This is the eBook version of the printed book.
LAN Switch Security: What Hackers Know About Your Switches
A practical guide to hardening Layer 2 devices and stopping campus network attacks
Eric Vyncke
Christopher Paggen, CCIE® No. 2659
Contrary to popular belief, Ethernet switches are not inherently secure. Security vulnerabilities in Ethernet switches are multiple: from the switch implementation, to control plane protocols (Spanning Tree Protocol [STP], Cisco® Discovery Protocol [CDP], and so on) and data plane protocols, such as Address Routing Protocol (ARP) or Dynamic Host Configuration Protocol (DHCP). LAN Switch Security explains all the vulnerabilities in a network infrastructure related to Ethernet switches. Further, this book shows you how to configure a switch to prevent or to mitigate attacks based on those vulnerabilities. This book also includes a section on how to use an Ethernet switch to increase the security of a network and prevent future attacks.
Divided into four parts, LAN Switch Security provides you with steps you can take to ensure the integrity of both voice and data traffic traveling over Layer 2 devices. Part I covers vulnerabilities in Layer 2 protocols and how to configure switches to prevent attacks against those vulnerabilities. Part II addresses denial-of-service (DoS) attacks on an Ethernet switch and shows how those attacks can be mitigated. Part III shows how a switch can actually augment the security of a network through the utilization of wirespeed access control list (ACL) processing and IEEE 802.1x for user authentication and authorization. Part IV examines future developments from the LinkSec working group at the IEEE. For all parts, most of the content is vendor independent and is useful for all network architects deploying Ethernet switches.
After reading this book, you will have an in-depth understanding of LAN security and be prepared to plug the security holes that exist in a great number of campus networks.
Download this eBook
Tuesday, April 29, 2008
CCENT/CCNA ICND1 Official Exam Certification Guide, Second Edition
CCNP ONT Official Exam Certification Guide
CCNP ONT Official Exam Certification Guide
Master all 642-845 exam topics with the official study guide
Assess your knowledge with chapter-opening quizzes
Review key concepts with foundation summaries
Practice with hundreds of exam questions on the CD-ROM
Amir Ranjbar, CCIE® No. 8669
CCNP ONT Official Exam Certification Guide is a best of breed Cisco® exam study guide that focuses specifically on the objectives for the Optimizing Converged Cisco Networks exam (642-845 ONT). Successfully passing the ONT 642-845 exam certifies that you have the knowledge and skills necessary to optimize and apply effective QoS techniques for converged networks.
CCNP ONT Official Exam Certification Guide follows a logical organization of the CCNP® ONT exam objectives. Material is presented in a concise manner, focusing on increasing your retention and recall of exam topics. You can organize your exam preparation through the use of the consistent features in these chapters. “Do I Know This Already?” quizzes open each chapter and allow you to decide how much time you need to spend on each section. Exam topic lists and concise Foundation Summary information make referencing easy and give you a quick refresher whenever you need it. Challenging chapter-ending review questions help you assess your knowledge and reinforce key concepts.
Wednesday, April 16, 2008
IP Routing Fundamentals
IP Routing Fundamentals
IP Routing Fundamentals A comprehensive ntroduction to routing concepts and protocols in IP networks. * Comprehensive review of the operational mechanics of today’s leading routing protocols, including IGRP, EIGRP, OSPF, RIP, and RIP-2 IP Routing Fundamentals is the definitive introduction to routing in IP networks. This comprehensive guide explores the mechanics of routers, routing protocols, network interfaces, and operating systems. CODE
* Detailed explanation of IP addressing, including classful and classless addresses, subnetting, supernetting, Classless Interdomain Routing (CIDR), and Variable Length Subnet Masks (VLSM)
* Side-by-side comparisons of various LAN segmentation technologies, including bridges, switches, and routers
* Exploration of how routers are used to build wide area networks
* Examination of the future of routing, including IPv6, next generation routing protocols, host-based routing, and IP Switching
How to configure Access Lists in Cisco Routers
How to configure Access Lists in Cisco Routers
hxxp://www.ziddu.com/download.php?uid=aK2fmpqoarObluKnZqqhkZSoY6uhl5Wm6
IP Routing Fundamentals
Tuesday, April 15, 2008
Internet Routing Architectures, 2nd Edition
Internet Routing Architectures, 2nd Edition
The industry’s leading resource for Internet routing solutions and scenarios
* Explore the functions, attributes, and applications of BGP-4, the de facto interdomain routing protocol, through practical scenarios and configuration examples
* Learn the contemporary Internet structure and understand how to evaluate a service provider in dealing with routing and connectivity issues
* Master the addressing techniques–including Classless Interdomain Routing (CIDR)–that are demanded today to facilitate the Internet’s rapid and continuing growth
* Develop optimal routing policies–redundancy, traffic balancing, symmetry, and stability–for your network
* Learn how to seamlessly integrate your intradomain and interdomain routing and manage large and growing autonomous systems
Download Now
Cisco DQOS Exam Certification Guide
Cisco DQOS Exam Certification Guide
The official self-study test preparation guide for the Cisco DQOS 9E0-601 and QOS 642-641 exams
This official study guide helps you master all the topics on the DQOS exam, including:
* QoS concepts, tools, and architectures
* Classification and marking concepts and tools
* Queuing in Cisco routers and configuration of queuing tools
* Traffic policing and shaping in Cisco routers
* Configuration of congestion avoidance tools
* Configuration of link-efficiency tools
* Call admission control (CAC) tools for voice and video connections
* Cisco QoS management tools
* QoS design processes
* QoS on LAN switches
The Cisco IP Telephony Support, Design, and Operations Specialist focused certifications validate proficiency in designing, installing, and supporting a multiservice network solution. A solid understanding of quality-of-service (QoS) features and implementation is essential for all of the Cisco IP Telephony focused certifications and is also a core component of the CCIP(tm) certification.
