Cisco networking tutorials

Disable or turn off CDP on Cisco switches

contributed by CISSP06 on August 12, 2006 under Cisco switch

Cisco Discover Protocol or CDP is a Cisco-proprietary protocol that runs on all Cisco products. CDP allows devices to learn about neighboring devices (the ones attached directly to the switch) including information about their platform, IP address, the version of IOS or other OS, VLAN membership, etc. This can be helpful information when troubleshooting network issues, it can also provide an attacker valuable information about the layout of your network. Other vulnerabilities include a denial of service attack in which CDP packets are generated, flooding the network. If you want to know how to turn off CDP, read on.

 

Cisco 2950 Switch: Create a VLAN

contributed by CISSP06 on July 28, 2006 under Cisco switch

The commands for creating a VLAN vary from one switch model to another. VLANs in a 2950 switch are configured in a manner similar to configuring an interface. This configuration is substantially different than a 2900 switch.

 

Cisco 2900 Switch: Create a VLAN

contributed by CISSP06 on under Cisco switch

A VLAN (Virtual Local Area Network) makes a single physical switch behave like several separate switches. A host connected to one VLAN cannot communicate through the switch to a host connected to another (although a router can permit communication between VLANs if desired). Here’s how to configure a new VLAN on a 2900 switch.

 

Cisco Switch 2900/2950: Display VLAN information

contributed by CISSP06 on under Cisco switch

Knowing the commands to display configuration information about Virtual LANs (VLANs) is as important as knowing the commands to configure them. The commands here display information about all VLANs or a single VLAN by number or name.

 

How to use Microsoft IAS with Cisco VPN concentrator/ASA/PIX

contributed by CCIE14019 on July 2, 2006 under Cisco networking

VPN setup shows how to use IAS with VPN concentrator, ASA, or PIX. Basically, every vpn user connects with the same PCF file and enters into a group. When their username gets authenticated with ActiveDirectory, AD returns a group name to the CVPN/ASA/PIX and the pix puts them in that group.

 

How to setup IAS to use radius to authenticate Cisco device

contributed by CCIE14019 on July 1, 2006 under Cisco networking

This recipe shows how to configure IAS for Cisco equiptment using level 15 and also level 2 so you can have tech users and admn users, depending on which OU you’re in.

 

Configure Cisco router as an NTP server

contributed by qmchenry on June 19, 2006 under Cisco router

An NTP server can provide synchronized date and times for devices in a network. Since a router cannot be a Stratum 1 device (cannot connect to a Stratum 0 device such as a GPS clock), a router is not an accurate source of time information. If this is not important to you, then using a router as an NTP server may be acceptable.

 

Configure Cisco router to set time from NTP server

contributed by qmchenry on under Cisco router

Using NTP to synchronize the date and time of multiple devices makes sense even in a small network. When performing forensic analyses or troubleshooting connection problems, having consistent logging timestamps from multiple devices can save your life. Well, at least help keep your hair attached to your head.