About Author

Cisco Network Security Services

by ShahedFebruary 14, 2011October 30, 20150

Cisco Network Security Services Today I will discuss about Cisco Network Security issue. Switches can have a number of network services enabled. Many of these services are typically not necessary for a switch’s normal operation; however if these services are enabled then the switch may be susceptible to information gathering or to network attacks. The characteristics or the poor configuration of the network services on a switch can lead to compromise. Most of these services use one of the following transport mechanisms at Layer 4 of the OSI RM: Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). If possible, …

by ShahedFebruary 13, 2011October 30, 20150

Cisco Switch Port Security Configuration Today I will discuss about Cisco Switch Port Security issue. Layer 2 interfaces on a Cisco switch are referred to as ports. A switch that does not provide port security allows an attacker to attach a system to an unused, enabled port and to perform information gathering or attacks. A switch can be configured to act like a hub, which means that every system connected to the switch can potentially view all network traffic passing through the switch to all systems connected to the switch. Thus, an attacker could collect traffic that contains usernames, passwords …

by ShahedFebruary 13, 2011October 24, 20150

Errdisable reason and recovery procedure: This document defines the errdisabled reason & describes how to recover from it, and provides examples of errdisable recovery. [boxads] Note: The port status of err-disabled displays in the output of the show interfaces interface_number status command. Function of Errdisable: When a switch port is error disabled state, it is effectively shut down and no traffic is sent or received on that port. The port LED is set to the color orange and, when you issue the show interfaces command, the port status shows err-disabled. bellow is an example of error-disabled port status looks like from …

by ShahedFebruary 3, 2011October 26, 20150

Configuring Q-in-Q vlan tunnels on cisco Switch port: Today i will discuss how to Configuring Q-in-Q vlan tunnels in cisco switch. At first login your Switch then apply bellow command. Here i use FastEthernet 0/1 interface. [boxads] conf t interface FastEthernet 0/1 description “your description here” port-type nni switchport access vlan 92 switchport mode dot1q-tunnel no keepalive duplex full storm-control broadcast level 1.00 l2protocol-tunnel cdp no cdp enable no cdp tlv server-location no cdp tlv app spanning-tree bpdufilter enable N.B: Here 92=q-in-q VLAN id.

by ShahedFebruary 2, 2011October 26, 20150

How to Configure Selective QinQ in Huawei Switch: Networking Requirements: As shown in Figure, common Internet access users (using PCs) and IPTV users (using IPTV terminals) connect to the carrier network through Switch A and Switch B and communicate with each other through the carrier network. [boxads] It is required that packets of PCs and IPTV terminals are tagged VLAN 2 and VLAN 3 when the packets are transmitted through the carrier network. Configuration Roadmap: The configuration roadmap is as follows: 1. Create VLANs on Switch A and Switch B. 2. Configure types of interfaces on Switch A and Switch …

by ShahedFebruary 2, 2011October 26, 20150

How to Configure QinQ on Huawei Switch port/interface: Today I will show how to configure QinQ in Huawei Switch port/interface. As shown in Figure, there are two enterprises on the network, namely, Enterprise 1 and Enterprise 2. Enterprise 1 has two office locations; Enterprise 2 has three office locations. The office locations of the two enterprises access SwitchG or SwitchF of the ISP network. [boxads] The network of Enterprise 1 is divided into VLAN 1000 to VLAN 1500; the network of Enterprise 2 is divided into VLAN 2000 to VLAN 3000. It is required that employees in the same VLAN …