Download Now
Fault-Tolerant IP and MPLS Networks
Fault-Tolerant IP and MPLS Networks
Design and deploy high availability IP and MPLS network architectures with this comprehensive guide
* Includes a detailed overview of the IP/MPLS forwarding and control plane protocols, including OSPF, IS-IS, LDP, BGP, and RSVP
* Analyze fault-tolerant IP/MPLS control plane architectures with the explanations in this book
* Develop a clear understanding of various high availability aspects of IP/MPLS networks
* Learn how to seamlessly deploy IP/MPLS control plane restart mechanisms
* Master the application of fault-tolerant control-plane architectures in designing and deploying highly reliable and available MPLS applications, such as traffic engineering, L2VPNs, and L3VPNs
* Understand the layered architecture of network-level fault recovery mechanisms, such as optical, SONET, MPLS, and interactions between different layers
In the wake of increased traffic, today’s service providers and enterprises must assure high availability across a variety of networked services and applications. Multiprotocol Label Switching (MPLS) is the enabling technology for the widespread deployment of IP networks in core and Metro Ethernet applications. Many service providers need to move their legacy Layer 2 and Layer 3 services onto converged MPLS and IP-enabled networks, but high availability is a prerequisite for offering profitable carrier-class services. Although most carrier-class routers do provide an adequate level of hardware redundancy, control-plane software is still vulnerable to and, in many cases, the cause of router failures.
Download Now
CCNP ISCW Quick Reference Sheets (Digital Short Cut)
With this document as your guide, you will review topics on the Cisco hierarchical network model as it pertains to the WAN, teleworker configuration and access, frame mode MPLS, site-to-site IPsec VPN, Cisco EZVPN, strategies used to mitigate network attacks, and Cisco device hardening and IOS firewall features. These fact-filled Quick Reference Sheets allow you to get all-important information at a glance, helping you to focus your study on areas of weakness and to enhance memory retention of essential exam concepts.
Download Now
CCNP ONT Quick Reference Sheets: Exam 642-845 (Digital Short Cut)
s a final exam preparation tool, the CCNP ONT Quick Reference Sheets provide a concise review of all objectives on the new CCNP ONT exam (642-845). This digital Short Cut provides you with detailed, graphical-based information, highlighting only the key topics in cram-style format.
With this document as your guide, you will review topics on voice-over-IP (VoIP) networking, quality of service (QoS), IP QoS mechanisms for implementing the DiffServ QoS model, AutoQoS, wireless security, and basic wireless management.
These fact-filled Quick Reference Sheets allow you to get all-important information at a glance, helping you to focus your study on areas of weakness and to enhance memory retention of essential exam concepts.
With this document as your guide, you will review topics on implementing a voice-over-IP (VoIP) network, implementing quality of service (QoS) on converged networks, and implementing the DiffServ QoS model with specific IP QoS mechanisms, AutoQoS, wireless security, and basic wireless management.
Download Now
CCNP BSCI Quick Reference Sheets: Exam 642-901 (Digital Short Cut)
As a final exam preparation tool, the CCNP BSCI Quick Reference Sheets provide a concise review of all objectives on the new CCNP BSCI exam (642-901). This digital Short Cut provides you with detailed, graphical-based information, highlighting only the key topics in cram-style format.
