background preloader

IT Capstone

Facebook Twitter

Things of interest

Conf gd. Contacts. Cisco 2911 - Remote Access VPN. Configuring IP Access Lists. Introduction This document describes how IP access control lists (ACLs) can filter network traffic.

Configuring IP Access Lists

It also contains brief descriptions of the IP ACL types, feature availability, and an example of use in a network. Access the Software Advisor (registered customers only) tool in order to determine the support of some of the more advanced Cisco IOS® IP ACL features. contains assigned numbers of well-known ports. RFC 1918 contains address allocation for private Internets, IP addresses which should not normally be seen on the Internet. Cisco IOS VPN Configuration Guide - Site-to-Site and Extranet VPN Business Scenarios [Cisco 7200 Series Routers] Group Design. Final Documentation. Final Main Switch. Final Branch Switch. Final Main Router. Final Interface List. Final Physical Logical Topology. Logical Topology. Physical Logical Topology. Updated Interface List. USER PASSWORDS. Interface List. Final Branch Router. Capstone. Microsoft Windows XP - Set up 802.1x authentication. Add Wired Authentication for RADIUS Servers.

In an earlier article, I covered Remote Authentication Dial-In User Service (RADIUS) servers: why we should have them, and the various options that we have to set one up, for both Windows infrastructure and Linux.

Add Wired Authentication for RADIUS Servers

With a centralized identity management in place (Active Directory), let's take a look at how to implement wired authentication using IEEE 802.1X. Background. Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example. Click the arrow to open and close the My Cisco Menu.

Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example

Introduction This document provides step-by-step instructions on how to allow VPN Clients access to the Internet while they are tunneled into a Cisco IOS® Router. This configuration is required to allow the VPN Clients secure access to corporate resources via IPsec and at the same time allow unsecured access to the Internet. This configuration is called split tunneling. Note: Split tunneling can pose a security risk when configured. Prerequisites. Cisco. Straight-forward way to configure Cisco PIX Firewall/ASA: Introduction to CLI Cisco Forum FAQ. Suggested prerequisite reading»Cisco Forum FAQ »Things to expect when setup network for home or small business Physical Connection When it is time to configure your network firewall, there are basic steps you need to do regardless equipment brand or model you use.

Straight-forward way to configure Cisco PIX Firewall/ASA: Introduction to CLI Cisco Forum FAQ

One of those steps is figuring out which would be the PIX Firewall or ASA WAN port and which would be PIX Firewall or ASA LAN port. Once you have all proper cables connected, you will then configure the PIX Firewall or ASA software. Cisco ASA5500 (5505, 5510, 5520, etc) Series Firewall Security Appliance Startup Configuration & Basic Concepts. Introducing the Cisco ASA 5500 Series Firewall Appliance The Cisco ASA 5500 series security appliances have been around for quite some time and are amongst the most popular hardware firewalls available in the market.

Cisco ASA5500 (5505, 5510, 5520, etc) Series Firewall Security Appliance Startup Configuration & Basic Concepts

Today takes a look at how to easily setup a Cisco ASA5500 series firewall to perform basic functions, more than enough to provide secure & restricted access to the Internet, securely access and manage the ASA Firewall and more. While many consider the Cisco ASA Firewalls complex and difficult to configure devices, aims to break that myth and show how easy you can setup an ASA Firewall to deliver basic and advanced functionality.

Cisco Firewalls. Basic ASA Configuration > Cisco Firewall Configuration Fundamentals. Before dealing with any specific configuration procedure for the Adaptive Security Appliance (ASA), you need to understand a set of basic concepts.

Basic ASA Configuration > Cisco Firewall Configuration Fundamentals

Example 3-1 shows a summary of the boot process for an ASA 5505 appliance whose factory settings have not been changed yet. Following a successful load of the OS image, a prompt offering an interactive preconfiguration of the device using menus is presented. You do not need to analyze this option because it provides little flexibility. The initial prompt after boot completion is ciscoasa>, in which ciscoasa is the default hostname for the equipment. Asa_91_firewall_config. Bypassing a NAT/Firewall by reverse SSH Tunneling. 4 min read Not until last week, my ISP finally decided to change my home's internet connection from IPoATM to PPPoE, and giving me a more direct access to the internet, thus using my router’s NAT configuration.

