CCNP Security - www.m00nie.com

GET VPN (GNS3 Lab)

[toc]Group Encrypted Transport (GET) VPN is slightly different and has quite different use cases from more traditional point to point IPSEC VPN where each point to point VPN is quite distinct in its own right. The most import thing to remember at GET

CCIE

DMVPN setup with PSK (GNS3 Lab)

[toc] Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all

640-553 CCNA Security

Disable ASA TCP State tracking (make my ASA a router)

Recently had to use this (useful?) feature to help a customer with an asymmetric traffic flow via an ASA. The ASA would only see the out bound traffic from a host with the return traffic going via an alternative path not visible to the

Android

OpenVPN server on Fedora 16 connecting Cyanogenmod (7.1) Android phone [bridged]

[toc] Intro I have already posted about openVPN on Ubuntu but the config for Fedora is a little different so here's a updated post. I did the following setup using Cyanogenmod 7.1 OpenVPN 2.2 Samsung Glaxy S 2 Cisco 1800 router Fedora

CCNP Security

DMVPN with PKI authentication (GNS3 Lab)

[toc] Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all

CCNP Security

Cisco IOS Certificate Server set-up and client enrolment (GNS3 Lab)

A quick step by step overview of how to configure the certificate server on a Cisco IOS device. The certificate server functionality was added in version 12.3(4). It is only available in in security images or higher. We can use this functionality

CCNP Security

Dynamic point to point IPSEC VPN tunnels using DTVIs (GNS3 Lab)

Manually configuring point to point IPSEC tunnels can become a big administrative burden as the number of endpoints grows. In a hub and spoke environment we can use Dynamic Virtual Tunnel Interfaces (DVTI) to help ease this burden of lots of site to site