Showing posts with label Helpful Tips and Tricks. Show all posts

Configure SSH Security on Cisco Routers





Hey Friends here is a new post for you, in this post we will discuss a secure way to configure the cisco router remotly.
SSH stands for Secure Shell and it is used to exchange the configuration data b/w client device and n/w device like router, switch or server in encrypted format.

To configure SSH on a cisco Router you need to follow the following steps.

1. Configure a hostname of your router

Router>enable

Router#configure terminal

Router(config)#hostname Maati

Maati(config)#

2. Configure a Domain Name on the router

Maati(config)#ip domain-name  domain.com


3. Generate Cryptography keys


Maati(config)#cryprto key generate rsa


4. Create User Account(s)


Maati(config)#username Maati password password

5. Enable VTY port for SSH

Maati(config)#line vty 0 15


Maati(config)#login local


Maati(config)#transport input ssh


Optional settings


1. Setting SSH version


Maati(config)#ip ssh version <1-2>


you can either use version 1 or version 2 for ssh


2. Setting Login Retries


Maati(config)#ip ssh retries 4

I have set retries to 4 you can change it as per your requirement

Saturday, 13 July 2013
Posted by Mandie

How to create Microsoft Loopback Adapter in Windows

How to create Microsoft Loopback Adapter in Windows


Microsoft Loopback Adapter  can be used with gns3 for testing purposes and many more virtualization software. In this post we will discuss how we can create the Microsoft loopback adapter in windows 7.

Steps:

1. In part one create a Microsoft loopback interface in your windows.

2. Right click on “MY COMPUTER” icon on desktop and select the properties.


3. Now on the left hand side of window that opened select the device manager.


4. in the device manager go to menu bar go to ACTION >> ADD LEGECY HARDWARE.


5. Click next on the window that appeared.


6. On the second page select 2nd option “add the hardware that I manually select form a list (Advance) ” and click next.


7. On the next page select the “network adapters” option from the hardware list and click next.

Thursday, 30 May 2013
Posted by Mandie

Cisco ASA Firewall on Gns3



Cisco ASA Firewall is very important from the prospective of CCNP Security exam. We can setup the ASA Firewall in Gns3 for the preparation of exam and practice. In this post we will just discuss the setup of ASA in 64-bit as well as 32-bit Gns3 , later on we will also discuss some interesting configurations and topologies in Gns3 with help of ASA firewall.

So let's begin the process. First of all we need to download the ASA firewall components. Use the following links to download the two required image files.

  1. Kernel file

  1. Initrd file

1. Now open gns3 and from the menu bar follow the path  edit>preference.
2. In preference dialog go to the qemu and click on the ASA tab.





Wednesday, 22 May 2013
Posted by Mandie

Break through the firewall security of the college.

Most of the colleges block student access to internet sites like Facebook, orkut and some downloading site also.

But there is always some way to get through the problem for a solution
In this post I have described some ways to break through the college firewall.



Now see the device which block my access to a particular destination like facebook or orkut is known as FIREWALL , firewall actually see the destination address that i am sending to internet and firewall can be configured to block specific destinations like facebook  .
now all i need to do is "make fool of firewall " and i can do this by sending my packets to someone who will get data from my desired site like faceboook and the condition is that someone should not be blocked by my firewall. and this someone is known as proxy server .i will now send my request of facebook to proxy server and then server will serve me as a medium to communicate with facebook . and my firewall will never be able to detect that i am actually communicating with facebook . it is same like you tell your mom that you are going for tution but after crossing your mom you just go in playground and when you come back home you tell your mom that you are coming from tution class. here your mom act as firewall and tution center act as proxy server.

HTTP PROXY SERVER

 
HTTP  PROXY SERVER work by transferring data back to your home computer while you are surfing on internet. Your web surfing is through the proxy server. Means the ip address you use online isn’t your home computer’s IP, it is the IP of the proxy. So, if someone looks at your IP while you are surfing their website, the IP they see isn’t yours but is the proxy’s and if surfing with a http proxy there is no way they know you are even using a proxy server.


There are many proxy softwares available in on the internet some of them are PROXY SWITCHER STANDARD, ELITE PROXY SWITCHER. You can use these softwares to switch to different proxy servers .They provide the list of proxy servers to you by downloading the list from internet.




























Also You Can use proxy sites which would do the same work and you will avoid the installation of the proxy softwares.

Alist of proxy sites is being provided below :



















































you can use any of these proxy sites to break through the firewall security of the college or school.
Sunday, 30 October 2011
Posted by Mandie

Basic Troubleshoot Cisco IOS

Cisco  IOS Support a Number of Commands that can be used to monitor and troubleshoot problems related to configuration andhardware diagonosis.Those who has good experience with cisco ios knows how to deal with problems and which commands would help recover and troubleshoot the problems. This post targets the audience which include engineers with less experience and trying to become more familiar with the tools available  for tshoot.