With this document as your guide, you will review topics on advanced IP addressing, routing principles, multicast routing, IPv6, manipulating routing updates, configuring basic BGP, and configuring EIGRP, OSPF, and IS-IS. These fact-filled Quick Reference Sheets allow you to get all-important information at a glance, helping you to focus your study on areas of weakness and to enhance memory retention of essential exam concepts.
Download Now
Saturday, April 12, 2008
Dynamips 10 Steps Guide
I do believe there are some guides in the internet which you can follow to use the Dynamips, however, a few my friends are interested on this and I am too lazy to explain It is a draft instead of a real guide, just call it
Dynamips 10 Steps for Dummies
by CiscoSpot
Any distribution is welcome, please feel free to contact net@netap.com
The website you must know if you are going to be a Dynamiper.
Dynamips Official Blog, http://www.ipflow.utc.fr/blog/Dynagen Official website, http://dynagen.org/Winpcap Official website, http://www.winpcap.org/
Step by Step
1. Download Winpcap, http://www.winpcap.org/install/default.htm
2. Download Dynagen,http://sourceforge.net/project/showfiles.php?group_id=160317
3. Install Winpcap.
4. Install Dynagen.
Three shortcuts will appear on your desktop, Dynagen Sample labs (Folder), Dynamips Server, Network device list. Double-click Dynagen Sample labs and you will see a file called “all_config_options.txt”, which is quite useful for you. Open it by Wordpad instead of Notepad and view the options you can utilize in the labs.
Open “Simple lab 1” and right-click the simple1.net then choose “Edit network file”, and choose Wordpad to open it. It is a 7200 platform and there are two routers in the diagram using 160MB ram, respectively. The main configurations inside are as below.
5. Download Cisco IOS for Cisco 3600 serials.Although Dynamics support several Cisco platforms, personally I prefer 3640 when comparing the RAM requirement, modules support and IOS features. You can search IOS resources from internet yourself.
6. Put *.bin file (c3640-jk9s-mz.123-7.T12.bin in this guide) of your Cisco IOS in some folder. For example, D:\Dynamips.7. Copy simple1.net to the folder D:\Dynamips and change the file by Wordpad. You can also change its name to mylab.net, or the others as well. It doesn’t make any sense for the lab. Based on our information described above, we change the network file as below.8. Run “Dynamips Server” on your desktop. Maybe it will be blocked by Windows Firewall. Just Unblock it. Double-click your *.net file such as mylab.net. Use command “help” to illustrate all the commands you can used through Dynagen. The general commands are “start” and “telnet”.Now we run “start R1” and “telnet R1”. You might notice that there is an alert when you run the command to start R1. When you are running the router without “idle-pc value” configured, the CPU utilization of your computer will keep very high till 100% even only one router instance running.
9. Wait for router R1 has been started until the following message in your Telnet Session, “Would you like to enter the initial configuration dialog? [yes/no]:” . Come back to your Dynagen Window and type the command “idlepc get R1”. You must wait a while and some possible values will be supplied to you.
After you see the information, you can choose the number the system advised. For example, 6 and press Enter. By Windows Task Manager, You can check the CPU utilization when you apply the value to R1. If the CPU utilization is decreased from 100%, then copy the value that you applied, close the Dynagen window and Dynamips Server window.
10. Open your *.net file again and add the idlepc value to it, which is specific for current IOS image. For example,
So far to speak, all the installation and preparation has been finished. We can easily change network topology in the *.net file and simulate various networks following the options in file “all_config_options.txt”.
PEMU 10 Steps Guide
Following the name last time, just call it
PEMU 10 Steps for Dummies
by CiscoSpot
Any distribution is welcome, please feel free to contact net@netap.com
1. Download PEMU and decompress it to any folder.
2. Copy PIX OS to the same folder with PEMU.
3. Change the image in pemu.ini file, take pix802.bin for example.
4. Create one .bat file and edit it with the following contents. It’s in ONE line.
Pemu -net nic,vlan=1,macaddr=00:00:0c:00:00:01 -net udp,vlan=1,sport=8000,dport=9000,daddr=127.0.0.1 -net nic,vlan=2,macaddr=00:00:0c:00:00:02 -net udp,vlan=2,sport=8001,dport=9001,daddr=127.0.0.1 -net nic,vlan=3,macaddr=00:00:0c:00:00:03 -net udp,vlan=3,sport=8002,dport=9002,daddr=127.0.0.1 -serial telnet::4444,server -m 128 FLASH
5. Make a copy of FLASH.empty and change the name to FLASH.
6. Run the .bat file that created.
7. Telnet to 127.0.0.1 4444. If any problem occurred when decompressing the image, you have one option that you change the pix.bin to pix.rar and decompress then get the file pix. Copy it to the PEMU folder and change the pemu.ini to map to this image, “image=pix”.
