 Sections
Syndication |
|
|
Blogroll:
||||| ALL Cisco-Network ARTICLES |||||
CCIE Journey, The CCIE Journey,
|
|
Author: alperen |
|
|
| Full name |
|
| Username |
alperen
|
| E-mail |
alperenmad@hotmail.com
|
| Short bio |
|
| Website |
|
|
Published articles: |
category: 3G Handset and Network Design - Hardware Components - Software Components - Rich Media Properties - The Objective: To Be Objective - Predicting Device Level Evolution - A Brief Overview of the Technology - Bandwidth Quantity and Quality - Bridging the Reality Gap - Before We Start: A Note about Terms - Spectral Allocations—Impact on Handset Hardware Design - Setting the Stage - Frequency and Wavelength Relationship - TDMA - Duplex Spacing for Cellular (Wide Area) Networks - Multiplexing Standards: Impact on Handset Design - CDMA - FDMA - Difference between CDMA and TDMA - Modulation: Impact on Handset Design - Future Modulation Schemes - TDMA Evolution - Multiplexing - Advantages of 5 MHz RF Channel Spacing - 5 MHz CDMA: IMT2000DS - Impact of Increasing Processor Power on Bandwidth Quality - Channel Coding - Source Coding - Convolution and Correlation - A Note about Radio Bandwidth Quality - Direct Conversion Receivers - To Sum Up - Design Issues for a Multiband Phone - Design Issues for a Multislot Phone - Transmitter Architectures: Present Options - Design Issues for a Multimode Phone - GPRS/EDGE Handset Hardware - The Design Brief for a Multislot, Multiband, Multimode Phone - Receiver Architectures for Multiband/Multimode - Issues to Resolve - GPRS RF PA - Manage Power-Level Difference Slot to Slot - Power Amplifier Summary - Getting Started - Multiband Frequency Generation - 3G Handset Hardware - Code Properties—Orthogonality and Distance - Code Capacity - Impact of the Code Tree and Non-Orthogonality - Common Channels - Synchronization - Code Properties - Dedicated Channels - Code Generation - Root Raised Cosine Filtering - Modulation and Upconversion - The Digital Receiver - The Receiver - Power Control - Correlation - The RAKE Receive Process - Receiver Link Budget Analysis - IMT2000DS Carrier-to-Noise Ratio - Received Signal Strength - Receiver Front-End Processing - IMT2000TC - GPS - Radio Bandwidth Quality/Frequency Domain Issues - Infrared - Bluetooth/IEEE802 Integration - Radio Bandwidth Quality/Time Domain Issues - Future Modulation Options - IMT2000 Channel Coding - Reed-Solomon, Viterbi, and Turbo Codes in IMT2000 - 3GPP2 Evolution - Characterizing Delay Spread - Practical Time Domain Processing in a 3G Handset - Conformance/Performance Tests - Impact of Technology Maturation on Handset and Network Performance - Implementation Options - CDMA2000 Downlink and Uplink Comparison - Linearity and Modulation Quality - 3G Handset Hardware Form Factor and Functionality - Frequency/Power Profile - Frequency Tolerance - Voice Encoding/Decoding (The Vocoder) - Impact of Application Hardware on Uplink Offered Traffic - Rich Media - CMOS Imaging - The Keyboard - The Smart Card SIM - Other Standards - The MPEG-4 Encoder - Battery Bandwidth as a Constraint on Uplink Offered Traffic - Impact of Hardware Items on Downlink Offered Traffic - Speaker - Display Driver and Display - How User Quality Expectations Increase Over Time - Alternative Display Technologies - MPEG-4 Decoders - Future Battery Technologies - Handset Power Budget - Processor Cost and Processor Efficiency - Handset Hardware Evolution - Flexible Bandwidth Needs Flexible Hardware - Adaptive Radio Bandwidth - Who Will Own Handset Hardware Value? - Handset Hardware Evolution - A Review of Reconfigurability - Typical Performance Trade-Offs - 3G Handset Software Form Factor and Functionality - Symbian - An Overview of Application Layer Software - Linux - Higher-Level Abstraction - Sun/Java - Microsoft - Palm - Exploring Memory Access Alternatives - The Cost of Transparency - Software/Hardware Commonality with Game Console Platforms - Text - The Distribution and Management of Memory - An Overview of the Coding Process - Voice - Source Coding - Add-On/Plug-On Software Functionality - Add-in/Plug-in Software Functionality: - Video - Image - Virtual Reality Modeling Language - Applying MPEG Standards - Object-Based Variable-Rate Encoders/Decoders - Quality Metrics - MExE-Based QoS - An Overview of Software Component Value - Digital Watermarking - Defining Some Terms - The SMS to EMS to MMS Transition - Operating System Performance Metrics - The OSI Layer Model - Automated Image Search Engines - Network Factors - MExE Quality of Service Standards - Maintaining Content Value - Authentication and Encryption - The Interrelated Nature of Authentication and Encryption - Digital Signatures - The Virtual Private Network - The IPSec Standard - Public Key Infrastructure - Security Management - The IETF Triple A - Hash Functions and Message Digests - Where to Implement Security - Key Management - Virtual Smart Cards and Smart Card Readers - DES to AES - Encryption and Compression - Smart Card SIMS - Biometric Authentication - Encryption Theory and Methods - Evolving Encryption Techniques - Public Key Algorithms: The Two-Key System - Prime Numbers - Congruency - Diffie-Hellman Exchange - Vulnerability to Attack - Working Examples - Over-the-Air Encryption - Authentication: Shared Secret Key - Secret Key Signatures - Digital Signatures - Public Key Cryptography - Handset Software Evolution - Java-Based Solutions - Developing Microcontroller Architectures - Searching for Quality Metrics in an Asynchronous Universe - Typical 3G Network Architecture - Hardware Innovations - Add-in Modules - Authentication and Encryption - The Impact of the Radio Layer on Network Bandwidth Provisioning - The Circuit Switch is Dead—Long Live the Circuit Switch - Looking to the Future - BTS and Node B Form Factors - Typical 2G Base Station Product Specifications - Agent Technology - Spectral Allocations—Impact on Network Hardware Design - 2G Base Stations as a Form Factor and Power Budget Benchmark - Node B Antenna Configuration - 3G Node B Design Objectives - The Benefits of Sectorization and Downtilt Antennas - Node B RF Form Factor and RF Performance - The 3G Transmitter - The Direct Conversion Receiver (DCR) - The RF/IF Section - Simplified Installation - The Digitally Sampled IF Superhet - Node B Receiver Transmitter Implementation - The 3G Receiver - QPSK Modulation - The Baseband Section - Technology Trends - Interpolation - System Planning - The Performance/Bandwidth Trade- Off in 1G and 2G Cellular Networks - TDMA/CDMA System Planning Comparisons - Radio Planning - Rules of Thumb in Planning - How System Performance Can Be Compromised - Timing Issues on the Radio Air Interface - Use of Measurement Reports - Uplink Budget Analysis - Long-Term Objectives in System Planning: Delivering Consistency - Wireless LAN Planning - Cellular/Wireless LAN Integration - Distributed Antennas for In-Building Coverage - GSM-MAP/ANSI 41 Integration - Approaching a Unified Standard - The SGSN Location Register - The GGSN GPRS Gateway Support Node - Mobile Network Architectures - GSM-MAP Evolution - GPRS Support Nodes - Session Management, Mobility Management, and Routing - Radio Resource Allocation - Location Management - Micro and Macro Mobility Management - Operation and Maintenance Center - Directional Antennas - Network Hardware Optimization - A Primer on Antennas - Dipole Antennas - The Flexibility Benefit - Dealing with Cable Loss - Smart Antennas - Omnidirectional Antennas - Installation Considerations - Dish Antennas - Switched Beam Antennas versus Adaptive Antennas - Distributed Antennas - Conventional versus Smart Antennas - A Note about Link Budgets and Power - Positioning and Location - Superconductor Devices - Smart Antennas and Positioning - Filter Basics - The Q factor - The Cavity Resonator - Circulators and Isolators - The Cavity Resonator in Multicoupling Applications - RF over Fiber: Optical Transport - Superconductor Filters and LNAs - Multichannel Combining - Hybrid Directional Couplers - Optical Transport in the Core Network - Optical Selectivity - Optical Transport Performance - Wavelength Division and Dense Wavelength-Division Multiplexing - Antennas - Superconductor Devices - Optical Components - The Challenge for IP Protocols - Offered Traffic - Radio and Network Bandwidth Transition - Protocol Performance - Characterizing Traffic Flow - Traffic Distribution - The Preservation of Traffic Value - Sources of Delay, Error, and Jitter Sensitivity - The Five Components of Traffic - Offered Traffic at an Industry Level - The Four Classes of Traffic - Admission Control versus Policy Control - Converging Standards - Managing the Latency Budget - Solutions to Delay and Delay Variability - Delivering Quality of Service - Delivering Wireless/Wireline Transparency - Traditional Call Management in a Wireless Network - Session Management in a 3G Network - The Challenges of Wireline and Wireless Delivery - The Cost of Quality - Meeting the Costs of Delivery - The Persistency Metric - Overprovisioning Delivery Bandwidth - Preserving and Extracting Traffic Value - Session Switching - Increasing Offered Traffic Loading - Archiving Captured Content - The Cost of Asymmetry and Asynchronicity - Considering the Complexity of Exchange - Predicting Offered Traffic Load - Wireless LAN Standards - Local Area Connectivity - Delivering a Consistent User Experience - Network Hardware Evolution - The Hierarchical Cell Structure - Sharing the Spectrum with Bluetooth - Joining the Scatternet Club - A Network within a Network within a Network - Dealing with Infrared - Plug-in Modules - The Bluetooth Price Point - Working in a Real Office Environment - Low-Power Radio and Telemetry Products - Mesh Networks - Broadband Fixed-Access Network Hardware Evolution - Fixed-Access Wireless Access Systems - Weather Attenuation Peaks - Setting the Stage for Satellite - Wireless Delivery Platforms - Satellite Networks - Early Efforts - The NIMBY Factor
category: 3G Wireless Networks - History of First-Generation Systems - IS-54B and IS-136 - Time Division Multiple Access (TDMA) - 1G Systems - GSM - Code Division Multiple Access (CDMA) - IS-95 CDMA - Roaming - A Little History - The Path to Third-Generation Technology - Handoff/Handover - The Amazing Growth of Mobile Communications - Mobile Communications Fundamentals - Wireless Migration - History of Second-Generation Systems - Basic Network Architecture - Harmonization Process - Air Interface Access Techniques - Overview of Following Chapters - Frequency Division Multiple Access (FDMA) - First Generation (1G) - Call Setup Scenarios - Handoff - Frequency Reuse - Spectrum Allocation - Channel Band Plan - General 1G System Architecture - 1G Systems - Generic MTSO Configuration - Second Generation (2G) - Generic Cell Site Configuration - Integration with Existing 1G Systems - GSM - TDMA (IS-54/IS-136) - Enhancements over 1G Systems - CDMA - Air Interface Channel Structure - GSM Traffic Scenarios - Location Update - GSM - GSM Network Architecture - The GSM Air Interface - Types of Air Interface Channels - Mobile-Originated Voice Call - Mobile-Terminated Voice Call - Handover - The IS-54 Digital Voice Channel - IS-95 System Description - Voice Channel Structure - Standard CDMA Cell Site Configurations - Offset Between Transmit and Receive - Pilot Channel Allocation - Speech Coding - Time Alignment - Control Channel - Traffic Calculation Methods - MAHO - IS-136 System Description - Frequency Reuse - Soft Handoffs - Power control - Pilot Channel PN Assignment - Handoff - Link Budget - Forward CDMA Channel - Traffic Model - Reverse CDMA Channel - iDEN (Integrated Dispatch Enhanced Network) - Call Processing - Cell selection - Handoffs - Cell reselection - Search Window - Fast reconnect - CDPD - Overview of the 3GPP Release 1999 Network Architecture - Third Generation (3G) Overview - Universal Mobile Telecommunications Service (UMTS) - Migration Path to UMTS and the Third Generation Partnership Project (3GPP) - UMTS Services - UMTS Speech Service - WCDMA Basics - Spectrum Allocation - Migration Path - GPRS Services - Overview of the 3GPP Release 4 Network Architecture - System Architecture - Spectrum - Commonality Between WCDMA/CDMA2000/CDM - The Evolution Generation (2.5G) What Is 2.5G? - Enhancements over 2G - Overview of the 3GPP Release 5 All-IP Network Architecture - Technology Platforms - Overview CDMA2000 - General Packet Radio Service (GPRS) - GPRS Network Architecture - GPRS Network Nodes - Transmission Plane - GPRS User Devices - The GPRS Air Interface - GPRS Control Channels - Packet Data Traffic Channels (PDTCHs) - GPRS Attach - Establishing a PDP Context - Combined GPRS/GSM Attach - Signaling Plane - GPRS Traffic Scenarios - The EDGE Network Architecture - EDGE Modulation - Air Interface Coding Schemes and Channel Types - High-Speed Circuit Switched Data (HSCSD) - CDMA2000 (1XRTT) - Inter-SGSN Routing Area Update - GPRS Network Node Dimensioning - Traffic Calculation and Network Dimensioning for GPRS - Air Interface Dimensioning - Enhanced Data Rates for Global Evolution (EDGE) - WAP - Deployment Issues - Deployment - System Architecture - Handoff - Frequency Planning - Traffic Calculation Methods - UMTS Basics - Migration Path from 2G to 2.5G to 3G - The WCDMA Air Interface - Uplink Spreading, Scrambling, and Modulation - Channelization Codes - Universal Mobile Telecommunications Service (UMTS) - Scrambling Codes - Downlink Spreading, Scrambling, and Modulation - Downlink Spreading - Uplink Modulation - Downlink Scrambling - WCDMA Air Interface Protocol Architecture - Downlink Modulation - Logical Channels - Power Control in WCDMA - User Data Transfer - Uplink DPDCH and DPCCH - WCDMA Channel Types - Transport Channels - Physical Channels - Physical Channelss - Downlink DPDCH and DPCCH - UTRAN Interfaces and Protocols - Functional Roles of the RNC - The UTRAN Architecture - Iur Interface - Establishment of a UMTS Speech Call - UMTS Packet Data Sessions - Handover - Iu-CS Interface - Iu-PS Interface - Iub Interface - Home Agent - Centralized - Router - Packet Data Transport Process Flow - CDMA2000 - The 3GPP Release 5 IP Multimedia Domain - Home Location Register (HLR) - Simple IP - Base Transceiver Station (BTS) - Simple IP with VPN - Base Station Controller (BSC) - Radio and Network Components - Network Structure - The 3GPP Release 4 Network Architecture - UMTS Core Network Evolution - Packet Data Serving Node (PDSN) - Distributed - Authentication, Authorization, and Accounting (AAA) - Regional - Walsh Codes - H.323 Call Establishment - The Session Description Protocol (SDP) - Voice-over-IP (VoIP) Technology - H.323 Call Release - Distributed Architecture and Media Gateway Control - Mobile IP (3G) - Why VoIP? - H.323 Fast Connect Procedure - The MEGACO Protocol - Forward Channel - The Basics of IP Transport - The Session Initiation Protocol (SIP) - MEGACO Transactions - Mobile IP with VPN - Radio Network - CDMA Channel Allocation - VoIP Challenges - The SIP Network Architecture - Reverse Channel - H.323 - SIP Call Establishment - SR and RC - H.323 Network Architecture - Information in SIP Messages - Power Control - Overview of H.323 Protocols - The Session Description Protocol (SDP) - Call Establishment Using MEGACO - MEGACO and SIP Interworking - VoIP and SS7 - The Sigtran Protocol Suite - Stream Control Transmission Protocol (SCTP) - MEGACO Commands - MEGACO Descriptors - Differentiated Service (DiffServ) - MultiProtocol Label Switching (MPLS) - Example of Sigtran Usage - 3G System RF Design Considerations - RF System Design Procedures - VoIP Quality of Service - New Wireless System Procedure - The Resource Reservation Protocol - Propagation Models - Cost 231—Hata - Quick - 2.5G or 3G Migration RF Design Procedure - Hata - Methodology - Cost231 Walfisch/Ikegami - Free Space - Link Budget - Site Rejection (SR) - Site Activation - Tower-Top Amplifiers - RF Design Guidelines - EMF Compliance - Cell Site Design - RF Design Report - Search Area - Coverage Objectives - Site Qualification Test (SQT) - Site Acceptance (SA) - Coverage Quality - Inter System Coverage - Subscriber Forecast - Network Design Considerations - Traffic Forecasts - Voice Usage Forecast - Data Usage Forecast - Network Node Dimensioning - BSC Dimensioning - UMTS RNC Dimensioning - Build-Ahead - Antenna System Selection - Base Station Antennas - Performance Criteria - Placement of Network Nodes and Overall Network Topology - Diversity - Dimensioning of Other Network Elements - MSC Dimensioning - Cost Optimization - PDSN and Home Agent Dimensioning - Interface Design and Transmission Network Considerations - Considerations for All—IP Networks - SGSN and GGSN Dimensioning - Network Reliability Considerations - UMTS System Design - Installation Issues - Network Design Principles - Wall Mounting - RF Coverage Analysis - Antenna Installation Tolerances - dBi and dBd - Link Budgets - Intelligent Antennas - RF Capacity Analysis - Example Uplink Cell Loading for Data Service - Calculating Uplink Cell Load - Example Uplink Cell Loading for Voice Service - Downlink Cell Load - Example Downlink Cell Loading for Voice Service - Design of the Radio Access Network - 1x - Iub Interface Dimensioning - 1xEV-DO - Determining the Number of RNCs - 1xEV-DV - Designing The UTRAN Transmission Network - System Traffic Estimation - UMTS Overlaid on GSM - CDMA2000 System Design - Design Methodology - Load Sharing - Deployment Guidelines - Cell site area - PDSN - QoS - Packet Zone - Radio Elements - Design Utilization Rates - Antenna Configurations - BTS - Channel Element (CE) Dimensioning - Packet Data Services (RF Environment) - Population density - Fixed Network Design Requirements - Penetration rate - IP Addressing - IP Addressing - Traffic Model - Walsh Codes - Link Budget - Soft Handoffs - Handoffs - Search Window - Packet Data Rates - PN Offset Assignment - CDMA2000-1X - Sample Basic Designs - Omni-Directional Cell Sites - IS-95 to CDMA2000-1X - CDMA2000-1X to 3X - Communication Sites - Communication-Site Types - Macro-Cell Site - Diversity Spacing - Directional Cell Site - Roof Mounting - Micro-cells - Wall Mounting - Pico-Cell Sites - Cable Runs - Antenna Mounting - In-building - Towers - IM Check Procedure - Isolation - Communication-Site Check List - Intermodulation
category: Cloud Computing - What Is the Cloud? - The Emergence of Billow Computing - The Global Nature of the Cloud - Cloud-Based Account Offerings - Grid Accretion or Billow Computing? - Is the Billow Model Reliable? - What About Acknowledged Issues Back Using Billow Models? - Benefits of Application a Billow Model - Challenges for the Cloud - What Are the Key Characteristics of Billow Computing? - First-Generation Computers - Third-Generation Computers - Hardware Evolution - The Evolution of Cloud Computing - Second-Generation Computers - Fourth-Generation Computers - Finding a Common Method to Communicate Using the Internet Protocol - Building a Common Interface to the Internet - The Appearance of Billow Formations—From One Computer to a Filigree of Many - Server Virtualization - Internet Software Evolution - Establishing a Common Agreement for the Internet - Evolution of Ipv6 - Parallel Processing - Vector Processing - Symmetric Multiprocessing Systems - Hosted and Managed Solutions - Web Services Delivered from the Cloud - Fully Integrated, Enterprise-Class Unified Communications - Advantages of CaaS - No Capital Expenses Needed - Communication-as-a-Service (CaaS) - Massively Alongside Processing Systems - No Accessories and Engineering Costs Incurred - Flexible Capacity and Feature Set - Infrastructure-as-a-Service (IaaS) - No Risk of Obsolescence - Guaranteed Business Continuity - Using Amazon EC2 to Run Instances - Amazon EC2 Account Characteristics - FAA Guidelines - Modern On-Demand Computing - Amazon’s Elastic Cloud
category: Cisco Multicast Routing and Switching - Token Ring Multicast Addressing - Protocol Operation - Configuring IGMP - IGMP Show and Debug Commands - IGMP-Connected Group Membership - Internet Group Management Protocol - Ethernet Multicast Addressing - CGMP Command Summary - Cisco Group Management Protocol - Cisco Group Management Protocol 2 - Monitoring CGMP - PIM-DM Assert Message - Protocol Independent Multicast — Dense Mode - PIM-DM Version 2 - PIM-DM Version Protocol Operation - PIM-DM Router Configuration - Neighbor Discovery - Monitoring and Debugging PIM Dense Mode - PIM-DM Packet Forwarding - Interface States - PIM-DM Interface Pruning - PIM-DM Interface Grafting - PIM Neighbor Table - PIM-DVMRP Networks - Route Exchange - Route Selection - DVMRP Configuration Commands - Broadcast/Multicast Conversion - Session Directory - IP Multicast Rate Limiting - Stub Multicast Routing - Load Balancing - Multicast Static Routes - Multicasting and Non-Broadcast Multi-Access Networks - Multicast Support Commands - Multicast over ATM - RSVP Configuration Commands - RSVP Scenarios - Debugging RSVP - Wildcard-Filter (WF) Style - Fixed-Filter (FF) Style - Reservation Styles - Shared Explicit (SE) Style - RSVP Reservation Model - Resource Reservation Protocol - RSVP Protocol Messages - Configuring and Monitoring RSVP
category: Wi-Fi Security - Bluetooth - What Gives Bluetooth Its Bite? - Wireless LAN Security Factors - Counterfeiting - Safeguards - OFDM - Wireless Hacking - Bluetooth Spectrum Hopping - Enabling Encryption Security - Wireless DoS Attack - PREFACE - Intrusion Detection Systems - Bluetooth - NetStumbler - Bluetooth Connections - WEP Encryption - Points of Vulnerability - Wireless Defined - IEEE - Differences between the Wireless Standards - NetStumbler Software Uses - Data transmission - Encrypting 802.11b? - Factors of Security - WECA - Conclusion: How Security Applies - Script Kiddies - Error correction - Network Interface Cards - Theft - Wi-Fi - Technology Comparisons - HomeRF - Facts - Enforcing Security - Cross-Platform Hacking - Access Control - The Many Flavors of 802.11 - SWAP Specification - Bluetooth Technology - Link Me Up! - Eavesdropping - Authentication - FHSS - Integrating Wireless Phone and Data - Bluetooth Background - Conclusion: The Future of the WLAN - Breaking In! - Encryption - DSSS - Issues in Wireless Security - The State of Wireless LAN Security - Securing Your WLAN - Your Best Defense Against an Attack - Authenticating Data - Conclusion: Keeping Your WLAN Secure - WLAN Vulnerabilities - Subtle Attacks - Common Security Pitfalls - Keeping Data Intact - Location! Location! Location! - RC4 - Active Attack Patterns - Client Authentication in a Closed System - Passive Attacks - Ensuring Privacy - Conclusion - Managing Keys - Shared Key Authentication - The Standard Algorithm - 802.11a - Conclusion: Evolution of the 802.11 Standard - Address Spaces - 802.11b - The 802.11 Standard - The 802.11 Standard in Security - 802.11d - Issues to Consider - Encryption - 802.11e - The 802.11 Standard Defined - Expanding the Network Standard - Timing and Power Management - 802.11f - Ad Hoc Networks - Roaming in 802.11 - 802.11g - Extended Service Set - Speed - 802.11h - Wireless Radio Standard - Standard “Flavors” of 802.11 - 802.11i - Commercial Security Infrastructure - Conclusion: Maintaining a Secure Infrastructure - 802.11 Security Infrastructure - Point-to-Point Wireless Application Security - Building a Private Infrastructure - Items to Compromise - Deploying Your Wireless Infrastructure - Point of Interception - Determining Requirements - Wireless Vulnerability - Choosing a Flavor of 802.11 - Building a Private Wireless Infrastructure - Security Design - Vulnerable Encryption - Monitoring Activity - Known WEP Imperfections - Why WEP? - Access Control - Defending Your Systems - IRL Security - 802.11 Encryption: Wired Equivalent Privacy - WEP Mechanics - Points of Vulnerability - Wireless Security Encryption - Keeping track - Insecure Keys - Wireless policy - Taking a Performance Hit - Conclusion: Finding Security in an Unsecured World - Wireless Authentication - Conclusion: Common Sense Access Controls - Privacy in Jeopardy - Safer Computing - Broadcast Monitoring - The “Human” Factor - Active Attacks - Defining the Bullet Points in a Security Policy - The “Evil” Access Point - Policy guidelines - Data Privacy - Training - Compromising Privacy in Public Places - Physical Security - Access methods - Unauthorized Access and Privacy - Protecting Your Privacy - Wireless Range - Passive Attacks - Public or Private? - Static Vulnerabilities - NIC Security - Wireless NIC Power Settings - Managing Keys in an Open System - Open System to WEP Authentication - 802.11b Security Algorithms - Port-based Network Access Control - Shared-key Authentication - Securely Identifying Wireless Traffic - 802.11 Networks on Windows XP - Secret Keys - Extensible Authentication Protocol - The WEP Algorithm - Conclusion: Open System versus Closed System Authentication - Open System Authentication - Hop Sequences - MAC Layers - FHSS versus DSSS - Direct Sequence Spread Spectrum - Frequency Allocation - Open System Security - It’s All About…Timing - 802.11 DSSS - Power Requirements - System Roaming - Increasing Data Transmission - Conclusion: Spectrum Safety! - FHSS Security - Building Extensions to Access Points - Issues in Wi-Fi Deployment - Directional Broadcasting - Wireless Equipment Vendors - Cost Concerns - WLAN Equipment Considerations - Wi-Fi Equipment Issues - Equipment Vendors - The Costs of Effective Security - Market Trends - Wired versus Wireless Security - Technology Issues - Vendor Trials - Access Point-centric Configuration - Conclusion: Next-generation Wireless Equipment - Mobile Device Configuration - Handheld Devices - Cross-platform Wireless Security Concerns - Cross-Platform Wireless User Security - Initialization Vector Collisions - WLAN Assignment Applications - Key Reuse - Cost Concerns - Macintosh WLANs - Lindows OS - Orinoco Wireless - Evil Packets - Real-time Decryption - Windows XP Wireless Connectivity - 802.11 Security Issues - Windows XP WEP Authentication - WLAN NIC Vendors - Conclusion: All Vendors Must Get Along! - Windows XP Wireless Functionality - Security Breach Vulnerabilities - Intercepting Wireless Network Traffic - Wireless 802.11b - Proximity Attack - PnP Networked Devices - Securing Your Network - WAP Attack! - Encryption - Commonsense Measures - Windows Users - Hacking the Network Printer - Printer Servers - Macintosh Computers - Linux Boxes - MAC the Knife - VPN WLAN - Patchwork - Passwords - Physical Access Point Security - Enhanced access-control schemes - Secure Access Point Management Issues - Establishing a wireless firewall - Controlling Access to Access Points - Preventive Measures - Reducing WEP Vulnerabilities - Portable Biometrics - Platform Bias - BlueSocket - Virtual private networks for mobile laptop users - Public Key Infrastructure - Vernier Network - Securing the WLAN - Wireless Laptop Network Support - Conclusion: Evolving Laptop Security - Enhancing Mobile Security - Administrative Security - Remote Users - Real Live People - Security Vulnerability Assessment - Intrusion Detection Systems - Risk Assessment - Host-based IDS - Authentication Solutions - Network-based IDS - wi-fi Passwords - Host IDS versus Network IDS - Why Have an IDS? - Building the Firewall - The Computer as the Decision Maker - Infrared - Wireless Connectivity - Access Control - Protecting Mobile Resources - Security Functionality - Building an Effective Mobile Security Policy - Seeking Security - HotSync - Why PDAs Require Privacy - Establishing a Security Policy - Privacy Concerns - SecurID - Maintaining Access Control - Data Encryption - How Hackers Fit into the Equation - Security Concerns - PDAs as Diagnostic Tools - Intranet Access with Your PDA - PocketDOS - PC emulation - Wireless Service Providers - PocketDOS - Conclusion: Mobile Wireless Computing - Pervasive Computing - Patriot Act, 2001 (USPA) - The Future of Wi-Fi Security? - Privacy Regulations - Fair Credit Reporting Act, 1970, 1996 (FCRA) - Children’s Online Privacy Protection Act of 1998 (COPPA) - Health Insurance Portability - Graham-Leach-Billey (GLB) Act, 2001 - Assessing WLAN Strengths - Evolving Security - Biometrics - Basic Encryption - Enhancing Your Wireless Security - WEP - Competing Standards - Protecting Access - Denial of Service Attacks - Evolving Standards - Wireless Mobile Computing - Scrambled Data - OS Platform Evolution - Linux - Preventing Network Intrusion Attempts - OS Platform Evolution - Windows XP Security - Macintosh OS X - Combining Future WLAN - Lindows OS - Palm and PocketPC - Smart Systems - Conclusion: The Future of Wireless Networking - Network Servers - Printer Servers - File Servers
category: CCSP-Cisco Certified Security Professional - Computer and Network Operating Systems - Technology Weakness - TCP/IP Wasn’t Designed for Security - Identify the Causes of Network Security Problems - Identify the Need for Network Security - Configuration Weakness - Understanding Network Security Threats - Policy Weakness - Network Device Weaknesses - External Threats - Internal Threats - Structured Threats - Unstructured Threats - The Four Primary Types of Network Threats - Techniques to Counteract DoS Attacks - Gaining Initial Access - Motivation and Good Sense - Social Engineering - Terrorism, Act of War, and Legal Implications - Password-Based Attacks - Well-Known DoS Attacks - Access Attacks - DRDoS - Reconnaissance Tools - The Four Primary Types of Network Attack - Repudiation - Session Replay and Hijacking - DDos - Electronic Reconnaissance - Data Manipulation Attacks - Denial of Service (DoS) Attacks - Reconnaissance Attacks - IP Spoofing - Gaining Trusted or Privileged Access - Public Information - What Belongs in a Network Security Policy - Acceptable Use Policy (AUP) - Cisco Security Wheel - Evaluating a Network Security Policy - Network Security vs. Network Operations - SAFE - Auditing Network Security - Identifying the Threats - Security Cost vs. Risk of Loss - Cisco AVVID and SAFE Strategies - Monitoring Network Security - Identifying the Assets - Why Create a Network Security Policy - AVVIDS - Securing the Network - Assets and Threats - The Balancing Act - Keep It Flexible - Network Operations and Network Security Training - Security vs. Ease of Use - Example of a Network Security Policy - Who Should Help Create the Security Policy? - Security vs. Services Provided - Make Time for Training and Signing Off - A Security Policy Is to Be Shared - Network Security Policy - Message of the Day Banner (MOTD) - Physically Secure the Devices - Improving Network Security - Privilege Levels - Outside Network - Network Security Threats Review - Demilitarized Zone (DMZ) - Inside Network - Secure Network Design Example - User Mode Passwords - Securing the Network 2 - Privilege Mode Passwords - Securing Administrative Access - Network Security Threats Questions and Answers - Password Encryption - Securing Network Devices - Using Access Control Lists to Secure the Network - Flexiblity - Packet Encryption - Scalability - Why Authenticate? - The periodic Command - Define a Time Range - Interoperability - Router Management - Standard Authentication Methods - Centralized Authentication - Limiting Access to HTTP Sessions - Traffic Filtering - TACACS+ - Multiple Backup Systems - Securing the Network Questions and Answers - Limiting the debug ip packet Analysis and, Therefore, CPU Use - Placement of Standard ACLs - STUDY TIP - TACACS+ and RADIUS Compared - TACACS+, RADIUS, and Kerberos Support - The show time-range Command - Extended Access Lists - Log Option - Standard ACLs - Driver’s License Analogy - Authentication and Authorization - Kerberos - Securing the Network Review - Restrict Application Traffic - Limiting Access to Telnet Sessions - Using Loopback Interfaces on Lab Routers - RADIUS Network - UDP vs. TCP - AAA Benefits - Cisco AAA Security Technology - The absolute Command - TCP’s Established Option - Show Line VTY Command - Client/Server Model - Challenge/Response - Increased Flexibility - The Cisco AAA Model - Reference the Time Range - Named Access Lists - Network Security Technology - Multiprotocol Support - Increased Security - NAS Servers - The time-range Command - Time-Based Access Lists - Define the Security Server—RADIUS - Enable AAA - Define the Method Lists - Define the Security Server—TACACS+ - AAA as Facilitator - Define the Method Lists—Login - Steps to Configure AAA - AAA System Components - Steps to Configure AAA - Authentication - Define RADIUS Server Key Option - Define TACACS+ Server Key Option - Steps to Configure AAA - Authorization - Implementing Authentication Method Lists - Implementing Authorization Method Lists - Define the Authorization Method Lists - Testing AAA Configuration - The show Commands - The debug Commands - Define the Accounting Method Lists - Steps to Configure AAA 3 - Cisco AAA Security Technology Questions and Answers - Cisco AAA Security Technology Review - Accounting - Implementing Accounting Method Lists - EAP Message Digest 5 (EAP-MD5) and EAP Transport LAN Services (EAP-TLS) - Features and Architecture of Cisco Secure ACS for Windows - CiscoSecure ACS for Windows and UNIX - Describe Cisco Secure ACS - Microsoft Challenge Authentication Protocol (MSCHAP) Support - Cisco Secure ACS and TACACS+/RADIUS Technologies - Features and Benefits - IEEE 802.1x—Access Control for Switched LAN Users - Multiple LDAP Support - CSDBSync - Device Command Sets (DCS) - CSLog - Per-User Access Control Lists (ACL) - CSAdmin - New NAS Wildcard, Multi-NAS, and Named Access Filters Features - CSAuth - Cisco Secure ACS for Windows Internal Architecture - User-Extensible Vendor-Specific Attributes (VSAs) - Cisco Secure ACS Benefits - CSTacacs and CSRadius - System Performance - CSMon - Preparing to Install UNIX ACS - Features and Benefits 2 - Features of CiscoSecure ACS for UNIX - access-list cisco Authentication Proxy - Lock and Key (Dynamic ACLs) access-list cisco - access-list cisco ACL Summarization - Turbo ACLs access-list cisco - access-list cisco Troubleshoot - access-list cisco Masks - Distributed Time-Based ACLs access-list cisco - Types of IP ACLs access-list cisco - access-list cisco introduction - access-list cisco IP Called ACLs - Process ACLs access-list cisco - access-list cisco Prerequisites Requirements - Reflexive ACLs access-list cisco - Define Ports and Bulletin Types access-list cisco - access-list cisco Time-Based ACLs Using Time Ranges - Apply ACLs access-list cisco - Commented IP ACL Entries access-list cisco - Define In-Out-Source-and Destination access-list cisco - Context-Based Admission Control - IP-ICMP-TCP-UDP access-list cisco - access-list cisco Edit ACLs - Multiple Fixtures On Switch Loop - Gathering Information Required During Installation - switch loop cisco network - NAS Minimum IOS Requirements - Transparent Bridging Frame Format - Network Requirements - Transparent Bridging Review Questions - Back Up Server Data - Spanning-Tree Algorithm Transparent Bridging - Installing Cisco Secure ACS 3-0 for Windows - Cisco Bridging Loops - Operating System Requirements - Transparent Bridging Operation - Hardware Requirements - Switch Loop - Transparent Bridging - Configure Shared Profile Components - Configure Administrators - Configure System - Configure the ACS Web Interface - Logging Off the HTML Interface - Configuration Area - Configure Users - Remote Administrative Session Issues - Display Area - Configure Reports - HTTP Proxy Servers - Accessing the HTML Interface - Configure Groups - NAT Gateway - Navigation Bar - Configure Network - Firewall Devices - Administering and Troubleshooting Cisco Secure ACS for Windows - Configure External User Database - Suggested Configuration Sequence - Packet Encryption - Define RADIUS Server Key Option - Configuring Cisco Secure ACS and TACACS+ - Configure NAS to RADIUS Server Communication - TACACS+ Overview - Define TACACS+ Server Key Option - Verifying TACACS+ - The show Commands - The debug Commands - Configure NAS to TACACS+ Server Communication - Cisco Secure ACS and TACACS+ and RADIUS Technologies Questions and Answers - Cisco Secure ACS and TACACS+ and RADIUS Technologies Review - Demilitarized Zone (DMZ)-Network-Cisco - Inside Network 2 - Outside Network 2 - Simple Secure Network Design - Perimeter Router Terms and Concepts - Perimeter Router Networks - Securing Cisco Perimeter Routers - Firewall DMZ Cisco Network - Verifying MD5 Authentication - Encryption and Tunneling - Hub and Switch Issues - Router Solutions - Configuring Authentication Example - Eavesdropping - Limit Unneeded TCP/IP and Other Services (Finger NTP CDP) - Denial of Service Attacks - Configure Reflexive Access Lists - Viewing Reflexive Access Lists - Dynamic NAT-Use a Standard ACL to Define the Local Addresses Eligible for Translation - Selecting the Interface to Use - Lack of Legal IP Addresses - Dynamic NAT-Link the Pool of Global Addresses with the Eligible Local Addresses - Display Dynamic Access Lists - NAT Technology and Terminology - Clearing the NAT Translation Table - Reflexive Access Lists - Device Interfaces - Dynamic NAT with Overloading (PAT) - Creating a Lock-and-Key System - Static NAT - Changing the PAT Default Inactivity Timeout Timers - Dynamic (Lock-and-Key) Access Lists - Configuring Static NAT - Debugging IP NAT - Unauthorized Access-Address Filtering - Confirming NAT Translations - Dynamic NAT-Define a Pool of Global IP Addresses to Be Allocated - Event Logging on Perimeter Routers - VPN, IPSec Encryption, and QoS Support - Configuring CBAC - Access List Violation Logs - Does the IOS Image Support Firewall and IPSec Features? - Set Audit Trails and Alerts - Securing Cisco Perimeter Routers Review - Cisco IOS Firewall Feature Summary - Set Global Timeouts and Thresholds - Securing Cisco Perimeter Routers Questions and Answers - Context-Based Access Control (CBAC) - Define Port-to-Application Mapping (PAM) - IOS Firewall Feature Set—CBAC - Quick Access List Review - Define Inspection Rules - Introduction to Cisco IOS Firewall - CBAC Advantages - Apply Inspection Rules and