cisco vpn: Tutorial

Showing posts with label Tutorial. Show all posts

3194 Error Repair Tutorial - iTunes Restore Error Fix

You may encounter 3194 error when you attempt to downgrade iOS4 to 3.1.3. This error is occurs because your PC is unable to restore the old version iPhone 3.1.3 firmware as it tries to run the downgrading process from iOS 4. This problem can occur to any type or computer model and is linked to the setbacks of iTunes and the files it uses to restore the iPod or iPhone. It may also be the case if you have issues in your registry causing this error to appear.

What Causes Error 3194?

The typical error message that would be displayed on your screen is in this format:

"The iPhone "Tommy's iPhone" could not be restored. An unknown error occurred (3194)."

The main cause of this problem is the fact that Apple now signs the firmware and users cannot do any upgrade or downgrade if they use a firmware that Apple has not signed off on. This issue may be addressed if you use an older firmware signed by Apple, however, this resolution may not work every time. To downgrade iOS 4 to OS 3.1.3, you may apply these steps.

How To Fix Error 3194

The first thing to do is to replace the "Hosts" file of Windows that would incorporate Apple.com.

To perform this task, you have to locate the path "c:windowssystem32driversetc". After that, look for the "hosts" file in notepad format. This can be done by pressing "Open With" and then choosing "Notepad" as you right click the file. Once opened in notepad, you have to type "74.208.10.249gs.apple.com" at the bottom of the document. After that, you have to make sure the connection of your iPhone device to iTunes is in recovery mode. To be able to do this, start by switching off your device. Then on the handset, select the "Home" button and plug the USB cable. As soon as you successfully connect the USB cable, it will boot up and you will find the message "Connect To iTunes" shown on your screen.

After this, you have to restore your iPhone or iPod. You can begin doing this by starting your iTunes. Then you will see that your iPod/iPhone Touch will be detected in recovery mode. Now, click the "SHIFT" key for users of Windows while also pressing the "ALT" key, however if you are a Mac user you must also press on the "Restore" button. After that, select OS 3.1.3. This method will enable you to use this version on your iTouch device.

Another way to resolve this error is to run a registry cleaning program in your system. The registry is one of the potential reasons why errors like 3194 are triggered. The "registry" is a central database that records important files, information, settings and options. In order for Windows to load up and run programs, it has to read the required files it needs to perform tasks through this database. Unfortunately, the registry oftentimes gets corrupted, damaged, infected, or clogged up making your Windows not able to read the necessary files properly. As this happens, your PC's operation will slow down and Windows will not correctly load the programs. To eliminate this issue, you have to download and run a registry cleaner tool which will scan through your system and fix all the errors inside. One highly recommended tool is the "Frontline Registry Cleaner", a widely used software that has proven efficacy in fixing errors and problems on your computer.

free design software android market

Continuar leyendo

Basic Configuration Tutorial For the Cisco ASA 5510 Firewall

Continuing our series of articles about Cisco ASA 5500 firewalls, I'm offering you here a basic configuration tutorial for the Cisco ASA 5510 security appliance. This device is the second model in the ASA series (ASA 5505, 5510, 5520 etc) and is fairly popular since is intended for small to medium enterprises. Like the smallest ASA 5505 model, the 5510 comes with two license options: The Base license and the Security Plus license. The second one (security plus) provides some performance and hardware enhancements over the base license, such as 130,000 Maximum firewall connections (instead of 50,000), 100 Maximum VLANs (instead of 50), Failover Redundancy, etc. Also, the security plus license enables two of the five firewall network ports to work as 10/100/1000 instead of only 10/100.

Next we will see a simple Internet Access scenario which will help us understand the basic steps needed to setup an ASA 5510. Assume that we are assigned a static public IP address 100.100.100.1 from our ISP. Also, the internal LAN network belongs to subnet 192.168.10.0/24. Interface Ethernet0/0 will be connected on the outside (towards the ISP), and Ethernet0/1 will be connected to the Inside LAN switch.