8. The CPU utilization will be 100%, and there is no tool integrated in PEMU. Download BES and run it to control the CPU utilization.
9. Change your dynagen .net file as follows. If you’re not familiar with Dynamips, please see the post “Dynamips 10 Steps for Dummies” in this blog.
[[2610XM]]idlepc = 0×803f4b40image = F:\EMU\pemu\routers\c2600-is-mz.122-32.binram = 64
[[ROUTER R1]]f0/0 = NIO_udp:9000:127.0.0.1:8000[[ROUTER R2]]f0/0 = NIO_udp:9001:127.0.0.1:8001[[ROUTER R3]]f0/0 = NIO_udp:9002:127.0.0.1:8002
10. Now the PIX can communicate with the routers you configured and the result is,
CCVP CIPT Quick Reference Sheets (Digital Short Cut)
The CCVP certification recognizes a candidate’s ability to create an IP telephony solution that is transparent, scalable, and manageable. Earning a CCVP certification validates a robust set of skills in implementing, operating, configuring, and troubleshooting a converged IP network. The certification content focuses on Cisco Systems Unified CallManager, quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
The Cisco IP Telephony (CIPT) exam tests the candidate’s knowledge of voice-over-IP (VoIP) and public switched telephone network (PSTN) components and technologies and the candidate’s ability to describe, install, configure, and support Cisco CallManager version 4.1 in a Cisco network, including such features as security and video.
Download Now
CCVP CVoice Quick Reference Sheets (Digital Short Cut)
The CCVP certification recognizes a candidate’s ability to create an IP telephony solution that is transparent, scalable, and manageable. Earning a CCVP certification validates a robust set of skills in implementing, operating, configuring, and troubleshooting a converged IP network. The certification content focuses on Cisco Systems Unified CallManager, quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
The Cisco Voice over IP CVOICE exam assesses a candidate’s knowledge of how to implement and support data and voice integration solutions at the network-access level. Topics covered include basic IP telephony operation, router configuration, support, troubleshooting, and integration with an existing public switched telephone network (PSTN).
Download Now
CCVP GWGK Quick Reference Sheets (Digital Short Cut)
The CCVP certification recognizes a candidate’s ability to create an IP telephony solution that is transparent, scalable, and manageable. Earning a CCVP certification validates a robust set of skills in implementing, operating, configuring, and troubleshooting a converged IP network. The certification content focuses on Cisco Systems Unified CallManager, quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
The Cisco Gateway Gatekeeper exam (GWGK 642-453) tests your knowledge of the implementation of Cisco gateways and gatekeepers, including integration of a VoIP network to both PSTN and TDM equipment. Topics covered include implementing dial plans and advanced gateway features such as SRST and DSP resources, implementing gatekeepers and directory gatekeepers to provide hierarchical dial plan resolution, and call admission control.
Download Now
CCVP TUC Quick Reference Sheets (Digital Short Cut)
The CCVP certification recognizes a candidate’s ability to create an IP telephony solution that is transparent, scalable, and manageable. Earning a CCVP certification validates a robust set of skills in implementing, operating, configuring, and troubleshooting a converged IP network. The certification content focuses on Cisco Systems Unified CallManager, quality of service (QoS), gateways, gatekeepers, IP phones, voice applications, and utilities on Cisco routers and Cisco Catalyst switches.
The 642-426 Troubleshooting Unified Communications (TUC) exam certifies that candidates have the knowledge and skills necessary to troubleshoot Enterprise CallManager, Unity, and IP network deployments. The exam addresses hands-on experience in configuring, deploying, and troubleshooting Unified Communications solutions.
Download Now
CCIE Voice Exam Quick Reference Sheets
As a final exam preparation tool, the CCIE Voice Exam Quick Reference Sheets provides a concise review of all objectives on the new CCIE Voice written exam (350-030). This digital Short Cut provides you with detailed, graphical-based information, highlighting only the key topics in cram-style format.
With this document as your guide, you will review topics on Cisco CallManager and Unity; QoS; telephony protocols; IOS IP telephony; IP IVR; IPCC; voice security, operations, and management; and infrastructure and application protocols. These fact-filled Quick Reference Sheets allow you to get all-important information at a glance, helping you focus your study on areas of weakness and to enhance memory retention of essential exam concepts.