ACLs to an Interface - Router-Based Firewall Functionality - CBAC Limitations - Select the Interface - Rerouting Attacks - Integration with Cisco IOS Software - CBAC Process - Test and Verify - IOS Firewall Feature Set—CBAC Review - Performance Implications - IOS Firewall Feature Set—CBAC Questions and Answers - IOS IDS vs. Cisco Secure IDS - IOS Firewall—Intrusion Detection System - When to Choose the Cisco IOS Firewall IDS Features - Intrusion Detection System (IDS) - IOS Firewall Intrusion Detection System - Devices Supporting the IOS Firewall IDS Features - IOS Firewall Management - Cisco IDS Attack Signatures - Cisco Secure IDS Director Support - The ip audit po remote Command - Using ACLs with Named Audit Rules - Director vs. Logger Application - Disabling Individual Signatures - Multiple Routes to the Same Director - Using ACLs When Disabling Individual Signatures - Cisco IOS Firewall IDS Configuration Task List - Creating and Applying Audit Rules - Apply the Audit Rule to the Interface(s) - Initializing the IOS Firewall IDS - Creating an Audit Rule - Applying the Audit Name - Initializing the Post Office - Define Info Audit Actions - Define the Protected Networks - The ip audit notify Command - Define Attack Audit Actions - The ip audit po local Command - Create Named Audit Rules - Authentication Proxy Configuration Task List - The show ip audit configuration Command - User Profiles and Dynamic ACL Entries - The show ip audit interface Command - Idle Timer - The show ip audit all Command - Secure Authentication - Applying the Authentication Proxy - IOS Firewall—Intrusion Detection System Review - Comparison with the Lock-and-Key Feature - IOS Firewall—Intrusion Detection System Questions-Answers - Compatibility with Other Features - IOS Firewall—Authentication Proxy - Security Vulnerability Issues - Verifying the IDS Configuration - Cisco IOS Firewall Authentication Proxy - Before Configuring Authentication Proxy - The show ip audit statistics Command - How the Authentication Proxy Works - Define AAA Group Server (Optional) - AAA Server Configuration - Define Login Authentication Methods List - AAA Router Configuration - Enable Authorization Proxy (auth-proxy) for AAA - Enable AAA network - Activate Authentication Proxy Accounting - Define the Security Server - ACL Entry for Return Traffic from the AAA Server - Define the Security Server- - Define TACACS+ Server Key Option - Define the Security Server—RADIUS - Configuring the HTTP Server - The ip auth-proxy auth-proxy-banner Command - The ip auth-proxy name Command - The auth-proxy Interface Configuration - Authentication Proxy Configuration on the Router - The ip auth-proxy auth-cache-time Command - Verify Authentication Proxy Configuration - Clearing the auth-proxy Cache Displaying Dynamic ACL Entries - The debug Commands - CBAC Configuration - Other VPN Implementations - Cisco IOS Firewall Authentication Proxy Questions Answers - Why Use VPNs? - Cisco IOS IPSec Introduction - VPN Analogy - Cisco IOS Firewall Authentication Proxy Review - Virtual Private Networks 1 - Remote–Access - Site to Site - Layer 2 VPNs - Layer 3 VPNs - Tunneling Protocols - Layer Two Forwarding (L2F) Protocol - Layer 2 Tunneling Protocol (L2TP) - Generic Routing Encapsulation (GRE) - Authentication Header (AH) - IPSec Transforms and Transform Sets - Encapsulating Security Payload (ESP) - Transform Sets - Choosing Between AH and ESP - Other IPSec Encryption Standards - Transport Mode - Transport and Tunnel Mode - How IPSec Works - AH Transport and Tunnel Mode - IPSec Security Overview - ESP Transport and Tunnel Mode - Encryption Algorithm - Hashed Message Authentication Codes (HMAC) - Five Steps of IPSec Revisited - RSA Encryption Authentication - Cipher Text - HMAC-MD5-96 - Step 1—Determine Interesting Traffic - CAs and Digital Certificates - Cryptography Types - HMAC-SHA-1-96 - Step 2—IKE Phase One - Step 3—IKE Phase Two - Cisco IOS Cryptosystem Components - Encryption Alternatives - Diffie-Hellman Key Agreement (DH) - Main Mode - IPSec Data Transfer-Session Termination - How Encryption Works - Data-Link Layer network - Defining a DH Group - Aggressive Mode - Data - Network Layer network - Security Association (SA) - Peer Authentication - Key
A key is a fixed-length digital
sequence of characters used to scramble the source data - Application Layer - IKE SAs versus IPSec SAs - Preshared Key Authentication - Government Regulation - Hashing - IPSec Security Association (SA) - RSA Signature Authentication - Configure IPSec Encryption Tasks - Step 1-6 Ensure Access Control Lists Are Compatible with IPSec - Step 3-3 Configure Crypto ACLs - Crypto System Error Messages for ISAKMP - Task 1 Prepare for IKE and IPSec - Task 2 Configure IKE - Step 3-4 Configure Crypto Maps - Step 1-1 Identify IPSec Peers - Step 2-1 Enable or Disable IKE - Step 3-5 Apply the Crypto Maps to the Interface - Step 1-2 Determine the IKE (IKE Phase 1) Policies - Step 2-2 Create IKE Policies - Task 4 Test and Verify IPSec - IPSec Support in Cisco Systems Products - Develop the Parameter Preferences - Step 2-3 Configure Preshared Keys - Step 4-1 Display the Configured IKE Policies - Step 1-3 Determine the IPSec (IKE Phase 2) Policies - Task 3 Configure IPSec - Step 4-2 Display the Configured Transform Sets - Cisco IOS IPSec Introduction Questions-Answers - Step 1-4 Check the Current Configuration - Step 3-1 Configure Transform Set Suites - Step 4-3 Display the Current State of the IPSec SAs - Cisco IOS IPSec for Preshared Keys - Step 1-5 Ensure the Network Works Without Encryption - Step 3-2 Configure Global IPSec Security Association Lifetimes - Step 4-4 Display the Configured Crypto Maps - Configuring IPSec Manually - Configuring IPSec Manually Is Not Recommended - Certificate Distribution - Task 2—Configure CA Support - Step 2–3 Configure the Router Host Name and Domain Name - Task 4—Configure IPSec - IPSec with CAs - Step 2–1 Manage the NVRAM Memory Usage (Optional) - Step 2–4 Generate a RSA Key Pair - Task 5—Test and Verify IPSec - Cisco IOS CA Standards - Step 2–2 Set the Router Time and Date - Step 2–5 Declare a CA - Simple Certificate Enrollment Protocol (SCEP) - Network Time Protocol (NTP) - Step 2–6 Authenticate the CA - Cisco IOS IPSec for Preshared Keys Questions and Answers - CA Servers Interoperable with Cisco Routers - Simple Network Time Protocol (SNTP) - Step 2–7 Request Your Own Certificate - Cisco IOS IPSec Certificate Authority Support - Enroll a Device with a CA - The clock timezone Command - Step 2–9 Monitor and Maintain CA Interoperability (Optional) - Cisco IOS IPSec for Preshared Keys Review - CA Support Overview - Configure CA Support Tasks - The clock set Command Setting the Hardware Clock - Step 2–10 Verify the CA Support Configuration - Digital Certificates - Task 1—Prepare for IKE and IPSec - Configuring Daylight Saving Time - Task 3—Configure IKE - RSA Encrypted Nonces Overview - Task 2—Configure RSA Keys - Cisco IOS IPSec Certificate Authority Support Questions Answers - Cisco IOS IPSec Certificate Authority Support Review - Cisco IOS Remote Access Using Cisco Easy VPN - Introduction to Cisco Easy VPN - Cisco Easy VPN Server - Client Connection Process - Cisco Easy VPN Remote - Cisco VPN 3.6 Client - Easy VPN Server Configuration Tasks - Preconfiguring the Cisco VPN 3.6 Client - Router MC v1.1 Enhanced VPN Features - Router MC Server Requirements - Router MC Client Requirements - Router MC User Permissions - Management Center for VPN Routers - Features and Benefits network - Router MC v1.1 Firewall Features - Cable DHCP Proxy Enhancement - Peer Host Name Enhancement - Proxy DNS Server Support - Simultaneous Easy VPN Client and Server Support - Easy VPN Remote Phase Two - Supported VPN Servers - Phase Two Features-Manual Tunnel Control - NAT Interoperability Support - Client Firewall Statistics - Cisco IOS Remote Access Using Cisco Easy VPN Review - Cisco IOS Remote Access Using Cisco Easy VPN Questions Answers - Cisco VPN Firewall Feature for VPN Client - The Central Policy Protection Feature - Firewall Rules - Client-Server Feature - Cisco VPN 3002 Client Devices - Cisco Products Enable a Secure VPN - Cisco VPN 3002 Client Models - Client and Network Extension Modes - Standards Supported - Cisco VPN 3002 Hardware Client Features - Cisco VPN 3000 Concentrator Devices - Standards Supported network - Cisco VPN 3000 Concentrator Models - Cisco VPN 3000 Concentrator Features - Cisco VPN 3005 Concentrator - VPN 3000 Concentrator Client Support - Cisco VPN 3015 Concentrator - Cisco VPN 3030 Concentrator - Cisco VPN 3060 Concentrator - Cisco VPN 3080 Concentrator - Side-by-Side Model Comparison - Cisco VPN Hardware Overview Review - Cisco VPN Hardware Overview Questions Answers - Command-Line Interface (CLI) Basics - Initial Configuration - Setting Group and User Defaults - Other Configuration Options - Concentrator Manager (Web Interface) - Setting the Public Interface - Setting IPSec Defaults - Configuration | Policy Management | Access Hours - Connecting to the Concentrator Manager - Defining the Default Gateway (Optional) - Setting Client Defaults - Configuration | System | IP Routing - Manager Organization - Verifying Configuration - Split Tunneling Policy - Remote Access Networks - Adding the Static Routes - Client Firewall Requirements - VPN Concentrator User Interfaces and Startup - LAN-to-LAN Networks - Define Inside Address Assignment Method - VPN 3002 Hardware Client Defaults - CLI Quick Configuration Steps - Remote Access VPNs with Preshared Keys - Define Inside Address Pool for Remote Users - Creating or Modifying Other Groups - Concentrator Manager Quick Configuration - Preshared Keys - Configuring Groups and Users - Creating or Modifying Users - Digital Certificates - VPN Concentrator and Certificates - Enrolling and Installing Certificates - Using SCEP to Manage Certificates - Using the Certificates - Configure Cisco VPN Client Support - VPN Client Autoinitiation Feature - Administer and Monitor Remote Access Networks - Cisco VPN 3000 Remote Access Networks Review - Cisco VPN 3000 Remote Access Networks Questions Answers - Common Configuration Tasks - Configuring Cisco VPN 3002 Remote Clients - The VPN 3002 in the Network - Configuring the 3002 Device - Change the Admin Password - Basic Configuration for the VPN 3002 - Modifying Options - Set the System Time, Date, and Time Zone-Configure the Private Interface - Configuring the DHCP Server - Configure the Public Interface - Configure the IPSec - Choose Client (PAT) Mode or Network Extension Mode - Configure IPSec Backup Servers—VPN 3000 Concentrator - Delete with Reason - IPSec Server Load Balancing - Other VPN 3002 Software Features - H.323 Support in PAT Mode - Simple Certificate Enrollment Protocol (SCEP) - Individual User Authentication - XML Management - LEAP Bypass - Reverse Route Injection (RRI) - IPSec Backup Servers - AES Support and Diffie-Hellman Group 5 - Configure IPSec Backup Servers—VPN 3002 Client - Push Banner to VPN 3002 - Auto-Update Feature - Configuring Cisco VPN 3002 Remote Clients Questions Answers - Configuring Cisco VPN 3002 Remote Clients Review - Adding a Tunnel - LAN-to-LAN Routing - LAN-to-LAN Networks with Digital Certificates - Cisco VPN 3000 LAN-to-LAN Networks Review - The VPN Concentrators in LAN-to-LAN VPNs - NAT Issues - Cisco VPN 3000 LAN-to-LAN Networks Questions Answers - Cisco VPN 3000 LAN-to-LAN Networks - NAT Transparency - LAN-to-LAN Networks with Preshared Keys - IPSec over TCP - Configure Network Lists - IPSec over NAT-T - Define the IKE Proposals (Optional) - IPSec over UDP - Create the Tunnel - LAN-to-LAN VPN with Overlapping Network Addresses - CiscoSecure PIX Firewalls - The logging Commands - Getting Started with the Cisco PIX Firewall - FTP and URL Logging - Basic PIX Firewall Configurations - Verifying and Monitoring Logging - ICMP Traffic to the Firewall - DHCP Server Configuration - Firewall and Firewall Security Systems - Time Setting and NTP Support - Configuring the DHCP Server Feature - CiscoSecure PIX Firewall Technology - How NTP Works - DHCP Client - Basic PIX Firewall Configuration - NTP and PIX Firewalls - Firewalls as a DHCP Client and Server - CiscoSecure PIX Firewalls questions answers - Syslog Configuration - Getting Started with the Cisco PIX Firewall Chapter Review - Access Through the PIX Firewall - Static Translations - Adaptive Security Algorithm - Network Address Translation - Security Levels - Port Address Translations (PAT) - Stateful System - Using NAT and PAT Together - Translations - Names and Name Commands - Connections - Configuring DNS Support - Translations and Connections - Getting Started with the Cisco PIX Firewall Questions and answers - Transport Protocols - Basic ACL Statements - ICMP ACL Statements - TurboACL - Downloadable ACLs - Content Filtering-ActiveX Blocking-Java Blocking-Websense Filtering - Object Grouping - Access Control Lists (ACLs) - Conduit Statements - Using Access Lists-Access-Group Statement - Access Through the PIX Firewall Review - Firewall Privilege Levels - Access Through the PIX Firewall Questions Answers - Advanced Protocol Handling - Advanced PIX Firewall Features - Application Inspection - Remote Access - The fixup protocol Command - Defining the AAA Server - Supported Applications and Protocols - Local User Database - Fixup Protocol Examples - Configuring AAA Features - Other Supported Protocols and Applications - PIX Routing Configuration - Command-Level Authorization - SNMP Community Key - Attack Guards - Enabling SNMP Traps - Intrusion Detection - Verify SNMP Configuration - Shunning - Logging to the SNMP Management Station - Managing SNMP Services - PIX Firewall SNMP Support - SNMP Contact and Location - SNMP Management Station - Advanced PIX Firewall Features Review - Advanced PIX Firewall Features Questions and answers - Task 1: Prepare to Configure VPN Support - Firewalls and VPN Features - Task 2: Configure IKE Parameters - Task 3: Configure IPSec Parameters - Cisco VPN Client - Scale PIX Firewall VPNs - PPPoE and the PIX Firewall - Pix Firewall Enables a Secure VPN - CiscoSecure PIX Firewalls Review - IPSec Configuration Tasks - Firewalls and VPN Features Questions and answers - PDM Overview - PDM Operating Requirements - Prepare for PDM - Installing PDM on a PIX Firewall - Starting PDM - Using the PDM Startup Wizard - Using PDM to Configure the PIX Firewall - Managing and Maintaining the PIX Firewall - Understanding Failover - Failover Configuration with Failover Cable - LAN-Based Failover Configuration - Verifying Failover Configuration - PIX Failover Feature - PIX Devices with a Floppy Drive - PIX Devices Without a Floppy Drive - Before Getting Started - Password Recovery - Attack Types - Attack Phases - Upgrading the PIX OS - Managing and Maintaining the PIX Firewall Review - Managing and Maintaining the PIX Firewall Questions Answers - Intrusion Detection System Overview - Security Threats - The Attack Types and Phases - Monitoring - Analyzing - Host- and Network-Based IDSs - Centralized Alarm Display and Management - IDS Triggers - Sensor Response - Intrusion Detection System Overview Summary - Intrusion Detection System Overview Questions and answers - Cisco Secure Intrusion Detection System - Intrusion Detection Systems Overview - CIDS Operations and Functionality - CIDS Software Architecture - CIDS Commands - CIDS Architecture - CIDS Directory Structure - CIDS Log Files - Cisco Secure Intrusion Detection System Review - Cisco Secure Intrusion Detection System Questions Answers - Sensor Installation and Configuration Overview - Sensor Deployment Considerations - Network Entry Points - Network Size and Complexity - The Amount and Type of Traffic - IDS Device Manager - Connecting to the IDS Device Manager - IDS Device Manager GUI Interface - Device Area Configuration - Configuration Area - Monitoring Area - Administration Area - Connecting to Your Network Sensor Appliance - Sensor Bootstrap - Signature Types - Sensor Installation and Configuration Review - Signature Severity - Sensor Installation and Configuration Questions and Answers - Signature and Alarm Management - CIDS Signatures - Signature Series - Signature Implementations - Sensor Installation - Signature Classes - Event Viewer - Managing Alarms - Event Viewer Customization - Preference Settings - Signature and Alarm Management Review Questions and Answers - Signature and Alarm Management Review - Cisco SAFE Implementation Questions and Answers - ICMP Access Lists - Access Control Lists Cisco - Named Access Lists - Access List Basics - Standard Access Lists - Cisco SAFE Implementation - Verifying ACLs - Preparation Documents - Extended Access Lists - Exam Topics - TCP Access Lists - Skills Required for the Exam - UDP Access Lists
category: Cisco IP Routing Protocols - Troubleshooting Problems on the Network Layer - Internet Layer - Data-Link Layer - Troubleshooting Problems on Data-Link Layer - The Layered Architecture of the TCP/IP Model - The Layered Architecture of the OSI Model - Application Layer - Application Layer - The Layered Troubleshooting Approach - Mapping the TCP/IP and OSI Models - Network Layer - Using the Layered Approach - Transport Layer - Troubleshooting Problems on the Physical Layer - Session Layer - Troubleshooting Problems on the Application Layer - Transport Layer - Presentation Layer - Troubleshooting Problems on the Transport Layer - Network Access Layer - Physical Layer - Challenges and Issues of Complex Networks
category: CCNP CCIE Complete - The Advantages of NAT - NAT overloading inside global IP addresses - Configuring NAT Using Overloading - Scalability Limitations of Link-State Routing Protocols - IGRP Redistribution - Routing Tables - Enhanced Interior Gateway - Link-State Routing - An IP frame showing the protocol type to be EIGRP - Reaching the Destination - Routing Protocol Information - Testing and Troubleshooting Routes - Reserved IP Addresses - Number of IP Addresses - Valid Addresses for Server Farm Segment in Figure 2.2 - Route Summarization Example 1 - IP Unnumbered - IPv6 global unicast address format - IPv6 Multicast Address - The Disadvantages of NAT - Using TCP Load Distribution - Configuring TCP Load Distribution - Interior Gateway Routing Protocol - IGRP redistribution example - Populating the Routing Table - Route Tagging - Link-State Comparisons - Diffusing Update Algorithm - Convergence - Viewing Neighbor Information - Traceroute - Class A Addresses - Maximum Number of Hosts Bits in Subnet Mask Subnet Mask - Valid IP Addresses for All Four Segments Used in Figure 2.2 - IP Network Address Binary Equivalent - IP Helper Address - Converting a MAC address to an EUI-64 address - Network Address Translation - NAT Traffic Types - load distribution steps - Configuring NAT for Overlapping Addresses - IGRP Features and Operation - Automatic redistribution example - Statically Defined Routes - Neighbor Relationships - Link-State Comparisons - EIGRP Metrics - RIP Convergence - Viewing EIGRP Packets - IP Addressing - Class B Addresses - Number of Hosts Needed in Figure 2.2 - Valid IP Addresses for All Four Segments Used in Figure 2.2 - Route Summarization Example 2 - Decimal-to-Binary Conversion Chart - Link-local unicast address - Understanding Network,Address Translation - Unsupported Traffic Types - Overlapping Networks - Verifying and Troubleshooting the NAT Configuration - IGRP Features - IGRP Configuration
The basic configuration of IGRP is very straightforward - Distance-Vector Routing - Route Calculation - Classful Routing - EIGRP Tuning - IGRP Convergence - OSPF Operation in a Single Area - Review of IPv4 Addressing - Class C Addresses - Description of Segment - Discontiguous networking example - Route Summarization Example 3This example will show you how to summarize 172 - An Overview of IPv6 Addressing - Link-local unicast address - NAT Terminology - NAT Operations - NAT translating overlapping addresses - Commands to Clear the NAT Table - IGRP Timers - IGRP configuration example - Distance-Vector Comparisons - Redundant Link Calculation - Classless Routing - Redistribution for EIGRP - EIGRP Convergence - IP Terminology - Extending IP Addresses - Networks, Hosts, and Subnets for Figure 2.2 - Cisco and CIDR - Route Summarization Example 4 - Decimal-to-Binary Chart - IPv4-Compatible IPv6 Address - The Elusive Terminology of NAT - Translating Inside Local Addresses - Configuring NAT - IGRP and EIGRP - IGRP Metrics - Verifying and Troubleshooting IGRP - Distance-Vector Comparisons (continued) - The best-route selection process - The Final Decision on What Routes Populate the Routing Table - Configuring EIGRP - Link-State Convergence - The Hierarchical IP Addressing Scheme - IP address example - Networks, Hosts, and Subnets for Figure 2.2 - Classless Interdomain Routing - Route Summarization Example 5 - IPv6 Address Format - IPv4-Mapped IPv6 Address - How NAT Works - The process of translating inside local addresses - Configuring Static NAT - Scalability Features of Routing Protocols - Metric Association of K-Values - Building Scalable Cisco Internetworks (BSCI), Routing Principles - Route Information - ROUTING INFORMATION PROTOCOL (RIP) - Topology Table Information - Default Administrative Distance - Verifying and Troubleshooting EIGRP - Verifying and Testing a Route - Network Addressing - Variable-Length Subnet Masks - IP Address Range for Switched Subnet in Figure 2.2 - Route Summarization - Design Considerations for Route Summarization - IPv6 Address Types - Unspecified Address - Which Camp Are You From? - Overloading Inside Global Addresses - Configuring Dynamic NAT - Distance-Vector Protocol Scalability Issues - Load Balancing - Components of Routing Data - Viewing Route Updates - RIP Migration - Updates and Changes - Default Administrative Distance (continued) - Route Information - Verifying Routes - The Three Classes of IP Addresses Used in Networks Today - VLSM design example - Valid Addresses for Ethernet Segment in Figure 2.2 - Route summarization - Discontiguous networking example,IP Addressing - Global Unicast Address - IPv6 Anycast Address - NAT inside/outside and local/global relationship - Configuring OSPF for a Stub Area - Configuring OSPF for a Not-So-Stubby Area - Viewing OSPF Packets - Network Entity Titles - LSP Flooding - Routing Protocol Information - OSPF Hello Packet Information - LSA updates and flooding - Non-Broadcast - Configuring OSPF—Single Area - show ip ospf database - Router roles - RouterB - Totally Stubby Area Configuration - OSPF Virtual Links - Integrated IS-IS - Network entity title formats - SPF Algorithm - Viewing Neighbor Information - Neighbor States - LSA Acknowledgment and Validation - Point-to-Point - OSPF area topology - show ip ospf interface - Link-State Advertisements - RouterC - Router B - OSPF virtual link - Integrated Intermediate System to Intermediate System - Neighbor and Adjacency Initialization - Network Types - Viewing SPF Information - OSPF peer initialization - SPF Tree Calculation - Point-to-Multipoint - Configuring OSPF—Single Area (NBMA Environment) - show ip ospf neighbor - LSA Types - Configuring Multi-Area OSPF - Router C - Verifying and Troubleshooting OSPF - Integrated IS-IS Operation - Designated Router - Configuring IS-IS - Border Gateway Protocol - Adjacency Requirements - NBMA Overview - Point-to-point vs. point-to-multipoint - Broadcast Configuration - Interconnecting OSPF Areas - OSPF Area Types - Stub Area Configuration - Router D - Route Information - IS-IS Terminology - IS-IS PDUs - Multiple area IS-IS network - Open Shortest Path First - OSPF adjacencies for multi-access networks - NBMA Environments - Configuring OSPF - RouterC(config) Point-to-Multipoint - OSPF Scalability - Stub area - OPSF configuration - Configuring OSPF for a Totally Stubby Area - Link-State Database Information - IS-IS Areas - Hello PDU - Verifying and Troubleshooting IS-IS - OSPF Terminology - DR and BDR Election Procedure - Network Types - Discovering the Network with OSPF - Verifying OSPF Configuration - OSPF areas - Basic Multi-Area Configuration - Router B - Not-So-Stubby Area Configuration - Routing Protocol Information - OSPF areas - Link-State PDU (LSP) - Route Information Gateway - OSPF Operation - LSA Flooding - Broadcast - Point-to-Point - OSPF show Commands - Categories of Multi-Area Components - Sample multi-area configuration - Router C - OPSF configuration - Viewing Neighbor Information - IS-IS areas - Sequence Number PDU (SNP) - Link-State Database Information - Neighbor and Adjacency Initialization - LSA Update Multicast Addresses - NBMA broadcast implementation - Broadcast - show ip ospf - OSPF Router Roles - RouterA - Router D - Message Header Format - BGP Identifier - Unfeasible Routes Length Field - NOTIFICATION Message - OpenConfirm - Transit AS - Basic BGP implementation - Redistributing Routes into BGP - Route Reflection - Message header format - Optional Parameters Length - IP address prefix formats - Error Codes and Related Error Sub-codes - Established state - Transit and stub ASs - iBGP and eBGP Configuration - FIGURE 8 . 