The firewall will be configured to supply IP addresses dynamically (using DHCP) to the internal hosts. All outbound communication (from inside to outside) will be translated using Port Address Translation (PAT) on the outside public interface. Let's see a snippet of the required configuration steps for this basic scenario:

Step1: Configure a privileged level password (enable password)

By default there is no password for accessing the ASA firewall, so the first step before doing anything else is to configure a privileged level password, which will be needed to allow subsequent access to the appliance. Configure this under Configuration Mode:

ASA5510(config)# enable password mysecretpassword

Step2: Configure the public outside interface

ASA5510(config)# interface Ethernet0/0

ASA5510(config-if)# nameif outside

ASA5510(config-if)# security-level 0

ASA5510(config-if)# ip address 100.100.100.1 255.255.255.252

ASA5510(config-if)# no shut

Step3: Configure the trusted internal interface

ASA5510(config)# interface Ethernet0/1

ASA5510(config-if)# nameif inside

ASA5510(config-if)# security-level 100

ASA5510(config-if)# ip address 192.168.10.1 255.255.255.0

ASA5510(config-if)# no shut

Step 4: Configure PAT on the outside interface

ASA5510(config)# global (outside) 1 interface

ASA5510(config)# nat (inside) 1 0.0.0.0 0.0.0.0

Step 5: Configure Default Route towards the ISP (assume default gateway is 100.100.100.2)

ASA5510(config)# route outside 0.0.0.0 0.0.0.0 100.100.100.2 1

Step 6: Configure the firewall to assign internal IP and DNS address to hosts using DHCP

ASA5510(config)# dhcpd dns 200.200.200.10

ASA5510(config)# dhcpd address 192.168.10.10-192.168.10.200 inside

ASA5510(config)# dhcpd enable inside

The above basic configuration is just the beginning for making the appliance operational. There are many more configuration features that you need to implement to increase the security of your network, such as Static and Dynamic NAT, Access Control Lists to control traffic flow, DMZ zones, VPN etc.

Visit my website in my resource box below for more information about Cisco products and solutions. You can also learn how to configure any Cisco ASA 5500 Firewall Here (applicable for ALL ASA models running software versions 7.x and 8.x).

free design software

Continuar leyendo

Cisco CCNA / CCNP Home Lab Setup Tutorial: How To Buy & Build A Frame Relay Switch

One of the major topics on your CCNA and CCNP exams is Frame Relay. Additionally, Frame Relay is one of the most popular WAN technolgies in today's networks. Getting hands-on experience with Frame Relay in Cisco networks isn't just a good idea, it's a necessity. Let's face it, your employer is going to get a little touchy if you start experimenting with your network's Frame Relay setup.

To practice all your important Frame Relay commands for your exams, you need a working Frame Relay cloud in your home lab. A production network's Frame cloud consists of a lot of Frame switches, but if you choose wisely, a single Cisco router can act as your home lab's entire Frame cloud!

Before we look at the configuration of such a router (hereafter referred to as a "frame relay switch"), let's look at the physical requirements.

The more serial ports you have, the better. You should get a router with at least four serial ports. For frame switching purposes, it doesn't matter if the ports are synchronous or asynchronous - you just need the ports.

You will also need some DTE/DCE cables. The DCE end of the cables will be connected to the frame switch.

A great configuration for a CCNA practice lab is three routers that serve as "production" routers, and a 4th router as a frame relay switch. (You'll want an access server as well, but that's another article.)

What I use in my student and customer pods is a setup where R1 is connected to the frame switch's S1 port, R2 is connected to S2 on the frame switch, and R3 is connected to the frame switch's S3 port.

Now comes the tricky part - the configuration. A frame relay switch's config can be hard to find, so here's a copy of mine. Pay particular attention to the config on ports s1, s2, and s3.

version 12.0

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

hostname FRAME_SWITCH

ip subnet-zero

no ip domain-lookup

frame-relay switching

interface Ethernet0

no ip address

no ip directed-broadcast

shutdown

interface Serial0

ip address 10.1.1.2 255.255.255.0

clockrate 56000

interface Serial1

no ip address

no ip directed-broadcast

encapsulation frame-relay

logging event subif-link-status

logging event dlci-status-change

clockrate 56000

no frame-relay inverse-arp

frame-relay intf-type dce

frame-relay route 122 interface Serial2 221

frame-relay route 123 interface Serial3 321

interface Serial2

no ip address

no ip directed-broadcast

encapsulation frame-relay

logging event subif-link-status

logging event dlci-status-change

clockrate 56000

no frame-relay inverse-arp

frame-relay intf-type dce

frame-relay route 221 interface Serial1 122

interface Serial3

no ip address

no ip directed-broadcast

encapsulation frame-relay

logging event subif-link-status

logging event dlci-status-change

clockrate 56000

no frame-relay inverse-arp

frame-relay intf-type dce

frame-relay route 321 interface Serial1 123

interface BRI0

ip address 150.1.1.1 255.255.255.252

no ip directed-broadcast

encapsulation ppp

dialer map ip 150.1.1.2 name R2 broadcast 2335552221

dialer-group 1

ip classless

dialer-list 1 protocol ip permit

line con 0

exec-timeout 0 0

logging synchronous

transport input none

line aux 0

line vty 0 4

end

The key command in the global configuration is frame-relay switching. You must have this configured before you can configure the interfaces.