Download Now
Deploying Voice over Wireless LANs
Deploying Voice over Wireless LANs
The definitive guide to planning, architecting, deploying, supporting, and creating Voice over Wireless LAN solutions
Recent advances make it possible to deliver high-quality voice and video communications over a wireless LAN (WLAN), replacing costly wired telephone and video surveillance systems and dramatically reducing support costs. However, today’s new voice over WLAN (VoWLAN) technologies require fundamentally different skills and techniques from those used in traditional voice and video systems. Now, there’s a complete guide to every facet of VoWLAN deployment: planning, design, installation, security, maintenance, and troubleshooting.
Download Now
Wireless Networking Printer
Wireless networking is found across the world in coffee houses, restaurants, and libraries. In Europe and South America, it was chosen over standard wired networking due to the infrastructure and costs involved with retro-fitting older buildings for Ethernet networks. As standards were developed from 802.11b to the faster data transfer found in 802.11g, wireless networking became more viable as a choice for computer networks. Combined with the ease of setting up a wireless network it was only a matter of time before wireless networks became the prevalent choice in home networking.
Getting Started
In order to build a computer network, you have to have two or more computers. Any operating system can be networked together, however the steps involved with mixing operating systems requires skills beyond the scope of this article. For instructional purposes, we will only be using the Microsoft Windows family in this tutorial.
The additional components you need to build your wireless network are:
A wireless router.
One wireless network adapter for each computer or device that you wish to connect to the router.
Installing the network adapters
The first step is to install the wireless network adapters into each computer. For desktop computers using a PCI network adapter, you will need to power down the system, open up the case, and insert the adapter into a free PCI slot (the white slots running in a row down the back of the computer motherboard). Once you have seated the card firmly into the PCI slot, screw the card in to secure it, then close up the computer and restart it. Some cards are installed automatically, however you may need to provide the disk containing device drivers if prompted.
For a USB wireless adapter, simply plug it into a free USB port while the computer is running, and install drivers if prompted.
Laptop computers will either have a PCMCIA (the slot that is roughly 2 inches wide and ¼ of an inch high) card adapter or a USB adapter. Both can be plugged into the computer while it is running, though with the PCMCIA card adapter it is a good idea to power off before you plug it in. Install the drivers as required.
The router
Now choose a location for your router. If you have decided that you will use wired connections for any of your desktop systems, obviously you want it close to them. The router will need to be wired to your DSL or cable modem if you are planning to share internet through it.
Once you have found a location that is centralized, plug the router in. Verify that the 'WLAN' LED is lit up. To test connectivity, open a web-browser on one of your wireless computers and enter the default IP address of your router. This address can be found in your router's manual and generally starts with the numbers 192.168.xxx.xxx. If successful you should seen the router's configuration screen.
The first step you should take here is to change the administrator password of the router. Anyone who has the ability to access your router without your permission also knows that the default password for most routers is "admin" or blank.
DHCP and IP addressing
By default, your router will have a 'pool' of IP addresses that it will give to any computer that tries to connect to it wirelessly. This is known as a DHCP server (Dynamic Host Configuration Protocol). It makes it easier for a computer to connect to a network. Home users can take advantage of this option as you don't have to remember the range of IP addresses, the gateway interface, and the DNS server that your network uses; it is all done automatically for you.
If you decide to disable the DHCP feature, you will have to enter all of the addresses mentioned above manually.
Final thoughts
Setting up a wireless network at home is quite simple and most manufacturers offer excellent troubleshooting resources in the owner's manual so don't be afraid to read it.
The most common problem you will have is a weak signal. This can be monitored by the wireless adapter's icon in the toolbar. If it reports a weak signal, you can gain better throughput by moving your computer to another location, or relocating the router itself. The process of finding the strongest signal is done through trial and error.
Another problem you may run into is that older DSL modems/routers sometimes act as a DHCP server as well. You can not run two DHCP servers on a network because they cause conflicts. If this happens, I would suggest contacting your modem manufacturer and ask them how to turn off DHCP at the modem/router that is hardwired.
PacketCable Implementation
PacketCable Implementation
Design, provision, configure, manage, and secure tomorrow’s high-value PacketCable networks
Jeff Riddel, CCIE® No. 12798
PacketCable networks use IP technology to enable a wide range of multimedia services, from IP telephony to interactive gaming and beyond. Because PacketCable-based business and residential services are central to the cable industry’s strategy for growth, the industry’s need for PacketCable expertise is expected to increase dramatically.
PacketCable Implementation is the first complete primer on PacketCable network design, provisioning, configuration, management, and security. Drawing on consulting experience with every leading cable operator, Jeff Riddel presents real-world case studies, sample network designs, configurations, and practical tips for all facets of PacketCable planning and deployment.
