Archive for the 'IINS' Category
Thursday, August 20th, 2009
SubSeven – aka: Sub7 and Sub7Server is a backdoor program, in the form of a Trojan, used mostly for causing trouble on computer networks. It can be used for simple attacks such as hiding the mouse cursor and opening applications, but it can also be used for more serious attacks including retrieving all your personal [...]
Posted in Access-Lists, IINS, ISCW, Intrusion Prevention, SND, Security | No Comments »
Wednesday, August 19th, 2009
The big difference between the enable password and the enable secret is the encryption level.
The enable password by default is saved in clear text so when looking at the running-configuration of the router you will be able to read the password. It is possible to encrypt this password using the service password-encryption command.
The service password-encryption [...]
Posted in IINS, IPS, SND, SNRS, Security | No Comments »
Tuesday, August 18th, 2009
Before looking at how to mitigate a Smurf attack, let’s first understand what it is and why it’s such a problem.
A Smurf works on a weakness of IP and ICMP by sending an ICMP packet to the broadcast address of a network. For example, I could send an ICMP (Ping packet) to every computer on [...]
Posted in Access-Lists, IINS, ISCW, Intrusion Prevention, SND, Security | 2 Comments »
Monday, August 17th, 2009
IP spoofing is the act of camouflaging your IP address to make it look like you are someone else. Although IP spoofing is not an attack by itself, it is the starting point of many of the most common attacks found on today’s networks.
Most, but not all, of the spoofing attacks that take place start [...]
Posted in Access-Lists, IINS, ISCW, Intrusion Prevention, SND, Security | 3 Comments »
Friday, August 14th, 2009
One of the first and most important things to configure on any Cisco device after allowing telnet or SSH, is to restrict who is allowed to access the device. Of course having a password on the lines is the first step but if telnet is the method of communication, all passwords will be sent over [...]
Posted in Access-Lists, CCNA (ICND2), IINS, SND, SNRS, Security | No Comments »
Thursday, August 6th, 2009
In order to control what machines are plugged into your network, Cisco introduced the “switchport port-security” command.
In this tutorial I’m going to explain how to use this command, and different options available using it.
Below is the breakdown of the commands I used in the live demo, and an explanation of each.
AOIP.ORG_Switch# terminal monitor
Since I was [...]
Posted in BCMSN, CCENT (ICND1), CCNA (ICND2), IINS, SND, Security, Switching | No Comments »
Thursday, July 30th, 2009
As part of any management and audit solution for networking, Syslog is vital.
Syslog messages allow us to track system error messages, exceptions, and other information, such as device configuration changes.
It allows for historical reporting, depending on the application keeping the logs, as well as help in fault finding.
Cisco devices support 8 levels of logging information [...]
Posted in IINS, ISCW, Management, SND, SNRS | No Comments »
Tuesday, July 21st, 2009
Secure Shell (SSH) is a protocol that allows us to connect to devices securely by using encryption. Gone are the days were most networking engineers are happy with using plain telnet with it’s clear text transmission of data which could result in an attacker sniffing the line for usernames and passwords.
Configuring SSH on a Cisco [...]
Posted in IINS, SND, Security | No Comments »
Friday, June 12th, 2009
Hashing is very different from encryption even though so many people believe it is an encryption protocol. Yes it does scramble the data, so from that aspect it is an encryption program, but the big difference between hashing and encryption, is that Hashing is mathematically impossible to reverse. Now I’m not the kind of person [...]
Posted in CCNA (ICND2), CSVPN, IINS, Networking 101, Security | No Comments »
Thursday, June 11th, 2009
Ports are logical channels that devices use to identify a type of traffic.
If you can imagine that you and I have a 10 meter cable, that has 10,000 wires running through it, and I take 2 of the wires and attach them into the ends of a battery, and you choose 2 wires on your [...]
Posted in IINS, Networking 101, Security | No Comments »