The interfaces will be configured with the frame route command. Let's take a look at what each value means in the command frame-relay route 122 interface Serial2 221.

frame-relay route - the command

122 - the incoming DLCI on this interface

interface serial2 - the interface the data will be sent out

221 - the outgoing DLCI

This command on S1 means that anything that comes in on this port on DLCI 122 will be sent out interface serial2 on DLCI 221.

It's a good idea to hard-code the interfaces to act as DCEs with the frame intf-type dce command. Since these interfaces are acting as DCEs, the clockrate command is needed for the line protocol to come up.

Once you've configured your frame switch as shown and have configured the frame map statements on the "production" routers, you can test the frame switch configuration. On the frame switch, run the command show frame route.

FRAME_SWITCH#show frame route

Input Intf Input Dlci Output Intf Output Dlci Status

Serial1 122 Serial2 221 active

Serial1 123 Serial3 321 active

Serial2 221 Serial1 122 active

Serial3 321 Serial1 123 active

You should see "active" for all the interfaces. If you see "deleted", make sure your frame switch interfaces are open if they are, check the router configs.

Keep in mind that you can still configure routing protocols to run on ports that you're not using for frame switching. The router we used here had an ethernet port and BRI port, and the BRI port has been configured as part of the production network. Running frame switching does not disable IP routing.

Purchasing and configuring your own frame relay switch is an invaluable part of your Cisco education. By practicing your frame commands and configuring frame connections over your own frame relay cloud, you're polishing your Cisco skills and gaining knowledge that cannot be duplicated by simulator programs.

To your success,

USB Storage free design software

Continuar leyendo

Cisco CCNP / BSCI Exam Tutorial: Ten IP Routing Details You Must Know!

To pass the BSCI exam and earn your CCNP, you've got to keep a lot of details in mind. It's easy to overlook the "simpler" protocols and services such as static routing and distance vector protocols. With this in mind, here's a quick review of some details you should know for success in the exam room and real-world networks!

When packets need to be routed, the routing table is parsed for the longest prefix match if multiple paths exist with the same prefix length, the route with the lowest AD is preferred. If there are still multiple valid paths, equal-cost load-sharing goes into effect.

The ip route command is used to create static routes the command ip route 0.0.0.0 0.0.0.0 creates a default static route.

A static route with a next-hop IP address has an AD of one, while a static route with a local exit interface has an AD of zero.

A floating static route is a static route with an AD higher than that of the dynamic routing protocols running on the router, ensuring that the static route can only be used if the routing protocol goes down.

On-Demand Routing (ODR) is only appropriate in a hub-and-spoke network. The spokes effectively become stub routers. ODR uses Cisco Discovery Protocol (CDP) to send route information.

To propagate a default route with IP routing, use the ip default-network command. To do so with IP routing disabled, use ip default-gateway. You can also redistribute a static route into most protocols, but not IGRP. IGRP does not understand a static route to 0.0.0.0.

The ip helper-address command takes certain broadcasts and translates then into unicasts in order to allow the router to forward them. These default ports are:

TIME, port 37

TACACS, port 49

DNS, port 53

BOOTP/DHCP Server, port 67

BOOTP/DHCP Client, port 68

TFTP, port 69

NetBIOS name service, port 137

NetBIOS datagram services, port 138

To name other ports, use the ip forward-protocol command. To remove any of these ports from the default list, use the no ip forward-protocol command.

ICMP Router Discovery Protocol (IRDP) hosts hear multicast Hellos from routers, allowing host-router discovery. HSRP routers create a virtual router that hosts think is a real router. Both protocols help networks cut over to a functional router quickly when their primary router goes down.

free design software

Continuar leyendo

How To Resolve Windows Error 43 - Working Tutorial To Repair Windows 43 Error

Windows error 43 - "Windows has stopped this device because it has reported problems" - is a common problem because of the way it will just stop your computer from being able to run smoothly. The issue can appear out of the blue and will typically prevent you from either using a specific piece of software or actually loading up your PC properly. To resolve this problem, you first need to ensure that your PC is able to correctly communicate with the hardware that's causing an issue, as well as then repair any of the problems that Windows may have inside.