Download Now
Designing Network Security, 2nd Edition
Designing Network Security, 2nd Edition
A practical guide to creating a secure network infrastructure
* Understand basic cryptography and security technologies* Identify the threats and common attacks to a network infrastructure* Learn how to create a security policy* Find out how to recover from a security breach* Study specific implementation scenarios for securing your network environment* Learn about advances in security technologies
Designing Network Security, Second Edition, is a practical guide designed to help you understand the fundamentals of securing your corporate network infrastructure. This book takes a comprehensive look at underlying security technologies, the process of creating a security policy, and the practical requirements necessary to implement a corporate security policy.
Download Now
Developing IP Multicast Networks
Developing IP Multicast Networks
The definitive guide to designing and deploying Cisco IP multicast networks
* Clear explanations of the concepts and underlying mechanisms of IP multicasting, from the fundamentals to advanced design techniques* Concepts and techniques are reinforced through real-world network examples, each clearly illustrated in a step-by-step manner with detailed drawings* Detailed coverage of PIM State Rules that govern Cisco router behavior* In-depth information on IP multicast addressing, distribution trees, and multicast routing protocols* Discussions of the common multimedia applications and how to deploy them
Download Now
Thursday, April 10, 2008
CCNP composite 642-892 ver 3.23
- Pass4sure Ver 3.23
- Q:180
hxxp://www.ziddu.com/download.php?uid=Z66inJyuabOgnOKnZqqhkZSpY6ualZum6
PASS4SURE & Testking 60-802 - CCNA
Pass4SURE V 2.93
Q's: 254
hxxp://rapidshare.com/files/88782015/640-802-2.93.rar.html
Cisco Exam 640-802 CCNA
Testking ver 9
hxxp://rapidshare.com/files/69680412/Testking_Cisco_640-802_Version_9.0.pdf
Wednesday, April 9, 2008
Interconnecting Cisco Network Devices, Part 1 (ICND1): CCNA Exam 640-802 and ICND1 Exam 640-822, 2nd Edition
This is the eBook version of the printed book.
Interconnecting Cisco Network Devices, Part 1 (ICND1): CCNA Exam 640-802 and ICND1 Exam 640-822, 2nd Edition
Interconnecting Cisco Network Devices, Part 1 (ICND1), Second Edition, is a Cisco®-authorized, self-paced learning tool for CCENT™ and CCNA® foundation learning. This book provides you with the knowledge needed to configure Cisco switches and routers to operate in corporate internetworks. By reading this book, you will gain a thorough understanding of concepts and configuration procedures required to build a multiswitch, multirouter, and multigroup internetwork that uses LAN and WAN interfaces for the most commonly used routing and routed protocols.
In Interconnecting Cisco Network Devices, Part 1 (ICND1), you will study installation and configuration information that network administrators need to install and configure Cisco products. Specific topics include building a simple network, Ethernet LANs, wireless LANs (WLANs), LAN and WAN connections, and network management. Chapter-ending review questions illustrate and help solidify the concepts presented in the book.
Whether you are preparing for CCENT or CCNA certification or simply want to gain a better understanding of how to build small Cisco networks, you will benefit from the foundation information presented in this book.
CCNA Practical Studies
This is the eBook version of the printed book.
CCNA Practical Studies
Practice for the new CCNA exam #640-801, as well as #640-607, with hands-on networking lab scenarios
* Build your own home internetworking lab from the ground up and use it to master essential internetworking skills
* Select Cisco router components and navigate within Cisco IOS(r) Software
* Gain access to Cisco routers and switches and configure a terminal server to access each lab router
* Configure hostnames and set passwords
* Configure router interfaces such as Ethernet, Token Ring, Loopback, and Serial
* Configure multiple routing protocols, including RIP, IGRP, and EIGRP
* Implement route redistribution to share routing information between routing domains
* Connect remote offices to the main network with ISDN DDR
* Integrate IPX into the network
* Control access with standard and extended access lists
* Troubleshoot common network failures
CCNA INTRO Exam Certification Guide (CCNA Self-Study, 640-821, 640-801)
This is the eBook version of the printed book.
CCNA INTRO Exam Certification Guide (CCNA Self-Study, 640-821, 640-801)
The official self-study test preparation guide for the Cisco CCNA INTRO exam 640-821
Master CCNA INTRO exam topics, including:
* TCP/IP and OSI networking models
* Operating Cisco routers and LAN switches
* LAN switching basics, VLANs, and Trunking
* IP addressing and subnetting
* Basic router configuration and operation
* Discovering information about an IP network
* Dynamic routing protocols
* Analog modems, PAP/CHAP, DSL and Cable
Designing Network Security, 2nd Edition
This is the eBook version of the printed book.
