yung | gnuy.com

Cisco Jobs Trends Interviews

Yung — Wed, 28 Apr 2010 13:44:52 +0000

http://www.odinjobs.com/blogs/careers/entry/cisco_cool_trends_what_do

Starting study meetings

Yung — Tue, 02 Mar 2010 16:54:17 +0000

So we are starting a new study group, we are three people so far, and we are meeting in Webex in wednesday nights. Starting all over with my project plan, Networking basics now.

Initializing ASA

Yung — Sun, 24 Jan 2010 03:12:49 +0000

Firewall Mode (Router/Transparent)
Single/Multiple Context
Enable/Allocate interfaces
Assign IP address for each active Interface
Un-shut Interfaces
Configure Address Translation (optional)
Configure Routing

Happy New Year 2010

Yung — Wed, 20 Jan 2010 16:21:56 +0000

It is a little late for this post, but anyway, this shall be a very interesting year, a lot of changes, hopefully will bring a lot of good surprises. Wish you all success!

New approach

Yung — Wed, 20 Jan 2010 15:24:41 +0000

After looking at the ccbootcamp book, I think I still need more information, so I will go through the CBT Nuggets for CCSP first. And we’ll see how that goes.

IPSec RFCs

Yung — Wed, 25 Nov 2009 18:35:09 +0000

New IPSec RFCs

RFCs 2401 – 2411
RFC 2451

VPN

Yung — Mon, 23 Nov 2009 21:57:09 +0000

Virtual Private Networks

Secure VPNs:

IPSec
PPTP
SSL

Trusted VPNs:

GRE
L2TP
L2F
MPLS

AES RFCs

Yung — Thu, 19 Nov 2009 17:57:44 +0000

Advanced Encryption Standard

RFC3268 — AES Cipher suites for Transport Layer Security (TLS)
RFC3394 — AES Key Wrap Algorithm
RFC3566 — The AES-XCBC-MAC-96 Algorithm and its use with IPSec
RFC3602 — The AES-CBC cipher algorithm and its use with IPSec
RFC3664 — The AES-XCBC-PRF-128 algorithm for the Internet Key Exchange protocol (IKE)
RFC3686 — Using AES counter mode with IPSec Encapsulating Security Payload (ESP)
RFC3826 — The AES cipher algorithm in the SNMP User-based Security Model
RFC3853 — S/MIME AES Requirement for Session Initiation Protocol (SIP)
RFC3962 — AES Encryption for Kerberos 5

TACACS+ Features

Yung — Tue, 17 Nov 2009 18:07:41 +0000

TACACS+ Terminal Access Controller Access Control System plus

TCP packets (port 49), reliable transport
Supports AAA architecture
Data between NAS and server is encrypted
Support CHAP/PAP and multi-protocols
ACL’s can be defined per-user basis

Radius config tasks

Yung — Tue, 17 Nov 2009 15:55:16 +0000

Configuration steps:

aaa new-model
aaa authentication
line or interface to apply authentication
radius-server ip-address
radius-server key secret-key
aaa authorization
aaa accounting

Example configuration:

aaa new-model
aaa authentication login use-radius group radius local
aaa authentication ppp user-radius if-needed group radius
aaa authorization exec default group radius (on radius configure shell:priv-lvl=15)
aaa authorization network default group radius
radius-server 192.168.5.5
radius-server key ccie999
line vty 0 4
login authentication use-radius