The 43 error basically means that your computer is unable to use a specific piece of hardware on your computer. Every Windows PC runs by using various hardware components to help control various features of your system... and the way that your operating system (software) communicates with the hardware that your computer uses is by using a set of "drivers". Each time you use your PC, about 30 different driver programs are continually working to bridge the communication gap between Windows and your hardware. If any part of the drivers or hardware on your system become damaged, then the 43 error will appear.

Reasons for this error appearing also include:

Windows has registry errors Your hardware of your PC is unable to work correctly Your system has some sort of problem with its settings

The way to resolve Windows error 43 is to first ensure that all the driver programs your computer uses are working correctly. This can be done by clicking onto "Start > Control Panel > Device Manager" and then looking for any small yellow exclamation mark icons in the list. This will basically mean that your PC cannot read the files your system requires to run the hardware, which could cause the 43 error. If you see any damaged / non-functional drivers, you should uninstall them from your system. You should also ensure that there are no problems with the actual hardware components of your PC - as it can be the case that some of the components your system uses will become damaged.

It's recommended you also use a registry cleaner application to fix any of the errors that Windows has inside. A registry cleaner is a software application which is able to scan through your PC and get rid of any of the damaged issues that your computer may have inside the "registry database". The registry database is a central storage facility which keeps all the settings, options and information for Windows in a central store, and is used by all your software & hardware to help them run correctly. Unfortunately, the registry is also causing a huge number of errors on your system because of the way it will be saved incorrectly. To ensure that your computer is able to run as smoothly as possible, you can download a registry cleaner program from the Internet, install it and then allow it to fix any of the problems that Windows may have.

USB Storage

Continuar leyendo

Working Tutorial - For 9 runtime error on your PC repair

9 shows the runtime error when you run a Microsoft Visual Basic form a Visual Basic for duplicate experiments. When you click on "Run-time error '9 ':' and see" index range "means that the settings are illegible Visual Basic, so that errors in your computer.

This type of error usually occurs when you just "copy" and "paste". This method of transferring exact copies of the sheetsExcel workbook is causing the error. You can verify that this is the case, if the code looks like this:

"ThisWorkbook.Sheets (" Module2 ") a copy first. ActiveWorkbook.Sheets = (1)".

In some cases, the error message when the copy was manually into Microsoft Excel or when a printer is not correctly defined in the computer. This is simply a case of misconfiguration. To remove the right things and you get the error message, the following instructions.

The first step is to add a printerthe system by going to Control Panel. You can use it after opening the START button to find. From there find "Printers and Faxes" and select it by double-clicking. Then double-click again on "Add Printer" option. After that, a wizard printer, you breeze through the process and all you have to do is follow. Excel or Visual Basic is often whether to install a printer confused. The only way to eliminate confusion for one. Once this is done, return to the controlControl Panel and select "Windows Update". Thus, the system automatically updates all the updates it needs to run smoothly. Normally, the lack of updates required is sufficient to cause the runtime error 9.

The third step is always a reliable antivirus program. Viruses leave damage, especially in important programs on your PC. If these programs are infected, they become unreadable and can not handle the commands of the computer correctly. This causes the error to show,with a virus scan, the virus can be detected and the infection can be removed.

The final step includes a tool registry cleaner. A large part of why the error occurs because the registry. Maintains the registry keys, files and settings that used to run the computer system for various functions. If the system does not have the necessary files it needs to run correctly, then some errors pop up as the ninth Runtime Error To resolve this problem, aRegistry cleaner should be used to be, of course, the registry database.

USB Storage free design software HP Wireless Printer

Continuar leyendo

Working Tutorial - For 9 runtime error on your PC repair

"ThisWorkbook.Sheets (" Module2 ") a copy first. ActiveWorkbook.Sheets = (1)".

The third step is always a reliable antivirus program. Viruses leave damage, especially in important programs on your PC. If these programs are infected, they become unreadable and can not handle the commands of the computer correctly. This is causing the error to show,with a virus scan, the virus can be detected and the infection can be removed.

android market USB Storage

Continuar leyendo

Cisco CCNA Exam Tutorial: Cisco Discovery Protocol (CDP)

Article Source: http://www.articlesbase.com:80/computers-articles/cisco-ccna-exam-tutorial-cisco-discovery-protocol-cdp-4538988.html

HP Wireless Printer free design software android market

Continuar leyendo

Cisco CCNP Certification exam tutorial - Knowing RADIUS and TACACS + For Your ISCW Exam

As part of your CCNP certification exam studies, particularly for the ISCW exam, you must remove the differences between TACACS + and RADIUS.