Designing Network Security, 2nd Edition
A practical guide to creating a secure network infrastructure
* Understand basic cryptography and security technologies
* Identify the threats and common attacks to a network infrastructure
* Learn how to create a security policy
* Find out how to recover from a security breach
* Study specific implementation scenarios for securing your network environment
* Learn about advances in security technologies
Designing Network Security, Second Edition, is a practical guide designed to help you understand the fundamentals of securing your corporate network infrastructure. This book takes a comprehensive look at underlying security technologies, the process of creating a security policy, and the practical requirements necessary to implement a corporate security policy.
CCDP ARCH Quick Reference (Digital Short Cut)
As a final exam preparation tool, the CCDP ARCH Quick Reference provides a concise review of all objectives on the new CCDP ARCH exam (642-873). This digital Short Cut provides you with detailed, graphical-based information, highlighting only the key topics in cram-style format.
With this document as your guide, you will review topics on campus and data center design, addressing and routing, advanced WAN services, SAN design, VPN design, IP multicast design, voice over WLAN design, secure designs, designing an e-commerce module, and network management with Cisco IOS Software. This fact-filled Quick Reference allows you to get all-important information at a glance, helping you focus your study on areas of weakness and to enhance memory retention of essential exam concepts.
Cisco CCIE Fundamentals: Network Design and Case Studies
This is the eBook version of the printed book.
Cisco CCIE Fundamentals: Network Design and Case Studies
Part 1: Internetwork Design provides a set of general guidelines for planning internetworks and specific suggestions for several key internetworking implementations. Part 1 focuses on identifying the essential technologies and appropriate implementations for specific environments.
Part 2: Internetworking Case Studies provides practical examples illustrating how readers can implement Cisco Systems software features. Case studies address implementation concerns and show how to apply features. Detailed configuration file examples and network diagrams are included.
Developing IP Multicast Networks
This is the eBook version of the printed book.
Developing IP Multicast Networks
The definitive guide to designing and deploying Cisco IP multicast networks
* Clear explanations of the concepts and underlying mechanisms of IP multicasting, from the fundamentals to advanced design techniques
* Concepts and techniques are reinforced through real-world network examples, each clearly illustrated in a step-by-step manner with detailed drawings
* Detailed coverage of PIM State Rules that govern Cisco router behavior
* In-depth information on IP multicast addressing, distribution trees, and multicast routing protocols
* Discussions of the common multimedia applications and how to deploy them
Routing TCP/IP, Volume II (CCIE Professional Development)
This is the eBook version of the printed book.
Routing TCP/IP, Volume II (CCIE Professional Development)
A detailed examination of exterior routing protocols and advanced IP routing issues
Routing TCP/IP, Volume II, enables you to:
* Master the operational components, configuration, and troubleshooting of BGP-4-the de facto interdomain routing protocol
* Understand the operation, configuration, and troubleshooting of NAT
* Learn how to deploy, configure, and troubleshoot IP multicast routing through an array of case studies and exercises
* Familiarize yourself with the design goals and current state of IPv6, the new generation of the IP protocol
* Implement router management through a diverse range of expert-tested methods
* Test and validate your knowledge with practical, comprehensive review questions, configuration exercises, and troubleshooting exercises
* Further your CCIE preparation while mastering advanced TCP/IP concepts
Tuesday, April 8, 2008
JEFF DOEL Routing TCP/IP, Volume I, 2nd Edition
This is the eBook version of the printed book.
Routing TCP/IP, Volume I, 2nd Edition
A detailed examination of interior routing protocols — completely updated in a new edition
# A complete revision of the best-selling first edition–widely considered a premier text on TCP/IP routing protocols
# A core textbook for CCIE preparation and a practical reference for network designers, administrators, and engineers
# Includes configuration and troubleshooting lessons that would cost thousands to learn in a classroom and numerous real-world examples and case studies
Praised in its first edition for its approachable style and wealth of information, this new edition provides readers a deep understanding of IP routing protocols, teaches how to implement these protocols using Cisco routers, and brings readers up to date protocol and implementation enhancements. Routing TCP/IP, Volume 1, Second Edition, includes protocol changes and Cisco features that enhance routing integrity, secure routers from attacks initiated through routing protocols, and provide greater control over the propagation of routing information for all the IP interior routing protocols. Routing TCP/IP, Volume 1, Second Edition, provides a detailed analysis of each of the IP interior gateway protocols (IGPs). Its structure remains the same as the best-selling first edition, though information within each section is enhanced and modified to include the new developments in routing protocols and Cisco implementations. What’s New In This Edition? The first edition covers routing protocols as they existed in 1998. The new book updates all covered routing protocols and discusses new features integrated in the latest version of Cisco IOS Software. IPv6, its use with interior routing protocols, and its interoperability and integration with IPv4 are also integrated into this book. Approximately 200 pages of new information are added to the main text, with some old text removed. Additional exercise and solutions are also included.
