$ ls -t posts/
  • USB->Serial (MAC)

    I bought a USB Serial port that had MAC drivers. Check before you buy it that it has drivers. Not all USB Serial have MAC support. I assume that you have installed the correct drivers from here. First, open Terminal (Applications/Utilities/Terminal). Next, type ls /dev/tty.* to get a list of your …
    Read more →
  • Checkpoint Firewall Lab

    We got a new Nokia Firewall and I tried to login with the default username ‘admin’ and the default password ‘Password’ however that didnt not work. What comes in this case: Password Recovery. Checkpoint has already imported the Solution from Nokia Support, this is: sk41239 – How do I change the …
    Read more →
  • Port Security

    Port security allows you to control the number of MAC addresses that can be learned on a single switch port. It is enabled on a per interface basis. It can protect against malicious applications that can sned thousands of of frames into a network with a different MAC address therefore exhausting the …
    Read more →
  • BPDU Guard

    When BPDU Guard is enabled and a switch port receives a BPDU it stops forwarding and disables itself. It is common to enable this on a access port, usually in addition to portfast. In theory a user should never generate legitimate BPDUs therefore this mechanism helps prevent malicious alteration of …
    Read more →
  • Common L2 threats (and how to mitigate)

    The best practices for securing switches; Select an unused VLAN (other than VLAN1) and use for the native VLAN on all trunks Avoid using VLAN1 anywhere because it is the default Admin configure access ports as access ports so users cannot negotiate a trunk and disable the negotiation of trunking (no …
    Read more →
  • CCNA Security

    I have found myself using the Cisco ASA more and more in the day job. This is mainly due to me changing jobs back in March and looking after customers who have ASA deployed (and some PIX :-)) for both firewalls and VPN’s, as a result I really need to learn more about them so I though the best way …
    Read more →
  • First step with Brocade networking......

    The new estate that I look after has some Brocade switches (well planned at time of writing), as a result I thought I should start to gain some knowledge of their area. While getting access sorted to the myBrocade (like CCO) pages I started to look around the certifications site. The first that …
    Read more →
  • OSPF

    A key thing to understand with OSPF are the different Link State Advertisements (LSA’s) and what they mean to you network configuration and design. The following table tries to summarise the important details.[table id=17 /]LSA types 1 and 2 are found in all areas, and are never flooded outside of …
    Read more →
  • Persistence cookie F5 LTM

    NOTE: This entry is to be completed! The BIG-IP combines the two encoded values and inserts them into the persistence cookie. For example, using the IP address and port 10.1.1.100:8080 as encoded above, the persistence value BIG-IP LTM encodes in the cookie is as follows: 1677787402.36895.0000 Note: …
    Read more →
  • VTP

    The VTP password can be done in 3 places; privilege mode VLAN database global config mode VTP can be configured under the VLAN database; vlan database vtp domain CCIE exit VTP password can be configured in 3 places; privileged mode VLAN database global configuration mode
    Read more →