As a CCNA and future CCNP, you have the authentication in the form of creating a local database of usernames and passwords for Telnet access and PPP authentication is configured. This is sometimes called self-AAA application, since no external server is involved.

It 's more than likely that using aServer for one of the following security protocols configured:

TACACS +, a proprietary Cisco protocol based on TCP

RADIUS, an open standard developed UDP-based protocol originally developed by IETF

An obvious question is: "If a TACACS +, TACACS what?" TACACS, the original version of the protocol and is rarely used today.

Before proceeding with the AAA authentication configuration, there are some other TACACS + / RADIUS differences, you should knowby:

While TACACS + encrypts the entire packet, RADIUS encrypts only the password in the first client-server package.

RADIUS combines authentication and authorization processes effectively, making it very difficult to make a run, but not the others.

TACACS + are considered as authentication, authorization and accounting in separate processes. This allows a different method of authentication should be used (Kerberos, for example), while using TACACS + for authorization andAccounting.

RADIUS does not support Novell Async Services Interface (Nasi) NetBIOS Frame Protocol Control Protocol, an X.25 packet assembler / disassembler (PAD), or AppleTalk Remote Access Protocol (ARAP or ARA). TACACS + supports all of these.

RADIUS implementations from different vendors may not work well together, or at all.

RADIUS no control over the authorization level of users, but can TACACS +.

We will discuss the use of two protocolsa future CCNP certification tutorial! Read more tutorial CCNA, CCENT, and CCNP here on the site!

android market Mini Notebook Computer

Continuar leyendo

Basic setup tutorial for the Cisco ASA 5510 Firewall

Continuing our series of articles on the Cisco ASA 5500 firewall, I offer here a basic setup tutorial for the Cisco ASA 5510 security appliances. This unit is the second model series ASA (ASA 5505, 5510, 5520, etc.) and is very popular, as it was designed for small and medium-sized. As the smallest model, the 5510 ASA 5505 provides two models of licensing options: The basic license and the Security Plus license The second (more security), providesdifferent hardware and performance improvements to the basic license, as up to 130,000 firewall connections (instead of 50,000), 100 VLAN maximum (instead of 50), redundancy, failover, etc. In addition, the Security Plus license enables two of the five ports Firewall network instead of just working as 10/100/1000 10/100.

Then you will see a simple scenario of Internet access, help us to understand the basic steps required to set up the 5510th ASA Suppose we have assigned a static public IP address100.100.100.1 address from our ISP. It also includes the internal LAN subnet 192.168.10.0/24. Interface Ethernet0 / 0 is connected with the outside (ISP) and Ethernet0 / 1 is the internal LAN switch to connect.

The firewall is configured to obtain IP addresses dynamically (DHCP) to provide guests with interiors. All communications from it (from outside) will be translated as Port Address Translation (PAT) on the external public. Let usPart of the configuration steps required for this baseline scenario:

Step 1: Set a password to enter privileged level (password)

By default, no password to access the ASA firewall, the first step before anything else is a privileged level password is required to access later you can configure the device. Configure this in configuration mode:

ASA5510 (config) # enable password MySecretPassword

Step 2: Configure the publicexternal interface

ASA5510 (config) # interface Ethernet0 / 0

ASA5510 (config-if) # nameif outside

ASA5510 (config-if) # security-level 0

ASA5510 (config-if) # ip address 100.100.100.1 255 255 255 252

ASA5510 (config-if) # no shutdown

Step 3: Configure the trusted internal interface

ASA5510 (config) # interface Ethernet0 / 1

ASA5510 (config-if) # nameif inside

ASA5510 (config-if) # security-level 100

ASA5510 (config-if) # ip address 192.168.10.1255.255.255.0

ASA5510 (config-if) # no shutdown

Configuring PAT on outside interface: Step 4

ASA5510 (config) # global (outside) 1 interface

ASA5510 (config) # nat (inside) 1 0.0.0.0 0.0.0.0

Step 5: Set the default route to the ISP (eg 100.100.100.2 Default Gateway)

ASA5510 (config) # route 0.0.0.0 0.0.0.0 100.100.100.2 outside a

Step 6: Configure the firewall to the internal IP address and DNS to be allocated to hosts via DHCP

ASA5510 (config) # dhcpd dns200.200.200.10

ASA5510 (config) # dhcpd address in 192.168.10.10-192.168.10.200

ASA5510 (config) # dhcpd enable inside

The configuration on the surface is just the beginning for the production of the device in operation. There are many more configuration options, you must implement these lists to increase the security of your network, such as static and dynamic NAT, Access Control, control traffic flow, DMZ, VPN, etc.