1 6 Redistributing routes into BGP - Non–fully meshed iBGP - Type Field Values - Optional Parameters - Total Path Attributes Length Field - Neighbor Negotiation - Route Selection - Stub AS - iBGP and eBGP network - Verifying and Troubleshootingh - OPEN Message - Optional Parameters field format - Path Attributes Field - Finite State Machine - Routing Information Bases - no synchronization - eBGP Multihop Configuration - Route Information - Border Gateway Protocol - OPEN message format - UPDATE message format - Attribute Type Code - Idle state - BGP route processing - Route Aggregation - eBGP multihop - Viewing Neighbor Information - BGP Terminology - Version - Unfeasible Routes Length Field - Attribute Type Codes - Connect state - Decision Process - When and When Not to Use BGP - Injecting Routes into BGP - Debugging BGP Information - BGP Operation - My Autonomous System - Withdrawn Routes Field - Network Layer Reachability Information (NLRI) Field - Active state - Route Filtering - Configuring BGP - Manually Injecting Routes into BGP - Advanced Border Gateway Protocol - Multiple autonomous systems - Hold Time - Unfeasible Routes Length Field - KEEPALIVE Message - OpenSent state - BGP Synchronization - Minimal BGP Configuration - Manually injecting routes into BGP - Overcoming Scalability Limitations of iBGP - Peer Groups - Access Groups - Verifying and Troubleshooting - Redistribution into IGRP - RIP - Summarization solution - Configuring confederations - BGP Filters - Peer groups - Access groups - Debugging policy-based routing - EIGRP - IGRP - Filtering with Redistribution - Distribute Lists - Peer group configuration - Distribute Lists - Redistribution - OSPF - EIGRP - Filtering during redistribution - Route reflection - Distribute list - Multi-homing - IGP distribute list - Classless to Classful Redistribution - OSPF redistribution - OSPF - Summarization - Configuring Route Reflection for iBGP - Prefix Lists - Resolving Next-Hop Issues - Source-Based Policies - Filtering with Redistribution - IS-IS - IS-IS - Basic route reflection - Prefix lists - Route Aggregation - Type of Traffic Policies - Configuring Redistribution - IS-IS redistribution - Static Routes - Multiple route reflector cluster - Route Maps - Route Optimization - Type of Service Policies - RIP - Connected Interfaces, Static Routes, and Default Routes - Default Routes - Confederations - Communities - Filtering - Type of service policies - Redistribution into RIP - Connected Interfaces - Classless to Classful Redistribution - Configuring Confederations - Enterprise Composite Module - Three-layer campus hierarchy - Core Layer for the Campus Network - EIGRP - Looking Back at Traditional - Introducing the New Campus Model - OSI Encapsulation - The Cisco hierarchical model - Applying the Building Blocks - Blocks Supported by Routing Protocols - Scaling Layer 2 Backbones - Enterprise SAFE block diagram - Access Layer for the Campus Network - IP Address Assignment - EIGRP summarization - Performance Problems and Solutions - Network Services - Layer 2 Switching - Core Layer - Switch Block - Spanning Tree Protocol (STP) - Cisco’s opinion - Sample network - Integrated Intermediate System to Intermediate System (IS-IS) - Understanding Broadcast Effects - Remote Services - Limitations of Layer 2 Switching - Distribution Layer - Switch Block Size - Scaling Layer 3 Backbones - Local VLANs Finance Sales Sales Finance Support Sales Support - West region network - IS-IS summarization - The 80/20 Rule - Enterprise Services - Routing - Access Layer - Core Block - Fast Convergence - Design Considerations - Distribution Layer - Wyoming network - BGPv4 - The New 20/80 Rule - Using Switching Technologies - Layer 3 Switching - Using Cisco Catalyst Products - The core block - Automatic Load Balancing - Three-Layer Hierarchical Design Model - Distribution Layer for the Campus Network - Considering Routing Protocols - Building Cisco Multilayer Switched Networks (BCMSN) - A 20/80 network - Open Systems Interconnection (OSI) Model - Layer 4 Switching - Access Layer Switches - Collapsed core - Elimination of Peering Problems - Access Layer - Core Layer - OSPF - The Campus Network - Virtual LANs - Data Encapsulation - Multilayer Switching (MLS) - Distribution Layer Switches - Dual Core - SAFE - Access Layer for the WAN Network - Core Layer for the WAN Network - OSPF summarization - Understanding Campus Internetworks - VLANs break up broadcast domains - Data encapsulation at each layer of the OSI reference model - Understanding the Cisco - Core Layer Switches - Core Size - Using FastEthernet at All Three Layers - Using Gigabit Ethernet in the Enterprise - Connecting to the Console Port - Setting the Host Name - 2950 and 3550 Switches - IEEE Specifications for FastEthernet - Protocol Architecture - Connecting to an Ethernet Port - 2950 and 3550 Switches - Configuring the Port Speed and Duplex - Connecting the Switch Block - Media Independent Interface (MII) - Comparing 10BaseT, FastEthernet, and Gigabit Ethernet - 4000 Switch Startup - 4000 Series Set-Based Switch - Verifying Connectivity - Understanding Cable Media - Full-Duplex Ethernet and FastEthernet - Time Slots - 2950 Switch Startup - 2950 and 3550 Switches - 2950 and 3550 Switches - The Background of IEEE Ethernet - Using Full-Duplex Ethernet in the Distribution Layer - Comparison of Gigabit Ethernet Technologies - Cisco IOS- and Set-Based Commands - Identifying Switch Interfaces - LAN Segmentation Using Switches - Auto-Negotiation - Connecting and Logging In to a Switch - Setting the Passwords - 4000 Series Set-Based Switch - 10BaseT - Comparison of FastEthernet Technologies - Jumbo Frames - 4000 Series Set-Based Switch - 2950 and 3550 Switches - FastEthernet - Gigabit Ethernet - Cabling the Switch Block Devices - 2950 and 3550 Switches - 4000 Series Set-Based Switch - Security - Assigning VLAN Memberships - VLAN Identification Methods - 4000 Series - Transparent - Configuring the Domain - Flexibility and Scalability - Static VLANs - Inter-Switch Link Protocol (ISL) - 2950 and 3550 Series Switches - VTP Advertisements - Verifying the VTP Configuration - The Collapsed Backbone and the VLAN - Dynamic VLANs - Standard for Virtual Bridged Local Area Networks (IEEE 802.1Q) - Verifying Trunk Links - VTP advertisement content - 4000 Series - Switches remove the physical boundary - Configuring Static VLANs - Trunking - Using VLAN Trunk Protocol (VTP) - Management domain name - 2950 and 3550 Series Switches - VLANs, Trunks, and VTP - Scaling the Switch Block - Catalyst 4000 Series - Configuring Trunk Ports - VTP Modes of Operation - Subset Advertisements - Adding to a VTP Domain - Understanding the Design Benefits of Virtual LANs - Defining VLAN Boundaries - Catalyst 2950 and 3550 Series - 4000 Switch - The Threat of High Revision Numbers - Configuring VTP - VTP Pruning - A flat network structure - End-to-End VLANs - Identifying VLANs - 2950 and 3550 Series - Server - Configuring the VTP Version - Auxiliary VLANs - Broadcast Control - Local VLANs - Frame Tagging - Clearing VLANs from Trunk Links - Client - Configuring the VTP Mode - 802.1Q Tunneling - Layer 2 Switching and the Spanning Tree - Layer 2 LAN Switching - Comparing Bridges to Switches - Spanning tree example - Loop Avoidance - Selecting the Root Port - LAN Switch Types - Broadcast Storms - STP Link Cost - Selecting the Designated Port - Store-and-Forward - Three Switch Functions at Layer 2 - Multiple Frame Copies - Spanning Tree Port States - Cut-Through (Real Time) - MAC Table Instability - STP default timers - FragmentFree (Modified Cut-Through) - Address Learning - Spanning Tree Operation - Convergence - Configuring Spanning Tree - How switches learn hosts’ locations - Selecting the Best Path - Sizing the Network - Detecting Loops - Forwarding/Filtering Decision - Selecting the Root Bridge - Spanning Tree Example - Bridge ID priority 542 - Broadcast and Multicast Frames - BPDUs - Using Spanning Tree with VLANs - Configuring the Root - Creating VLAN Standards - set spantree root Parameters 550 - Per-VLAN Spanning Tree (PVST) - Common Spanning Tree (CST) - Per-VLAN Spanning Tree- - Multiple Spanning Tree (MST) - Scaling the Spanning Tree Protocol - Determining the Root - Modifications to EtherChannel - PortFast - Parallel Fast EtherChannel Links - Configuring PortFast - When a Root Isn’t the Root - EtherChannel Guidelines - PortFast and BPDUs - Setting the Port Cost - Configuring EtherChannel - UplinkFast - Setting the Port Priority - Port Aggregation Protocol (PAgP) - Configuring UplinkFast 573 - Prioritizing traffic by VLAN - Load Balancing and Redundancy - Changing the STP Timers - Load Balancing - Using Redundant Links with STP - Redundancy - BackboneFast - Configuring and Verifying BackboneFast - Rapid Spanning Tree Protocol 578 - Inter-VLAN Routing THE CCNP EXAM TOPICS COVERED IN THIS - Internal Routing on an IOS-Based Switch - Routing Between VLANs - Using ISL and 802.1Q Routing - ISL Network Cards - Configuring ISL/802.1Q with an External Router - Multiple Links - Configuring ISL/802.1Q on an Internal Route Processor - Routers with multiple links - Configuring VLANs on an Internal Route Processor - A Single Trunk Link - Assigning MAC Addresses to VLAN Interfaces - Single trunk link for all VLANs - Defining a Default Gateway - An Internal Route Processor - Configuring Internal Routing on an IOS-Based Switch 594 - Multilayer Switching - Identification of candidate packets - Cache Entry Exists - The Right Way to Disable MLS - Interface Configurations - Source-Destination-IP - Using Acceptable MLS Topologies - The CEF Forwarding Process - Understanding the Fundamentals of MLS - Identification of enable packets - No Cache Entry - The Wrong Way to Disable MLS - MSA Management Interface - IP-Flow - Multilayer Switching (MLS) - Configuring CEF 626 - Router-on-a-stick diagram - Layer 3 switching of subsequent flow packets - Candidate packet - Configuring MLS-RP - Verifying the MLS Configuration - Using Cache Entries - Cisco Express Forwarding (CEF) - Large Packet Streams - MLSP Discovery - Identifying Enable Packets - Enabling MLS - Access Control Lists (ACLs) - Modifying the Cache Aging Time - The Trouble with CEF and Layer 3 Switching - MLS Requirements - XTAGs MLSP discovery - Frame Modification - VTP Domain Assignments - Configuring the MLS Switch Engine - Modifying Fast Aging Time - Legacy Routing and Layer 3 Switching - MLS Procedures - MLS Cache - Enable packet - Verifying the VTP Domain - Enabling MLS on the MLS-SE - Verifying the Configuration - Process Switching - MLS example topology - Identifying Candidate Packets - Subsequent Packets - VTP Interface Configuration - Configuring Flow Masks - Displaying the MLS Cache Entries - Fast Switching - MLSP discovery - Destination Other Than the MLS-RP - Disabling MLS - VLAN Assignments - Destination-IP - Removing MLS Cache Entries - Optimum Switching - Multicast is a different - Multicast communication - Understanding and Configuring Multicast Operation - Using Multicast Addressing - Multicast Overview - IP Multicast Reserved Addresses - Unicast - multiple IP routers - Unicast communication - Mapping IP Multicast to Ethernet - Broadcast - IP multicast mapped to MAC multicast 635 - Broadcast message on a network - Multicast addressing overlap - Leave Process - Cisco Group Management Protocol (CGMP) - Source Trees - Reverse Path Forwarding (RPF) - Intra-Area and Inter-Area MOSPF - CBT data distribution - Enabling IP Multicast Routing - Manual RP Configuration - Changing the IGMP Version - Managing Multicast in an Internetwork - Internet Group Management Protocol Version 2 (IGMPv2) - Multicast Design - Source tree forwarding - Time to Live (TTL) - PIM DM - PIM SM - Enabling PIM on an Interface - Auto-RP Configuration - Enabling CGMP and IGMP Snooping - Subscribing and Maintaining Groups - General and Group-Specific Query Processes - CGMP Join - Shared Trees - TTL threshold utilization - PIM DM flooding - PIM SM pruning - IP PIM Dense Mode - Designating a Default RP - CGMP Router Configuration - Internet Group Management Protocol Version 1 (IGMPv1) - IGMPv2 Leave Process - Host Management - Shared tree forwarding - Routing Protocols - PIM DM pruning - Multicast Source Discovery Protocol (MSDP) - IP PIM Configuration Options - Advertising RP Group Assignments - Catalyst Switch Configuration - Membership Query Process - IGMPv2 Leave process - IGMP Snooping - Unidirectional Shared Tree Distribution - Distance Vector Multicast Routing Protocol (DVMRP) - Sparse Mode Routing Protocols - Source-Specific Multicasting (SSM) - IP PIM Sparse Mode - Configuring the RP Mapping Agent - IGMP Snooping - IGMPv1 Query process - Internet Group Management Protocol Version 3 (IGMPv3) - Multicast and Spanning Tree - Bidirectional Shared Tree Distribution - DVMRP tunnels - Core-Based Trees - Planning and Preparing for Using IP Multicast - IP PIM Sparse-Dense Mode - Configuring TTL - The Fast-Leave Trap 678 - Join Process - Membership Query - Routing Multicast Traffic - Bidirectional shared tree - Multicast Open Shortest Path First (MOSPF) - PIM DM grafting - End-to-End IP Multicast - Interface Activation Criteria for Sparse-Dense-Mode Interfaces - Joining a Multicast Group - Layer 3 to Layer 2 Overlap - Unsolicited join requests - Membership Report - Distribution Trees - Managing Multicast Delivery - Intra-Area MOSPF - CBT data distribution - Configuring IP Multicast Routing - Configuring a Rendezvous Point - Troubleshooting IP Multicast Connectivity - E-mail application fragments - WWW Traffic - Voice over Ethernet - Understanding the Fundamentals of QoS - Best Efforts Networks - Connection-Oriented Transport 685 - Quality of Service (QoS) - Understanding Application Needs - Common Problems in Best Efforts Networks - Simple Delay - Jitter - Packet Loss - QoS Options - The Differentiated Services Model 688 - Connectionless Transport - Streaming Transport - cisco - IEEE 802.1p - Applying the QoS Model - Prioritizing Traffic Classes 692 - The Differentiated Services Model - Configured QoS - Auto-QoS - 4000 Series Switches - Queuing Mechanisms - Queuing Mechanisms - Priority Queuing 701 - Auto-QoS - Configuring QoS on Cisco Switches - 2950 Series Switches - 3550 Series Switches - Hot Standby Router Protocol - Configuring SLB - HSRP Operation - SLB Stateful Backup - HSRP accost process - Virtual Router Redundancy Protocol - Interface Tracking - Gateway Load Balancing Protocol - Multiple HSRP Groups - Active Aperture Selection - we.. - Configuring HSRP - Custom Queuing - HSRP in Action at the ISP Edge - Redundancy in Switched Networks - Server Load Balancing - cisco cisco - ciscoo - I - happy year cisco - Switch Architectonics and Components - Addressing - Non-blocking Switches - Prioritization, Redundancy, and Failover - Switch Fabrics - Load-Balancing - Bus Switching Fabric - Configuring GLBP - Shared Anamnesis Switching Fabric - Transparent Ethernet - Crossbar Switching Fabric - Catalyst Switch Technologies - Bridging Table Operation - The Switching Process - Content Addressable Memory (CAM) 714 - 3550 Series Switches - 2950 Series Switches - 2950 Series Software - Particle buffers - System Testing - Standard Image IOS - Software - The Cisco Cluster Management Suite (CMS) - Enhanced Image IOS - Memory - Debugging - 4000 and 6500 Series Software - Rings - Debugging, Management, and System Testing - CatOS/IOS Hybrids - Contiguous Buffers - 6500 Series Switches - Native IOS - 4000 Series Switches - Switches: The Current Range - Ternary Content Addressable Memory (TCAM) - WAN Connection Types - Remote Access - Frame Relay - X.25 - Integrated Services Digital Network (ISDN) - Cisco Solutions for Remote Access - Asynchronous Dial-Up - Cable Modems - Leased Lines - Summarizing WAN Connection Technologies - Digital Subscriber Line - WAN Encapsulation Protocols - Wireless and Cellular - New WAN Connection Technologies - Asynchronous Transfer Mode (ATM) - Cost Comparison of WAN Technologies - Serial Line Internet Protocol (SLIP) - Bandwidth Comparison of WAN Technologies - Asynchronous Transfer Mode (ATM) - Worldwide Availability of WAN Technologies - Cost - High-Level Data Link Control (HDLC) - Point-to-Point Protocol (PPP) - Selecting a WAN Protocol - Availability - Manageability Comparison of WAN Technologies - Bandwidth - Remote Access in the Field: Manageability - Frame Relayy - Manageability - The X.25 Protocol - Virtual Private Networks (VPNs) - The Cisco 1600 Platform - Frame Relays - Internetworking Overview and Remote Access Interface Options - Choosing Remote Connection Cisco Products - Applications in Use - The 1000 Series - The Cisco 1700 Platform - Identifying Company Site Equipment - Cabling and Assembling the WAN - Reliability Comparison of WAN Technologies - The 800 Series - The Cisco 1800 Platform - Central Site - Product Selection Tools - Reliability - Product Selection and Outsourcing - The Cisco 2500 Platform - The Cisco 3600 Platform - Quality of Service (QoS) - The Cisco 2600XM Platform - The Cisco 3700 Platform - ISDN BRI - Modular Interfaces - Telecommuter - The Cisco AS5x00 Platform - ISDN PRI (North America) - Remote Access in the Field: Outsourcing Remote Access Solutions - Fixed Interfaces - The 700 Series - The Cisco 7000/7200/7500 Platforms - ISDN PRI (Europe) - Securty - Cisco 700 Series Platform Features - Remote Branch - Asynchronous or Analog Connections - Remote Access with Modems - The 3640 router front view - Asynchronous Connections - Configuring Asynchronous Modem Connections - Understanding Asynchronous Modems - Error Correction - Verifying the Telecommuter Installation - Verifying a Network Installation - Data Compression - The Cisco 766 LEDs - Modulation Standards - Verifying the Remote Branch - DTE-to-DCE Signaling - The Cisco 1600 LEDs - Signaling and Cabling - Verifying the Central Site - Commands for Automatic Configuration - Automatic Configuration - The modemcap edit Command - The Information Field - PPP Overview and Architecture - The Frame Check Sequence (FCS) Field - Point-to-Point Protocol - PPP Assigned Protocol Fields - Asynchronous Router Commands - The Protocol Field - The Control Field - Manual Configuration - The Address Field - Common AT Commands - Dedicated or Interactive PPP - The Flag Field - Configuring PPP - RFCs for Remote Access Networks - Verifying and Troubleshooting the Automatic Configuration - Configuring Access Servers - How DHCP Works - Configuring Dynamic Addressing - Interface Addressing Options for Local Devices
category: Cisco Computer Networking - The Equivalent of Asphalt: Cables - PCs Using Different Pairs (Lanes) to Send Data - LAN-Legal Data: An Ethernet Frame - Stopping at the Destination: What Happens When Someone Comes to See You - Two Standards for Ethernet - Fred Sending to Barney, While Betty Sends to Wilma - Switches: The Rest of the Story - I Feel the Need, the Need for Speed - Autonegotiation with 10/100 Cards - Three Blind MenThe Server Guy, the Cabling Guy, and the Network Guy - Two Physical LANs: Broadcasts Do Not Leave the Originating LAN - Web Browsing - OSI Layer 8 Issues - Building a Network: It All Starts with a Plan - Tale of Two Trunking Protocols - A Simple Protocol for Error Recovery - Transmission Control Protocol (TCP) - How to Eat an Elephant, TCP/IP Style - What's a Local-Area Network? - Typical LAN Cable - Sharing the Local Roadway: Ethernet Hubs - Ethernet Frame Sent from Bob to Larry - Are They Coming to Our House or the Neighbor's House? - IEEE Ethernet Headers and Trailers - The Perfect Roadway: No Wrecks Allowed! - Painting the Road Signs:Learning MAC Addresses - A New, Improved, and Faster EthernetLet's Call It Fast Ethernet - Adding Local (Network) Roadways for No Extra Money - Different Types of Traditional Computer Networks - No Forwarding Between the Two Physical LANs - Web Browsers and Web Pages on the Internet - OSI Layer 3 Design Goals - Conforming to the Rules - Shipping and Logistics: Commerce Using the (Network) Roadways - The Book(s) of Rules, Networking model - TCP Error Recovery - Four-Layer TCP/IP Network Model - Components of a Simple LAN - Shielded Twisted Pair (STP) Cabling - Ethernet Hub Repeats Everything It Hears - Driving Where I Want and When I Want Is Pretty Cool - How Bob Decides the Frame Was Sent to Him - Reducing Congestion and Driving Faster on the Local (Network) Roadway - Potential Collision When Forwarding Multiple Frames onto the Same Pair - Learning by ListeningA Great Life Lesson - If Fast Ethernet Is Good, Even Faster Is Better: Gigabit Ethernet - The Physical Reality Precedes the Virtual Reality - Big Company, Multiple Sites: An Enterprise WAN - Virtual (LAN) Reality: One Switch, but Multiple LANs - Web Page - Saving Cash - Rules, Schmools for Networking - Proprietary Network Models Prevent Pervasive Population of Networking Devices - Internet Protocol (IP) - How to Eat a T-Rex, OSI Style - Transmitting Bits Across the Local Network Roadway - Painting the Lines on the Road: Connectors - Hubs Use Straight-Through Cabling to PCs - Why Wrecks (Collisions) Happen on Ethernet - Binary Numbers and Their Hex Equivalents - Reducing Congestion by Opening Up More Lanes on Each LAN - Switch Avoids Collisions by Buffering the Frames - The Forward Versus Filter Decision - Ultra Super-Fast Fast Ethernet: 10 Gigabit Ethernet - Physical LANs: It's All About Broadcasts - Just You and Me and the Whole WorldThe Internet - How to Create a Virtual LAN - Electronic Mail (E-Mail) - Packing Your VLAN's Frames in a Trunk When Leaving the Switch - Examples of Good Rules for Networking - Non-Networking of IBM and DEC Networks in a Single Company - Routing Based on IP Addresses - T-Rex Versus the Elephant - Basic Flow with Fred Using a File/Print Server - Typical Networking Connector (RJ-45) - Dirt Roads Versus the DOT - Collision Between Bob's and Archie's Frames - Who Is It, Honey? - Hubs-A One-Lane Road - Using Full Duplex: Making the Streets Two Way - What to Do When the Road Sign (Address Table) Doesn't List Your Destination - Summary of Ethernet Speeds - Networking Basics - Master of Your Own (Broadcast) Domain - Network's Reason for Existence - Two Virtual LANs: Broadcasts Do Not Leave the Originating VLAN - Internet Using Mail Servers - Forwarding Frames Between Two Switches - Traveling a Roadway for a Bit to Get a Byte - DECnet Emulating SNA Using a Gateway - TCP/IP Standards That Aren't TCP/IP Standards - OSI Model Versus TCP/IP Model (a.k.a. T-Rex Versus the Elephant) - Driving Bits Across a Wire - Pinout Options for RJ-45 Connectors - Major Components of a Structured Wiring Plan - How to Avoid Most Wrecks - Ethernet Source and Destination Addresses - Betty Waiting on Fred's Frame That Was Sent to Barney - Barney Waiting to Send, When Fred Sends to Barney - Switch Logic for Unknown Destinations - Ethernet Specifications - What Is a Network? - Three Broadcast Domains- A Hub-a Switch-and a Hub and Switch - Using the Network by Accident - No Forwarding Between the Two VLANs - Downloading and Transferring Files - How to Pack Your Trunk for the Trip to the Other Switch - Example Rule for Sending the Bits - Public Network Models Provide Pervasively Popular Networks - Standards for Physical Networking Nearby - Running the Local Department of (Network) Transportation - Basics of Data Transmission Across a Wire - The Need for a Two-Lane (Network) Road - Driving in the Right Lane (Pair) on the Road - Rules of the Road: How to Use the Local (Network) Roadway - Collision Avoidance by Listening Before Sending - I Don't Understand a Thing You're Saying - Switches: How to Create Dozens of Lanes on the LAN - Barney and Fred Sending and Receiving at the Same TimeFull Duplex - How to Go Everywhere at the Same Time - A Switch for All Speeds - No, Really, What Is a Network? - Multiple Physical LANs Require Multiple Switches - Using the Network on Purpose - Why You Need More Than One LAN - Copying myproject.doc Between Barney and Fred - Switch2's Dilemma: Which VLAN? - Sending the Bits a Packet (Package) at a Time - How TCP/IP Standards Grow - Standards for Physical Networking Far Away - How to Build a Local (Network) Roadway - Concurrent Data Transmission Across Two Different Wires - Both PCs Using the Same Pair (Lane) to Send Data - Preparing for a Trip: How to Make Your Car (Data) "Street Legal" - What to Do When a Wreck Happens - How the FCS Field Is Used - Switch Logic for Fred's Frame Sent to Barney - Full Duplex and Full Switching - Switch Flood Broadcast Frames - Supporting Multiple Speeds on a Single Switch - What an Elephanterr, a NetworkLooks Like - Small Physical LAN, and You Are in Charge - Conceptual View of the Internet - If 100 Devices in a LAN Is Good, 1000 Devices Must Be Better - Network-Based Applications Covered in This Chapter - Trunking Header Tells Switch2 What to Do - What to Do When the Bits Get Bashed - Some Pretty Popular TCP/IP Protocols
It always helps to think about specific examples when learning
