Archive for 'CCSP' Category
The configuration of Cisco remote-access VPN (Easy VPN)
The general flowchart of the configuration:
Configuration:
version 12.3
hostname 26_2
!
enable secret 5 $1$nGGG$pyIANu7.xaKKQXVPqq.Dh1
!
! Define the local database
username cisco password 0 cisco
...
The configuration of DMVPN
HUB Router Configuration
r1#sh ru
hostname r1
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform...
Remote Access VPN with PIX（PPTP）
The basic interface configuration:
pix(config)#interface eth0 auto
pix(config)#interface eth1 auto
pix(config)#nameif eth0 outside security0
pix(config)#nameif eth1 inside security100
pix(config)#ip address outside 218.1....
Redundancy VPN
ã€Lab Topology】
ã€Lab Object】
Technical characteristics:
1. Achieve VPN redundance by using Cisco HSRP technology.
2. Be able to achieve VPN rapid switching.
3. The connected client is transparent...
DMVPN
ã€Lab Topology】
ã€Lab Object】
Technical characteristics:
1. Cisco provides a VPN resolution between multiple sites.
2. For common VPN, a client site communicates with other sites through central site or...
Port to Application Mapping & URL Filtering
ã€Lab Topology】
ã€Lab Process】 Continue Lab3 to configure 1. URLFiltering： GW(config)#ip inspect name CBAC http java-list 2 urlfilter GW(config)#ip urlfilter audit-trail GW(config)#ip urlfilter server vendor websen...
Context-Based Access Control
ã€Lab Topology】
ã€Lab Object】 Technical characteristics: 1. Traffic filtering CBAC checks not only the information of the network layer and the transport layer but also the information of the application layer. It can a...
Cisco Secure Firewall Services Module FWSM (2009) free download
How This Book Is Organized This book is organized into five sections that cover the basic introduction of firewalls, initial and advanced configurations, design guides and configuration examples, and features and functionality introduced in FWSM vers...
Easy packet captures straight from the Cisco ASA firewall
Whether you are troubleshooting a difficult problem or chasing some interesting traffic, sometimes you need to pull a packet capture. Of course, you could configure and deploy a sniffer, but that is not the only solution you have at your fingertips. Y...
Clientless SSL VPN remote access set-up guide for the Cisco ASA
Clientless SSL VPN remote access has its pluses and minuses. I’ve found it to be more complicated to set up and customize than remote access using the VPN client. However, with a bit of patience, you’ll find it’s actually quite flexi...