CCNP Security - www.m00nie.com

CCNP Security

A collection of 7 posts

GET VPN (GNS3 Lab)

GET VPN (GNS3 Lab)

Group Encrypted Transport (GET) VPN is slightly different and has quite different use cases from more traditional point to point IPSEC VPN where each point to point VPN is quite distinct in its own right. The most import thing to remember at GET VPN is the "G" means group and

DMVPN setup with PSK (GNS3 Lab)

DMVPN setup with PSK (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Disable ASA TCP State tracking (make my ASA a router)

640-553 CCNA Security

Disable ASA TCP State tracking (make my ASA a router)

Recently had to use this (useful?) feature to help a customer with an asymmetric traffic flow via an ASA. The ASA would only see the out bound traffic from a host with the return traffic going via an alternative path not visible to the ASA.This simple diagram is an

OpenVPN server on Fedora 16 connecting Cyanogenmod (7.1) Android phone [bridged]

OpenVPN server on Fedora 16 connecting Cyanogenmod (7.1) Android phone [bridged]

I have already posted about openVPN on Ubuntu but the config for Fedora is a little different so here's a updated post. I did the following setup using * Cyanogenmod 7.1 * OpenVPN 2.2 * Samsung Glaxy S 2 * Cisco 1800 router * Fedora 16 server I've used this quite a lot

DMVPN with PKI authentication (GNS3 Lab)

DMVPN with PKI authentication (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Cisco IOS Certificate Server set-up and client enrolment (GNS3 Lab)

Cisco IOS Certificate Server set-up and client enrolment (GNS3 Lab)

A quick step by step overview of how to configure the certificate server on a Cisco IOS device. The certificate server functionality was added in version 12.3(4). It is only available in in security images or higher. We can use this functionality to provide scalable authentication for VPN

Dynamic point to point IPSEC VPN tunnels using DTVIs (GNS3 Lab)

Dynamic point to point IPSEC VPN tunnels using DTVIs (GNS3 Lab)

Manually configuring point to point IPSEC tunnels can become a big administrative burden as the number of endpoints grows. In a hub and spoke environment we can use Dynamic Virtual Tunnel Interfaces (DVTI) to help ease this burden of lots of site to site or remote access tunnels When using