Bypassing a NAT/Firewall by reverse SSH Tunneling

The Problem Before they made the changes, I had to struggle with server applications or having to figure out how to access my home’s pc while I was at somewhere else. Bypassing a NAT/Firewall by reverse SSH Tunneling. Domain Controller. Cisco. Networking. Creating a Virtual Server using Hyper-V. Free TACACS+ server? Securing domain controllers: Eight tips in eight minutes. Tuesday 26 September 2006 01:00 @26216 All your servers are important -- file servers, application servers, Web servers -- and securing them is essential to protecting the data and operations of your enterprise.

Securing domain controllers: Eight tips in eight minutes

But most of those servers can be isolated or replicated or backed up. If you run a full Windows network, chances are the one server on your network you can least afford to lose is your domain controller. As an essential component of your Active Directory, domain controllers house vital information regarding your Windows network. A cracker that compromises a domain controller can gain access to any system he chooses. These eight tips will help you form your domain controller policies, secure your domain controllers, check your work and test that your DCs are secure. Email Alerts. Establishing Secure Domain Controller Build Practices. Secure domain controller build practices are essential to sustained network security.

Establishing Secure Domain Controller Build Practices

When domain controller builds are planned and implemented according to predictable and repeatable build practices, you can ensure a secure platform on which to run Active Directory. You can ensure predictability by setting a standard order for configurations. You can ensure repeatable builds by automating the build process. Automation adds a large measure of security because it minimizes the possibility of rogue programs, rogue services, and insecure configuration being introduced into the build process through manual intervention. Top five security tips for domain controllers. A domain controller is just that—a controller.

Top five security tips for domain controllers

They control authentication, possibly authorization, some accounting, and generally hold the lifecycle of security identities for everything in your company that uses any part of Windows. By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

As such, special security considerations exist for domain controllers. How do you score on this front? IPv6 Implementation Guide, Cisco IOS Release 15.2M&T - Implementing DHCP for IPv6 [Cisco IOS 15.2M&T] The DHCPv6 server function can be enabled on individual IPv6-enabled interfaces. The DHCPv6 server can provide those configuration parameters that do not require the server to maintain any dynamic state for individual clients, such as DNS server addresses and domain search list options. The DHCPv6 server may be configured to perform prefix delegation. All the configuration parameters for clients are independently configured into DHCPv6 configuration pools, which are stored in NVRAM.

Setting up DHCPv6 to Dynamically Issue IPv6 Addresses in a Network. In this blog post on IPv6, I’m going to cover: How to setup DHCP for IPv6 to dynamically issue addresses in your block of IPv6 addresses This is the third technical blog post on configuring IPv6 in a Windows networking environment. My previous posts include: Basic understanding of IPv6 addressing, and acquiring an IPv6 address block. Understanding and Configuring Network Policy and Access Services in Server 2012 (Part 1) If you would like to read the orther parts in this article series please go to: Introduction An important part of a network security strategy is the protection of the network from threats that can be introduced via the client computers that connect to that network.

This becomes particularly vital in the case of remote clients, such as laptops that workers take off site and home computers that employees use to access their work during off-work time or even full-time as telecommuters. Windows Server 2012 based networks have many mechanisms aimed at giving administrators more control over who connects to the corporate network and over the computers they use to connect. DirectAccess is one such technology, and I’ve discussed it in previous articles. Network Access Protection (NAP) has been around for quite some time.

Radius Windows Server 2012. How to Add RADIUS to Windows Server 2012 to Authenticate Cisco ASA VPN Users: Cisco ASA Training 101. RADIUS Server 2012R2. Hello all, Today I was ask to install and configure a new Radius server that will act as a central authentication solution for Cisco network switch’s. So before we start let me just explain what is a Radius server and how when would I used it. Windows Server 2012 Radius setup. Posted by Fred on 31 August 2013 How to setup Radius for authentication with for example a Cisco VPN Connection. When opening the Dashboard after logon with the administrator user you have to choose Add roles and features Choose Role-Based or feature-based installation and click on next Select the server which get the new feature and click on next. Configuring Active Directory (Windows 2008 Server R2) RADIUS Server for OpenVPN Access Server. Using Active Directory for Radius Authentication. When i started at my current job about 12 months ago, there was no means of centralized authentication.

All the equipment used generic logins, and every device was different, so you need a spreadsheet of logins just to do the simplest of tasks! Authenticating WiFi users with Windows AD. WatchGuard System Manager Help. IPv6 Implementation Guide, Cisco IOS Release 15.2M&T - Implementing DHCP for IPv6 [Cisco IOS 15.2M&T] Setting up DHCPv6 to Dynamically Issue IPv6 Addresses in a Network. How to Add RADIUS to Windows Server 2012 to Authenticate Cisco ASA VPN Users: Cisco ASA Training 101. Radius Windows Server 2012. Best Tools for Monitoring and Administering your LAN/WAN network better!!!: How to setup and configure Tacacs+ server in your network.

