IPSec / SSL VPN

Upgrade Juniper SA cluster

René Jorissen on January 26, 2010 0 Comments • Tags: #active #activepassive #activestandby #cluster #howto #ive #juniper #mag #passive #sa #standby #upgrade

Add On: This procedure also works for the new Juniper MAG appliances. But keep in mind during the upgrade of the second host (and also the first): BE PATIENT!! A Juniper SA cluster can be configured as active/active or active/standby cluster. An active/active cluster uses an external load balancer or DNS round-robin to enable load-sharing … Read More

Configuration Example, Routing

HSRP and ACL’s

René Jorissen on October 1, 2008 0 Comments • Tags: #1985 #access #accesslist #acl #hot #hsrp #list #multicast #protocol #routing #standby #udp

I added a Guest VLAN to a network environment with two multi layer switches running HSRP. To secure the internal network from the Guest VLAN, I added a ACL to the Guest VLAN SVI. The ACL is stated below: ip access-list extended GUEST-DENY-RFC1918 remark Allow DHCP permit udp any eq bootpc any remark Deny RFC … Read More

Configuration Example, Routing, Security, Switching

Secure HSRP configuration

René Jorissen on July 25, 2008 2 Comments • Tags: #authenticate #cdp #clear #dtp #hsrp #keystring #md5 #preempt #priority #spoofing #standby #text #timeout #wireshark #yersinia

A friend of mine works for a well known auditing and penetration testing company in the Netherlands. Recently we were talking about how he starts looking for flaws in network infrastructures. My friend told me that the first thing he does is simply starting WireShark and start looking at all the packets he receives. By … Read More

Firewalling

Cisco Firewall Design and Deployment

René Jorissen on June 25, 2008 0 Comments • Tags: #access #active #asa #bridging #context #dynamic #fwsm #mixed #mode #multicontext #multicast #multiple #protocol #redundancy #redundant #remote #routed #routing #sitetosite #standby #transparant #virtualization #vpn

The session about firewall design and deployment didn’t reveal a lot of new things about the Cisco ASA appliance or FWSM module. The only new thing for me was the possibility to configure a redundant interface for a Cisco ASA appliance. The screen shot below shows the cabling scheme for an implementation with and without … Read More