Configuration Example, Security

MAB and MDA in an IP Phone environment

René Jorissen on February 5, 2010 26 Comments • Tags: #5330 #authenticate #bypass #cdp #ciscoavpair #devicetrafficclassvoice #domain #hostmode #lldp #mab #mac #mda #mitel #multidomain #multiple #phone #radius #vsa

I blogged before about the MAC Authentication Bypass (MAB) feature in network environments. MAC Authentication Bypass can be used to secure the wired network by verifying MAC addresses to a central database. By using a radius server, like Microsoft IAS or FreeRadius, you can also redirect verified MAC addresses to a specific VLAN. Lately I … Read More

Configuration Example

Cisco router: determine amount of memory/flash

René Jorissen on January 22, 2010 2 Comments • Tags: #cisco #determine #dram #flash #memory #retrieve #router

Somebody asked me how he could determine the amount of DRAM and flash memory on a Cisco router. I always thought that everybody would know how to determine this information, but since this isn’t matter, I will tell you how you can determine the values. You use the show version command to retrieve the requested … Read More

Anti-virus / Anti-SPAM, Configuration Example, Proxy

Automated eSafe backup

René Jorissen on January 19, 2010 0 Comments • Tags: #automated #backup #createbackup #esafe #esgapi

After configuring an eSafe appliance you have the option to export the configuration through the management interface, but you have to do this manually. eSafe has also a build in command line option to create a backup of the required files. The command line allows backing up and restoring files using standard backup/restore commands. The … Read More

Configuration Example, Quality of Service

CB-WFQ Bandwidth Allocation

René Jorissen on January 13, 2010 0 Comments • Tags: #bandwidth #based #cbwfq #class #classbased #fair #maxreserved #priority #queueing #weighted

When configuring Quality of Service with CB-WFQ I am always puzzling to get the correct classes. When configuring CB-WFQ it is important to remember that the router does not allow the class queues to consume more than 75% of the total interface bandwidth. The remaining 25% are used for the default class as well as … Read More

Configuration Example, IDS / IPS

Upgrade CS MARS

René Jorissen on October 28, 2009 1 Comment • Tags: #436 #601 #605 #analysis #cisco #csmars #ips #monitoring #nfs #pnadmin #pnexp #pnimp #response #security #system #upgrade

A customer was running CS MARS with version 4.3.6. Lately the Cisco IPS sensor was upgraded to version 7.x. This version wasn’t supported anymore by CS MARS version 4.3.6. That is why the CS MARS needed to be upgraded to 6.x. I don’t have a lot of experience with CS MARS and I couldn’t find … Read More

Configuration Example, Management

IPplan – IP address management

René Jorissen on September 30, 2009 5 Comments • Tags: #address #cacti #cactiez #dynamic #ip #ipam #ipplan #management #nmap

A lot of customers have different methods for their IP address management. Most of them use some kind of static documentation, like an Excel sheet. In the past I implemented IPplan multiple times. I like this tool, because it dynamically scans multiple IP subnets, using ICMP and/or Nmap. Another advantage of IPplan is its ability … Read More