Show Processes CPU

One of the most basic commands to run on a Cisco device is show processes cpu. In its full view the command will show all of the active processes on a device and how much of the processor time the process is taking both currently and historically. Figure 1 below shows a shortened version of the command:



This command would typically be used when troubleshooting a problem with a device that is having trouble performing basic functions; for example if a router is having trouble forwarding and routing packets without loss.


Show Memory

Another command that is commonly in conjunction with the show processes cpu is the show memory command. This command is used to display the current status used and available memory; as with the show processes cpu command the show memory command also displays much more specific information about how memory is being allocated, however the initial information is often enough to get an idea of whether the problem happening is memory related. Figure 2 below shows a shortened version of the command:





Show ip interface brief

One of the most commonly used commands overall is the show ip interfaces brief command. As shown in Figure , this command is very helpful as it displays the interface, its associated IP address and its current status.






Show ip route

The show ip route command is another often used command on Cisco IOS devices; it is used to display the contents of the current IP (IPv4) routing table. Obviously, when working on a Cisco router the contents of the routing table are a central part of the device operations, if information within the routing table is incorrect it can quickly lead an engineer in a direction to solve a problem. Figure  below shows the command:



Ping

Another very common tool is the ping command, obviously this is a command/tool that is not limited to Cisco IOS but can be used for a variety of different troubleshooting situations on Cisco devices. At its most simple, the ping command is used to send 5 100-byte ICMP echo packets to a specific destination; but the Cisco IOS extended ping command can do a number of different things that allow allot of troubleshooting flexibility. Some of these abilities include altering the ICMP source interface, packet size, packets sent, pattern sent, do not fragment bit, among others. Figure  shows an example of an extended ping:



Traceroute

On the same track as the ping command above the traceroute command is a very basic command that can be very versatile and used in a number of different troubleshooting scenarios. At its most basic the traceroute command is used to trace the route that a packet takes from a source to destination, included with this information is an output of response times between the source and each intermediate device. One often unknown piece of information is that the traceroute command does not work exactly like the tracert command that is used on Microsoft devices; Cisco’s traceroute command uses UDP to trace the route from source to destination, often this is done with other implementations using an ICMP packet. This can be an advantage in many ways because many networks automatically drop ICMP echo packets because they are commonly used in Denial of Service (DoS) attacks. Like the ping command the traceroute command can be configured with a number of different extended parameters including source interface, timeout, number of probes per device hop and UDP port number among others. Figure below shows an example of the traceroute command:




For any query Please Comment Below With Your E-mail ID.


Monday, 24 October 2011
Posted by Mandie

Using secure crt with GNS3 lab simulator

With Secure CRT we can connect to multiple sessions in a single window with different tabs and we can switch to different tabs pressing ctrl + tab . That is the reason secure CRT is popular. In this post we will discuss how we can integrate secure CRT with GNS3.

The Secure CRT software can be downloaded from the following link :

Download Secure CRT


After the download completes, install the software and follow the steps given to integrate with gns3.


Step 1 . Open the GNS3 and go to edit preferences..








Step 2. Now Select the terminal setting under general settings and from the dropdown select the option secure crt 32 or 64 bit according to your install.





Step3. Apply the changes and then save.


Enjoy !!
Tuesday, 11 October 2011
Posted by Mandie

Make your computer work as server

Make your computer work as server on internet


Hey friends now you can make your pc work as server and share your files on internet from your home server..

All you need to follow some simple steps.

Requirements:
A computer system with windows operating system.
Internet connection of atleast 512kbps (for proper working )

SETTING UP SERVER ON YOUR COMPUTER
First of all download the software HFS from the link given below:

HFS is a single executable file.
No need to install.
Download and run... it's up & ready!
 Working on Windows

Now attach the files and folders to HFS you want to share on internet.

LINKING YOUR COMPUTER’S IP ADDRESS TO A DOMAIN NAME.

 Go to the following link and sign up :

now choose the desired domain name you want to use on internet for your home server and

attach your ip address to that name ..


O.K. your home server is ready now..

Screenshot of HFS




Monday, 25 July 2011
Posted by Mandie

Computer as wireless access Point








For any Query Please leave Your comment With Your E-mail id.
Tuesday, 19 July 2011
Posted by Mandie

Find out the ip address of your computer in local area network





  Hey Friends in this post i'm gona tell you how to find out the ip address of the computer system running windows operating system on the local area network

From the command prompt :
1. click on the start and then run
2. type cmd in the run prompt and hit enter
you will get the command prompt window on the screen


3. type "ipconfig" without quotes and press enter it will tell the ip address of all the network cards installed on your computer on local area network.
Sunday, 24 April 2011
Posted by Mandie

- Copyright © Network Hopper -network-hopper- Powered by Blogger