ccsp complete study guide
Top 5 Wireless Tools
#1      |  Kismet : A powerful wireless snifferKismet is an console (ncurses) based 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. It identifies networks by passively sniffing (as opposed to more active tools such as NetStumbler), and can even decloak hidden (non-beaconing) networks if they are in use. It can automatically detect network IP blocks by sniffing TCP, UDP, ARP, and DHCP packets, log traffic in Wireshark/TCPDump compatible format, and even plot detected networks and estimated ranges on downloaded maps. As you might expect, this tool is commonly used for wardriving. Oh, and also warwalking, warflying, and warskating, ... Also categorized as: packet sniffers |
#2 |  NetStumbler : Free Windows 802.11 SnifferNetstumbler is the best known Windows tool for finding open wireless access points ("wardriving"). They also distribute a WinCE version for PDAs and such named Ministumbler. The tool is currently free but Windows-only and no source code is provided. It uses a more active approach to finding WAPs than passive sniffers such as Kismet or KisMAC. Also categorized as: packet sniffers |
#3 |  Aircrack : The fastest available WEP/WPA cracking toolAircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It can recover a 40 through 512-bit WEP key once enough encrypted packets have been gathered. It can also attack WPA 1 or 2 networks using advanced cryptographic methods or by brute force. The suite includes airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files). Also categorized as: password crackers |
| #4 |  Airsnort : 802.11 WEP Encryption Cracking ToolAirSnort is a wireless LAN (WLAN) tool that recovers encryption keys. It was developed by the Shmoo Group and operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered. You may also be interested in the similar Aircrack. Also categorized as: password crackers |
| #5 |  KisMAC : A A GUI passive wireless stumbler for Mac OS XThis popular stumbler for Mac OS X offers many of the features of its namesake Kismet, though the codebase is entirely different. Unlike console-based Kismet, KisMAC offers a pretty GUI and was around before Kismet was ported to OS X. It also offers mapping, Pcap-format import and logging, and even some decryption and deauthentication attacks. Also categorized as: packet sniffers |
Top 10 Password Crackers
| #1 |  Cain and Abel : The top password recovery tool for WindowsUNIX users often smugly assert that the best free security tools support their platform first, and Windows ports are often an afterthought. They are usually right, but Cain & Abel is a glaring exception. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. It is also well documented. Also categorized as: packet sniffers |
| #2 |  John the Ripper : A powerful, flexible, and fast multi-platform password hash crackerJohn the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. You will want to start with some wordlists, which you can find here, here, or here. |
| #3 |  THC Hydra : A Fast network authentication cracker which support many different servicesWhen you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. Like THC Amap this release is from the fine folks at THC. |
| #4 | Aircrack : The fastest available WEP/WPA cracking tool Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It can recover a 40 through 512-bit WEP key once enough encrypted packets have been gathered. It can also attack WPA 1 or 2 networks using advanced cryptographic methods or by brute force. The suite includes airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files). Also categorized as: wireless tools |
#5 |  L0phtcrack : Windows password auditing and recovery applicationL0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc). LC5 was discontinued by Symantec in 2006, but you can still find the LC5 installer floating around. The free trial only lasts 15 days, and Symantec won't sell you a key, so you'll either have to cease using it or find a key generator. Since it is no longer maintained, you are probably better off trying Cain and Abel, John the Ripper, or Ophcrack instead. |
| #6 | Airsnort : 802.11 WEP Encryption Cracking Tool AirSnort is a wireless LAN (WLAN) tool that recovers encryption keys. It was developed by the Shmoo Group and operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered. You may also be interested in the similar Aircrack. Also categorized as: wireless tools |
| #7 |  SolarWinds : A plethora of network discovery/monitoring/attack toolsSolarWinds has created and sells dozens of special-purpose tools targeted at systems administrators. Security-related tools include many network discovery scanners, an SNMP brute-force cracker, router password decryption, a TCP connection reset program, one of the fastest and easiest router config download/upload applications available and more. Also categorized as: traffic monitoring tools |
| #8 | Pwdump : A window password recovery tool Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file. |
| #9 | RainbowCrack : An Innovative Password Hash Cracker The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished. |
| #10 | Brutus : A network brute-force authentication cracker This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more. No source code is available. UNIX users should take a look at THC Hydra. |
