password
For example:
CISCO-ASA-LAB# test aaa-server authentication TACGroup username kartook password cisco12366
if authentication is successful (output mentioned below)
INFO: Authentication Successful
if authentication fails (output mentioned below)
ERROR: Authentication Rejected: Unspecified
Possibly Related Posts:
Linux :How to encrypt text file in Linux (VIM)
Cisco’s [...]
One of the most frustrating moments as a network administrator is when you desperately want to log on to a Cisco Kartook-R1-LAB and you try all possible passwords you have with no success. Fortunately there is a Cisco password recovery procedure for IOS Kartook-R1-LABs which you can follow and bypass password control in order to [...]
Setup:
Concentrators are configured to point to the same Radius server (Win2008) for authentication through Active Directory (AD)
Concentrator have got “Radius with Expiry” enabled on the VPN group.
Remote users use Latest Cisco VPN client version and Windows Vista 32bit
1) On Cisco VPN Conc. 3015 – It works perfectly. Remote user was prompted to change [...]
This is a snippet for the Cisco Pix firewall that create a ‘limited user’ account on the firewall itself. That user will have access to all ’show’ diagnostic commands,
as well as the ability to clear the error/usage counters on interfaces and to ping other devices.
This configuration does the following things:
* Defines two user levels, ’show’ [...]
To change or set the enable password to P@s5wo61):
config t
enable secret p@s5w061
The enable pasword P@s5wo61) command will also set the enable password, but will leave the password in plain text and visible in the router configuration. This is not affected by the service password-encryption setting.
Possibly Related Posts:
Cisco’s offers borderless security
Cisco : How to Check an [...]
ACCESS LIST
1-99 IP starndard
100-199 IP extended
200-299 Protocol type-code
300-399 DECnet
400-499 XNS standard
500-599 XNS extended
600-699 Appletalk
700-799 48-bit MAC address
800-899 IPX standard
900-999 IPX extended
1000-1099 IPX SAP
1100-1199 Extended 48-bit
1200-1299 IPX summary address IP extended can be based on IP proto, eigrp, gre, icmp, igmp, igrp, ip, ipinip, nos, ospf, tcp, udp, ahp, esp
Possibly Related Posts:
Cisco’s offers borderless security
Cisco : [...]
Administrative distance:
0 Directly connected interface
0 Static route pointing to an interface
1 Static route pointing to a next-hop neighbor
5 Summarized EIGRP route
20 External BGP route
90 Internel EIGRP route
100 IGRP route
110 OSPF route
115 IS-IS route
120 RIP route
140 EGP route
170 External EIGRP route
200 Internal BGP route
255 Unknown routing source
Possibly Related Posts:
Cisco’s offers borderless security
Cisco : How to Check [...]
On June 24th, 2009, Learning@Cisco will implement program changes to the CCNA Voice certification. There will now be two options available for candidates wishing to achieve their CCNA Voice certification: A commercial option and an enterprise option.
The new CCNA Voice Certification enterprise option assesses skills/knowledge related to the Cisco Unified Communications Manager 6.0 (CUCM 6.0). [...]
vpnc is supposed to work with:
* Cisco VPN concentrator 3000 Series
* Cisco IOS routers
* Cisco PIX / ASA Zecurity Appliances
* Juniper/Netscreen
Supported Authentications: Hybrid, Pre-Shared-Key + XAUTH, Pre-Shared-Key
Supported IKE DH-Groups: dh1 dh2 dh5
Supported Hash Algo (IKE/IPSEC): md5 sha1
Supported Encryptions (IKE/IPSEC): (null) (1des) 3des aes128 aes192 aes256
Perfect Forward Secrecy: nopfs dh1 dh2 dh5
Supported Platforms:
* Linux (i386/ppc/zaurus tested)
* [...]