I will start with the assumption that little bit of Linux preferably Ubuntu because Ubuntu is simple to manage and easy to administer.One thing please note that you can still get configuration from internet by doing some googing but never seen everything available at one place.Please use it based on your needs.I believe you will like it Coming to Tacacs+(opensource tac plus in other words or whatever) Me always used the ordinary radius(IAS on windows) integrated with AD for logging in to the network devices like routers,switches etc and even for remote vpn user management.All of us knows it does just authentication and i am not sure whether it can do full fledged accounting,authorization,authentication So my ex company experience given me some ideas like tacacs+,rancid,syslogger etc at the same time you can get it from internet as its opensource.I have deployed all these tools and they are all working in an awesome manner. a) Setting up TacPlus on Ubuntu Platform Prerequisites:- .

Download Archive - Tacacs Server Software. RADIUS Server and TACACS Server for wireless and wired authentication, authorization and accounting on Windows. Cisco IOS Security Configuration Guide, Release 12.2 - Configuring TACACS+ [Cisco IOS Software Releases 12.2 Mainline] s15radi.pdf. Network Security Using TACACS – Part 2. Secure Access Control Server (ACS) Database Migration.

Introduction. FreeRADIUS: The world's most popular RADIUS Server. FREE TACACS+ Server for Windows. FREE TACACS+ Server for Windows. TACACS+Advantages. FREE TACACS+ Server for Windows. Networking. CNT4931 - Capstone. VMWare Storage. IT Information Storage. Eyelock Iris Identity Management Products Stanley Security Solutions. IrisAccess iCAM7000 Iris Recognition Biometric Access Control System Keyless Entry Door Locks from GoKeyless. Alexander Communications recommended products. Physical Security version2 2. Physical Security version2. Physical access policyv2. VMware Application Virtualization for Enterprise Software & Applications. vSphere, Training & Technical Documentation. Creating a Virtual Server using Hyper-V. Iris ID - Iris Recognition Technology : iCAM TD100. High Speed Dual Iris Capture Compact and Lightweight Single Motion Automatic Iris and Face Capture Intuitive Operator Guidance System Standards Compliant Hardware and Software Iris ID has been producing commercial iris recognition systems since 1997.

In thousands of locations, IrisAccess® authenticates the iris identity of more persons than all other iris platforms combined. Iris ID's rich experience in iris recognition is exemplified in the iCAM TD100. Previous handheld iris recognition systems required significant cooperation and for a subject to remain completely motionless in order to capture high quality iris images.

Iris ID has developed a series of algorithms which provide the capability to capture iris images while either the person or the device is in motion. High Speed - Dual Iris Capture The iCAM TD100 includes an optical system specifically designed and optimized to operate in perfect unison with the integrated high speed multi-sensor iris imager array. IP Code. The IP Code, International Protection Marking, IEC standard 60529, sometimes interpreted as Ingress Protection Marking,[1] classifies and rates the degree of protection provided against intrusion (body parts such as hands and fingers), dust, accidental contact, and water by mechanical casings and electrical enclosures. It is published by the International Electrotechnical Commission (IEC).[2][3] Messoa NCR875PRO Outdoor HD Camera. Geovision Motorized Bullet Camera. The Geovision GV-BL1210 is a motorized IP bullet camera that features a recording resolution of 1280 x 1024 at a full 30 frames per second.

Mini Dome Network Camera. The Zavio D3200 is a mini dome network camera featuring an ultra compact housing with a diameter of only 99mm / 3.89 inches. This mini done network camera is designed for indoor applications, such as home or office video surveillance. The Zavio Megapixel D3200 comes with a fixed 4mm lens (for an 77° wide angle field of view) and a recording resolution of 1920 x 1080 at a full 30 frames per second (Sample Video). This camera is powered using PoE (Power over Ethernet) 802.3af, making installation as easy as running a single Cat-5 cable. CCTV to IP Converter. Sip. CCNA. Cloud Computing. InterVLAN Routing on Layer 3 Switches. Top 10 Programming Languages to Learn in 2014. Biometric Security - Product Compatibility. YubiKey Hardware. YubiKey NEO & NEO-n. Biometric Security - PlusID.

Wide dynamic range. Wireless LAN Controller. Wireless Access Points. i73-009r-007.pdf. Information Security Policy Templates. IP Network Topology. TelePresence Server - Products & Services.