Showing posts with label Helpful Tips and Tricks. Show all posts
Configure SSH Security on Cisco Routers
Hey Friends here is a new post for you, in this post we will discuss a secure way to configure the cisco router remotly.
SSH stands for Secure Shell and it is used to exchange the configuration data b/w client device and n/w device like router, switch or server in encrypted format.
To configure SSH on a cisco Router you need to follow the following steps.
1. Configure a hostname of your router
Router>enable
Router#configure terminal
Router(config)#hostname Maati
Maati(config)#
2. Configure a Domain Name on the router
Maati(config)#ip domain-name domain.com
3. Generate Cryptography keys
Maati(config)#cryprto key generate rsa
4. Create User Account(s)
Maati(config)#username Maati password password
5. Enable VTY port for SSH
Maati(config)#line vty 0 15
Maati(config)#login local
Maati(config)#transport input ssh
Optional settings
1. Setting SSH version
Maati(config)#ip ssh version <1-2>
you can either use version 1 or version 2 for ssh
2. Setting Login Retries
Maati(config)#ip ssh retries 4
I have set retries to 4 you can change it as per your requirement
How to create Microsoft Loopback Adapter in Windows
Microsoft Loopback Adapter can be used with gns3 for testing purposes and many more virtualization software. In this post we will discuss how we can create the Microsoft loopback adapter in windows 7.
Steps:
1. In part one create a Microsoft loopback interface in your windows.
2. Right click on “MY COMPUTER” icon on desktop and select the properties.
3. Now on the left hand side of window that opened select the device manager.
4. in the device manager go to menu bar go to ACTION >> ADD LEGECY HARDWARE.
5. Click next on the window that appeared.
6. On the second page select 2nd option “add the hardware that I manually select form a list (Advance) ” and click next.
7. On the next page select the “network adapters” option from the hardware list and click next.
Cisco ASA Firewall on Gns3
Cisco ASA Firewall
is very important from the prospective of CCNP Security exam. We can setup the
ASA Firewall in Gns3 for the preparation of exam and practice. In this post we
will just discuss the setup of ASA in 64-bit as well as 32-bit Gns3 , later on
we will also discuss some interesting configurations and topologies in Gns3
with help of ASA firewall.
So let's begin the
process. First of all we need to download the ASA firewall components. Use the
following links to download the two required image files.
1. Now open gns3 and
from the menu bar follow the path
edit>preference.
2. In preference dialog
go to the qemu and click on the ASA tab.
Break through the firewall security of the college.
Most of the colleges block student access to internet sites like Facebook, orkut and some downloading site also.
But there is always some way to get through the problem for a solution
In this post I have described some ways to break through the college firewall.
HTTP PROXY SERVER
HTTP PROXY SERVER work by transferring data back to your home computer while you are surfing on internet. Your web surfing is through the proxy server. Means the ip address you use online isn’t your home computer’s IP, it is the IP of the proxy. So, if someone looks at your IP while you are surfing their website, the IP they see isn’t yours but is the proxy’s and if surfing with a http proxy there is no way they know you are even using a proxy server.
There are many proxy softwares available in on the internet some of them are PROXY SWITCHER STANDARD, ELITE PROXY SWITCHER. You can use these softwares to switch to different proxy servers .They provide the list of proxy servers to you by downloading the list from internet.