something new - Fred's Alternative to Running a Cable 500 Miles: A WAN Using a Leased Line - Driving Bits Across the Network Roadway - Choosing Shipping Options When Transporting the Goods over the (Network) Roadway - Assuring Data Delivery - Why Three Smaller Segments Is Better Than One Big Segment - Starting Off on the Right Foot Using a TCP Connection - Using Addresses on the (IP) Shipping Label - Sizes of Network and Host Parts of IP Addresses - Knowing Where to Turn at Each Intersection (Router) - Using the Ethernet Frame to Deliver the Packet to the Default Router - The Useful but Short Life of an Ethernet Frame - The Routing Table at R2: Same Destination, Different Forwarding Instructions - Routing to Nearby Places - Picking the Best Road (Route) - Asking for Name Resolution Help Inside the Company - How a Two-Part E-Mail Address Is Used - Basic Authentication with POP3 - Copying Inventory (Files) from the FTP Warehouse - operating system (OS),"Hello, I'm at Your Service" - The Mechanics of Delivery Confirmation - My Little White Lie About Acknowledgments - Keith's TCP Connections - IP Packets, Including Details About the Data - Small- Medium-and Large IP Networks - A Short Trip from Your House (PC) to the Local Store (Server) - Learning How to Go to the Default Post Office (Router) - Deciding Where to Go Next - R2's Routing TableSame Destinations, Different Instructions - Configuring a Router with Its IP Addresses and Attached Subnets - Multiple Ways to Get to the Same Place - Resolving Names and Addresses: The Basic DNS Process - Rules, Schmools: Even More Rules? - SMTP and POP3 Working Together - Rules, Schmools for FTP - Application Program and Application Layer Asking the Transport Layer for Help - The Format of the Shipping Label: TCP Headers - Acknowledging Each Byte - Navigating the Roadways to Find the Right Street Address - Putting a Name on the Shipping Label - The Actual Class A, B, and C Network Numbers - Overview of the End-to-End Routing Process
Let's review the basic process of routing as covered in Chapter 10 - What Hannah and R1 Know Before Using ARP - Routing Decisions Based on the Routing Table - Yet Another Short-Lived Ethernet Frame - You're Already There: Directly Connected Routes in R1's and R2's Routing Tables - Choices, Choices: Using the Metric to Pick the Best Route - Chapter 8. Shipping Goods over a (Network) Roadway - Asking for Name Resolution Help Outside the Company - TCP/IP E-Mail Standards - Typical Usage of SMTP and POP3 - Browsing Around the Internet Shopping Mall: The World Wide Web - Full-Service Shipping - Delivery Confirmation, No Errors - Delivering the Package to the Right Person, Not Just the Right Address - Delivering the Goods to the Right Street (IP) Address - How to Run a (Network) Postal Service - List of All Possible Valid Class A, B, and C Network Numbers - Leaving Your Neighborhood the Same Way, Every Time - Hannah Sending an ARP Broadcast, Looking for 8.1.1.250's Ethernet Address - Yet Another Ethernet Data Link Frame - Other Rules of the Road - Painting Road Signs and Other Long-Lasting Directions - Introducing the Long List of Routing Protocols - Neither Rain, Nor Sleet, Nor Dark of Night: E-Mail - DNS Request Is Made- but DNS Server Doesn-t Know the Name - E-Mail Client Application and Its Use of Application Layer Protocols - Building a Centralized Warehouse: File Transfer - Building and Stocking the New Retail Store, AKA New Website - Shipping Basics: Controlling Shipments Using Shipping Labels - Lose All You WantWe'll Make More - TCP destination port - Navigation Basics: Driving to the Right Destination - One Location, One Zip Code, One Network Number - Subdividing a Network into Subnets - By Default, Leave Your Network Via the Default Router - ARP Reply from R1 to Hannah - R1's ARP Broadcast, R2's Reply, and Finally Packet Forwarding - R2's Routing TableSame Destinations, Different Instructions - Painting a Routing Table with a Static Route - IP Routing Protocols - Dropping Off and Getting Your (e)Mail - How DNSs Work Together - Protocols for Addressing the Envelope Correctly: Internet Message Formats - Warehousing Process for Transferring Stuff - Rules, Schmools for Web Retailing - Adding Shipping Information to Data by Encapsulating in a TCP Header - TCP Error-Recovery Process - Using the Destination Port Field Like a Recipient's Name on a Shipping Label - Navigating When Going from Mason and Cincinnati - Postal Sorting Using Zip Codes - The Problem: Wasting IP Host Addresses - Getting into Your Car to Drive to Lunch - Step 1 - Step 2 - How to Drive When You Aren't Leaving the Neighborhood (Subnet) - Dynamically Learning and Changing Routing Tables - Looking Up the Name and Number in the Phone Book (Host Table) - Postal Worker Picking Up and Dropping Off the Mail - How Names Should Be Formatted - The KISS Principle and SMTP - FTP Process for Transferring Files - Connecting to the Fredsco Home Page - TCP Treats All the Data as Data - maximum segment size - The Chicken, the Egg, and the Destination Port of the First Segment - IP as the Postmaster General of the Network - IP Zip Codes: Network Numbers - The Solution: Subnetting Saves IP Host Addresses - Encapsulating an IP Packet in an Ethernet Frame - Choosing Which Road to Take at the First Intersection - Choosing Which Road to Take at the Final Intersection - Decision Process with Local Subnet Destinations - R2 Learning Routes from R1 - Using a PC's Local Host File - Sending E-Mail Using E-Mail Servers - Simple SMTP Messages: Identifying the Client and the Recipient - Warehouse Lingo and Procedures - Buy One, Get a Bunch for Free - Transferring All the Files That Make Up a Web Page - Purchasing Insurance for Your (Network) Shipment - Segmenting Data Before Sending - Initializing TCP Port Numbers - Knowing the Address Before Driving to the Destination - Three Sizes Fit All - Using One Network with Multiple Subnets - Encapsulating an IP Packet in an Ethernet Frame - The Beginning of R1's Routing Logic - The Still Useful, but Still Short Life of an Ethernet Frame - Painting the Road Signs on Your Interstate (Internetwork) - R1 Learning by Listening for Routing Updates - Asking Someone Else to Look Up the Phone Number (IP Address) for You - Postal Address Versus E-Mail Address - What to Do When You Need a Little POP in Your Network - Stocking the FTP Warehouse - You Can't Just Send Data; You Have to Send a Frame - Physical Parts of Frame Relay - You Can Still Use Serial Links, but It Will Cost You Up Front - Driving from Home onto the Globally Interconnected (Internet) Roadway - Comparing a Phone to a Modem - Dr. Analog Voice and Mr. Hiding Digital - Basic Authentication Using a Username and Password - Leasing the Cable When You Can't Run the Cable - I Feel the Need, the Need for Speed - Forwarding an IP Packet over a WAN Link - Basic Logic Used by the Big Whopping Frame Relay Switch - Three Leased Lines to Connect Three Routers - Once on the Interstate (Internet), You Can Go Anywhere - How Fast Can You Talk? - DSL Connection from the Home - You Can't Lease the Cross-Over Cable, So Lease Something Almost Just Like It - The Need to Control the Speed - Encapsulation in HDLC - Frame Relay Switching Using Frame Relay Addresses - Get Your Free Bandwidth Here! Free Bits! - Reaching the World Through One Connection to the Internet - Calling the Internet! Calling the Internet! - Faster Is Better - It's Not Really a 450-Mile Cable, but It Works Like One - The Need to Control the Speed - Addressing on WAN Serial Links - If Two Sites Are Good, Three (or More) Must Be Better - Typical Frame Relay Network with Three Sites - Comparisons of WAN Links, Frame Relay, and the Internet - Now That I Know How to Talk, Whom Should I Call? - Sending Data from Home Without Using a Phone Line - Establishing a Physical Path from the Customer to the Telco - Cabling with Internal and External CSU/DSUs - The Choice of Two Data Link Protocols - Frame Relay Switching to Multiple Remote Sites - Routers and WANs: Still a Match Made in Heaven - Using a Phone Line for Data - Basic Operation of Modems over PSTN - Securing the Network - A Leased Line, A Leased Circuit, A Point-to-Point Link, and A WAN Link - Double Your Speed at No Cost - Leasing a (Network) Roadway Between Lots of Places - It's Virtually Like a Leased Circuit, So Let's Call It a Virtual Circuit - You Can't Just Send DataYou Have to Send a Frame Relay Frame - Making Data Sound Like Voice - Calling the ISP Local POP - Accepting the Right People and Rejecting the Wrong People - The Many Personalities of a WAN Link - WAN Link Installation Plan - Making the Telco Look Like One Big Whopping Switch - Frame Relay PVC Concepts - Forwarding an IP Packet over a Frame Relay PVC - Analog Electrical Signal: Frequency and Amplitude - Now That I Know Whom to Call, What Do I Say? - Safe Driving by Using AAA - Building an Interstate (Inter-LAN) Highway System - Different Names for WAN Link - Routers and WANs: A Match Made in Heaven - Same Subnets, Similar Routing Table, Over the WAN Link - Cabling a Router to the Big Frame Relay Switch - Faster, Cheaper, BetterYou Can't Go Wrong with Frame Relay - Addressing Is Much More Interesting on Frame Relay Than on Serial Links - What Phones Do for Voice, Modems Do for Data - Using the Phone Line for Datathe DSL Way - Checking for Fake Drivers' (Users') Licenses - Leasing a (Network) Roadway Between Two Points - Differences Between a Cross-Over Cable and a Leased Circuit - Conversion of Decimal IP Address 100.235.2.2 to Binary - Glossary d - Glossary l - Glossary u - Hashing Passwords to Create a Message Digest - Characterizations of What's Allowed and What's Not - Safe Places Outside of Your Neighborhood (Network) - Chapter 1 - Chapter 10 - Chapter 18 - Converting from Binary to Decimal - Third Pass Through Step 4, for 24 (16) - Converting Binary IP Addresses to Decimal IP Addresses - Glossary e - Glossary m - Glossary v - Hey! How Did You Get in Here? - You're Wearing Your Credit Card Number on Your T-Shirt - Enforcing the Ground Rules - A Safe but Potentially Risky Place: The DMZ - Chapter 2 - Chapter 11 - Appendix B. Converting IP Addresses Between Decimal and Binary - Example of Binary-to-Decimal Conversion: 10101101 - Fourth, Fifth, and Sixth Passes Through Step 4 - Conversion of Binary IP Address to Decimal - Glossary f - Glossary n - Glossary w - Checking the License to Find Out if He Can Drive That Kind of Vehicle - Encrypting IP Packets for a VPN - Putting Up a Wall Between the Dangerous Folks and Your Network - Using the Police to Watch for Bad Guys - Chapter 3 - Chapter 12 - Decimal and Binary Numbering Systems - Converting 10101101 to Decimal: Multiplying Each Column and Then Adding Them Together - Last Pass Through Step 4, for 20 (1) - Using a Conversion Chart - Glossary g - Glossary o - Glossary z - Fred Can't See Others' Payroll Information - Keeping a Watchful Eye Over Who Drives into Your (Network) Neighborhood - Ways to Watch Your (Network) Neighborhood - Watching for Wolves in Sheep's Clothing - Chapter 4 - Chapter 13 - Decimal Numbering System - Decimal Powers of 2 - First Three Steps of Converting Decimal 100 to Binary - Binary/Decimal Conversion Chart - Glossary h - Glossary p - cisco waas diagram - Tracking Drivers' (Users') Violations - Setting the Ground Rules - TCP Connections and Well-Known Ports - Watching for Patterns with a Network-Based IDS - Chapter 5 - Chapter 14 - Decimal Numbering: 1s, 10s, and 100s Digits - Converting from Decimal to Binary - Passes Through Step 4 for 2x Values of 32, 16, 8, 4, and 2 of Decimal-to-Binary Conversion of Decimal 100 - Glossary A - Glossary i - Glossary r - Cisco Systems - No Appls Yet? Be a Good CHAP and Ask PAP - An Enterprise Network Connecting to the Internet - Deciding When to Stop the Traffic - Avoiding Catching Cold - Chapter 7 - Chapter 15 - Binary Numbering System - First Three Steps of Converting Decimal 235 to Binary - Final Pass Through Step 4 of Decimal-to-Binary Conversion of Decimal 100 - Glossary B - Glossary j - Glossary s - Basics of PAP - Typical Types of Traffic Allowed Between an Enterprise and the Internet - Allowing the TCP Connection from Figure 18-5 - Profiling What the Bad Guys Want to Do - Chapter 8 - Chapter 16 - Binary Numbering: 1s, 2s, 4s, 8s (and so on) Digits - First Pass Through Step 4 of the Conversion Algorithm, with 26 (64) as the Power of 2 - Converting IP Addresses - Glossary c - Glossary k - Glossary t - Stopping Someone from Using Your License (Password) - Traffic That's Typically Not Allowed - Disallowing a TCP Connection to an Inside Web Server - Appendixes - Chapter 9 - Chapter 17 - Converting Between Binary and Decimal Numbers - Second Pass Through Step 4, for 25 (32) - Converting Decimal IP Addresses to Binary IP Addresses
category: Burglar Deterrent - NORCO5 - Norco Alarms Yard Sign, Solar Light, & Stake - GV801 - Warning Video Surveillance Sign - FTV-10 - Fake TV Burglar Deterrent Device - Burglar Deterrent - 05-WI - Bullet Dummy Camera by WINN Security Products
category: Child Safety - Child Safety
category: Child Locator - Child Locator - LOC8TOR-PLUS - Child Locator System with Bonus Wrist-Strap - TR-203 - SecuraTrac SecuraPAL GPS Child Tracking Device - CL305BL - Mommy I'm Here Child Locator w/ New 2-Way Alert Feature |
|
|
More Top News
CCSP-Cisco Certified Security Professional
Most Popular
Most Commented
Featured Author
|