The Experts below are selected from a list of 18 Experts worldwide ranked by ideXlab platform

Dale Liu - One of the best experts on this subject based on the ideXlab platform.

  • Cisco IOS Switch Basics
    Cisco Router and Switch Forensics, 2009
    Co-Authors: Dale Liu
    Abstract:

    Cisco switches have many advanced features, such as virtual local area Networks (VLANs), which can help companies achieve better Network performance. Options on Cisco switches, such as port security and VLANs, can also help administrators better secure their Networks. An individual trying to perform forensics on a Cisco switch should be comfortable with the commands used within the Cisco switch IOS. This chapter describes the commands used to navigate through the Cisco switch IOS, and understand the key terms involved with configuring and managing Cisco switches. It begins with a discussion on basics of switches, the switch modes, and how they allow frames to go from port to port quickly and reliably. Switches come with numerous status indicators, and it's important to understand their meaning. In addition, one can connect to a switch in much the same way one connects to a router; the difference is that switches have one less asynchronous interface, but plenty of additional Ethernet interfaces. Getting command-line interface access or making changes through a Web interface or through Cisco Network Assistant remains consistent with that pertaining to Cisco routers. In addition, one must understand commands that involve VLAN information to effectively employ and detect switches. Furthermore, the chapter discusses configuration and IOS management of Cisco switches.

  • Collecting the Non-Volatile and Volatile Data from a Switch
    Cisco Router and Switch Forensics, 2009
    Co-Authors: Dale Liu
    Abstract:

    This chapter describes how one can connect to and collect nonvolatile and volatile data from Cisco switch devices in response to an attack or intrusion. Before connecting to switches, the initial steps of investigation must involve interviews with the Point of Contact (POC) for the switch, obtain password, set procedures for data collection, and devise the documentation. A Cisco switch can be accessed in many different ways. Depending on how the intrusion has affected the switch, one may have to gain access using a serial console cable, using the switch's Web interface, by Telneting into the switch, or by using a program such as Cisco Network Assistant (CNA). The chapter discusses how volatile and nonvolatile information can be extracted from switches after connecting. The show commands, such as show clock , show run , show vlan , and show mac , allow one to gather volatile information. Setting banners, enabling port security, and following proper password policy gives greater overall security. Logging to a syslog server allows one to greater granularity regarding system events. Analysis of volatile and nonvolatile data gathered from a Cisco switch should answer questions about what happened, what can be done to protection in future, what damage was caused, and who was the attacker.

Mbah Mbah - One of the best experts on this subject based on the ideXlab platform.

  • Network Security : Securing Network Equipment and Network Users’ Environment
    Savonia-ammattikorkeakoulu, 2010
    Co-Authors: Mbah Mbah
    Abstract:

    The purpose of this final year project is to research on new Network security products and implementation techniques in order to enhance the current Network security structure of Savonia University of Applied Sciences. This is very important because, it will avoid the university from suffering any major Network attack associated with the present Network security architecture. At the time this final project was approved, the university Network security architecture was optimized but however, with immerging sophisticated threats and Network attacks on daily basis there was need to keep researching on best means to protect the Network from future attacks. In this final project research, following security products were uncovered to produce best Network security results when implemented in an integrated framework. The products are: Cisco Network admission control, Cisco secure access control server, Cisco Network Assistant and Windows 2008 server. This thesis shows how to implement a robust Network security architecture with the uncovered outstanding security products. Savonia University of Applied Sciences has adopted using Cisco Network Assistant to securely manage Cisco Network switches to minimize configuration errors. Cisco admission control and Windows 2008 server is up for implementation in the near future.Insinöörityössäni tutkitaan uusien tietoturvaratkaisujen käyttöä Savonia-Amk:n tietoverkon tietoturvan parantamiseksi.Vaikka verkko onkin tietoturvapolitiikaltaan ja -suojauksiltaan hyvässä kunnossa, uusien, entistä varmempien menetelmien käyttöönotto on perusteltua tulevien uuden tyyppisten hyökkäysten varalta sekä myös käyttäjäympäristön toimivuuden turvaamiseksi. Työssäni tutustaan Cisco´n tietoturvaratkaisuihin; Cisco Network Admission Control NAC, Cisco Secure Access Control Server ACS, sekä tietoverkon hallintatyökaluun Cisco Network Assistant.Työssä esitetään ratkaisumalli edellä mainituilla tuotteilla toteutettavaksi tietoverkossa. Verkossamme Cisco Network Assistant on otettu käyttöön Cisco-verkkolaitteiden turvalliseen hallintaan, mahdollisten konfigurointivirheiden eliminoimiseksi ja verkon tilan entistä paremman seurannan mahdollistamiseksi

Yi Yang - One of the best experts on this subject based on the ideXlab platform.

  • Virtual Private Network Management
    2011
    Co-Authors: Yi Yang
    Abstract:

    Nowadays Cisco routers are mainly configured with CLI (Command Line Interface). However, Cisco offers some GUI (Graphical User Interface) management tools like SDM (Security Device Manager) and CNA (Cisco Network Assistant). Although these are not widely used at this time, it tends to be familiar by all Network managers, especially for the use of SDM, which is introduced in great details on CCNP and CCNA Security courses. SDM is a Web-based device-management tool for Cisco routers that can improve the productivity of Network managers, simplify router deployments, and help troubleshoot complex Network and VPN connectivity issues. A VPN (Virtual Private Network) is a computer Network that uses a public telecommunication infrastructure such as the Internet to provide remote offices or individual users with secure access to their organization's Network. Its aim is to avoid an expensive system of leased lines that can be used by only one organization. The aim of my study is to get familiar with the GUI tool SDM and try to use it to establish a Virtual Private Network. Finally, I compared the difference between SDM and the original configuration by command line interface and gave my recommendation

Silviu Angelescu - One of the best experts on this subject based on the ideXlab platform.

  • CCNA Certification All-In-One For Dummies
    'Wiley', 2016
    Co-Authors: Silviu Angelescu
    Abstract:

    A complete preparation guide for the entry-level Networking CCNA certification If you\u27re planning to advance your career by taking the all-important Cisco Certified Network Associate (CCNA), this is the study guide you need! Seven minibooks cover all the concepts and topics on which you\u27ll be tested, covering the latest version of the exam. Each part of the exam is covered thoroughly in its own section, so you can readily find the information you want to study. Plenty of review questions help you prepare, and the companion CD-ROM includes the highly rated Dummies Test Engine so you can test your progress with questions based on exam content. • The Cisco Certified Network Associate (CCNA) is the entry-level certification for Network professionals • Seven minibooks in this guide cover Secure Device Manager, Virtual Private Networks, IPv6, 2960 Switches, Cisco Network Assistant, Advanced EIGRP and OSPF, and Introduction to Wireless Networks • Covers the latest version of the exam, including the new voice, security and wireless components added in 2008 • Packed with review questions to help you prepare • Includes more security and troubleshooting information • CD-ROM includes the popular Dummies Test Engine, an exclusive, fully customizable test-prep software package that features twice as many sample questions as the previous version CCNA Certification All-In-One For Dummies is the preparation guide you need to earn your CCNA certification