Also You Can use proxy sites which would do the same work and you will avoid the installation of the proxy softwares.
Alist of proxy sites is being provided below :
But there is always some way to get through the problem for a solution
In this post I have described some ways to break through the college firewall.
Now see the device which block my access to a particular destination like facebook or orkut is known as FIREWALL , firewall actually see the destination address that i am sending to internet and firewall can be configured to block specific destinations like facebook .
now all i need to do is "make fool of firewall " and i can do this by sending my packets to someone who will get data from my desired site like faceboook and the condition is that someone should not be blocked by my firewall. and this someone is known as proxy server .i will now send my request of facebook to proxy server and then server will serve me as a medium to communicate with facebook . and my firewall will never be able to detect that i am actually communicating with facebook . it is same like you tell your mom that you are going for tution but after crossing your mom you just go in playground and when you come back home you tell your mom that you are coming from tution class. here your mom act as firewall and tution center act as proxy server.
HTTP PROXY SERVER
HTTP PROXY SERVER work by transferring data back to your home computer while you are surfing on internet. Your web surfing is through the proxy server. Means the ip address you use online isn’t your home computer’s IP, it is the IP of the proxy. So, if someone looks at your IP while you are surfing their website, the IP they see isn’t yours but is the proxy’s and if surfing with a http proxy there is no way they know you are even using a proxy server.
There are many proxy softwares available in on the internet some of them are PROXY SWITCHER STANDARD, ELITE PROXY SWITCHER. You can use these softwares to switch to different proxy servers .They provide the list of proxy servers to you by downloading the list from internet.
Also You Can use proxy sites which would do the same work and you will avoid the installation of the proxy softwares.
Alist of proxy sites is being provided below :
you can use any of these proxy sites to break through the firewall security of the college or school. |
Basic Troubleshoot Cisco IOS
Cisco IOS Support a Number of Commands that can be used to monitor and troubleshoot problems related to configuration andhardware diagonosis.Those who has good experience with cisco ios knows how to deal with problems and which commands would help recover and troubleshoot the problems. This post targets the audience which include engineers with less experience and trying to become more familiar with the tools available for tshoot.
Show Processes CPU
Show Processes CPU
One of the most basic commands to run on a Cisco device is show processes cpu. In its full view the command will show all of the active processes on a device and how much of the processor time the process is taking both currently and historically. Figure 1 below shows a shortened version of the command:
This command would typically be used when troubleshooting a problem with a device that is having trouble performing basic functions; for example if a router is having trouble forwarding and routing packets without loss.
Show Memory
Another command that is commonly in conjunction with the show processes cpu is the show memory command. This command is used to display the current status used and available memory; as with the show processes cpu command the show memory command also displays much more specific information about how memory is being allocated, however the initial information is often enough to get an idea of whether the problem happening is memory related. Figure 2 below shows a shortened version of the command:
Show ip interface brief
One of the most commonly used commands overall is the show ip interfaces brief command. As shown in Figure , this command is very helpful as it displays the interface, its associated IP address and its current status.
Show ip route
The show ip route command is another often used command on Cisco IOS devices; it is used to display the contents of the current IP (IPv4) routing table. Obviously, when working on a Cisco router the contents of the routing table are a central part of the device operations, if information within the routing table is incorrect it can quickly lead an engineer in a direction to solve a problem. Figure below shows the command:
Ping
Another very common tool is the ping command, obviously this is a command/tool that is not limited to Cisco IOS but can be used for a variety of different troubleshooting situations on Cisco devices. At its most simple, the ping command is used to send 5 100-byte ICMP echo packets to a specific destination; but the Cisco IOS extended ping command can do a number of different things that allow allot of troubleshooting flexibility. Some of these abilities include altering the ICMP source interface, packet size, packets sent, pattern sent, do not fragment bit, among others. Figure shows an example of an extended ping:
Traceroute
On the same track as the ping command above the traceroute command is a very basic command that can be very versatile and used in a number of different troubleshooting scenarios. At its most basic the traceroute command is used to trace the route that a packet takes from a source to destination, included with this information is an output of response times between the source and each intermediate device. One often unknown piece of information is that the traceroute command does not work exactly like the tracert command that is used on Microsoft devices; Cisco’s traceroute command uses UDP to trace the route from source to destination, often this is done with other implementations using an ICMP packet. This can be an advantage in many ways because many networks automatically drop ICMP echo packets because they are commonly used in Denial of Service (DoS) attacks. Like the ping command the traceroute command can be configured with a number of different extended parameters including source interface, timeout, number of probes per device hop and UDP port number among others. Figure below shows an example of the traceroute command:
For any query Please Comment Below With Your E-mail ID.
Using secure crt with GNS3 lab simulator
With Secure CRT we can connect to multiple sessions in a single window with different tabs and we can switch to different tabs pressing ctrl + tab . That is the reason secure CRT is popular. In this post we will discuss how we can integrate secure CRT with GNS3.
The Secure CRT software can be downloaded from the following link :
Download Secure CRT
After the download completes, install the software and follow the steps given to integrate with gns3.
Step 1 . Open the GNS3 and go to edit preferences..

Step 2. Now Select the terminal setting under general settings and from the dropdown select the option secure crt 32 or 64 bit according to your install.

Step3. Apply the changes and then save.
Enjoy !!
The Secure CRT software can be downloaded from the following link :
Download Secure CRT
After the download completes, install the software and follow the steps given to integrate with gns3.
Step 1 . Open the GNS3 and go to edit preferences..

Step 2. Now Select the terminal setting under general settings and from the dropdown select the option secure crt 32 or 64 bit according to your install.

Step3. Apply the changes and then save.
Enjoy !!
Make your computer work as server
Make your computer work as server on internet
Hey friends now you can make your pc work as server and share your files on internet from your home server..
All you need to follow some simple steps.
Requirements:
A computer system with windows operating system.
Internet connection of atleast 512kbps (for proper working )
SETTING UP SERVER ON YOUR COMPUTER
First of all download the software HFS from the link given below:
HFS is a single executable file.
No need to install.
Download and run... it's up & ready!
Working on Windows
Now attach the files and folders to HFS you want to share on internet.
LINKING YOUR COMPUTER’S IP ADDRESS TO A DOMAIN NAME.
Go to the following link and sign up :
now choose the desired domain name you want to use on internet for your home server and
attach your ip address to that name ..
Find out the ip address of your computer in local area network
Hey Friends in this post i'm gona tell you how to find out the ip address of the computer system running windows operating system on the local area network
From the command prompt :
1. click on the start and then run
2. type cmd in the run prompt and hit enter
you will get the command prompt window on the screen
3. type "ipconfig" without quotes and press enter it will tell the ip address of all the network cards installed on your computer on local area network.