Visit my website in my box of income belowMore information about Cisco products and solutions. You can also learn how to configure here, all the Cisco ASA 5500 firewall (for all models with ASA software versions 7.x and 8.x).

wireless inkjet printer

Continuar leyendo

Cisco CCNA Certification Exam Tutorial: Configuring and Troubleshooting VTP

Not only is your CCNA exam questions on VLAN trunking protocol, almost all networks, to go more than one VLAN VTP stressed. Whether you are for passing the CCNA exam or simply improve your networking skills in design, this VTP tutorial will help you learn the basics of this important protocol.

VTP allows switches to advertise VLAN information between other members of the same VTP domain. VTP allows a consistent view of the switched network throughall switches. When you create a VLAN on a switch in a VTP server, all other devices in the VTP domain for VLAN that reported their existence. VTP servers will know about each VLAN, VLAN, and no members that have the switch.

VTP switches in a run of three modes. In server mode, VLANs can be created, modified and deleted on a VTP server. If these measures are adopted, the changes to all switches in the VTP domain are advertised. The server VTP VLAN configuration information maintainedreboot.

In client mode switch can not create, modify, or delete VLANs. Can not keep Client VTP VLAN configuration information to the restart, I get this information from a VTP server.

Networks in the real world, this is usually done to centralize the creation and deletion of VLANs. An interesting side effect of client / server approach is that if a VLAN is only change for the client ports on the VTP, VLAN must still firstbe created on the VTP server. The VTP client-server, you experience the VLAN from the VTP and VLAN ports can be placed so that

The third mode is a VTP transparent mode. VTP switches to ignore VTP messages. Would you like to receive VTP advertisements from other switches. VLANs can be created, deleted and edited on a transparent server, but these changes are not advertised to other switches in the VTP domain.

For switches running VTP onsuccessfully exchange VLAN information, three things must happen. I have listed for you in the order we see them in the real world.

The VTP domain name must match. This is case-sensitive. "Cisco" and "Cisco" are two different domains.

To distribute information about a new VLAN, the switch to which VLAN must be set in server mode.

Learning VTP is not only a good idea to pass the CCNA exam, is a skill that is requiredto be effective in configuring and troubleshooting VLANs. I wish you the best in both jobs!

HP Pavilion Battery

Continuar leyendo

Cisco CCNP / BSCI Exam Tutorial: Ten IP Routing Details You need to know!

To pass the BSCI exam and earn your CCNP, you've taken a lot of detail in mind. It is easy to overlook the "simpler" protocols and services such as static routing protocols and distance vector. Thus, here is a quick overview of some of the details you need to know to succeed in the exam room and real networks!

If packages are to be forwarded, the routing table for analyzing longest prefix match when multiple paths with the same prefix length, the route with the presentlower AD preferred. If there is even more valid paths, with equal-cost load-sharing is in force.

The ip route command is used to route the command ip route 0.0.0.0 0.0.0.0 static created a default static route.

A static route with a next-hop IP address is an announcement of one, while a static route has a local interface to go out with an announcement of zero.

A floating static route is a static route with a higher than that of dynamic routing protocols running on the ADRouter so that the static route can only be used if the routing protocol goes down.

On-Demand Routing (ODR) is only useful in a hub-and-spoke network. The rays actually become stub router. ODR uses Cisco Discovery Protocol (CDP) to send information on the fly.

To propagate a default route with IP routing, the command defaults to the IP network. To do this with IP routing disabled, use the ip default-gateway. You can also deploy a static route in most protocolsbut not IGRP. IGRP does not understand a static route to 0.0.0.0.

The ip helper-address command takes certain broadcasts and translates then unicast to the router can forward them. These default ports are:

TIME, port 37

TACACS, port 49

DNS, port 53

BOOTP / DHCP server, port 67

BOOTP / DHCP Client, port 68

TFTP, port 69

NetBIOS name service, port 137

NetBIOS datagram service, port 138

To use other ports namesThe ip forward-protocol command. Each of these ports by default and no ip forward-protocol command.

ICMP Router Discovery Protocol (IRDP) is home to listen to multicast Hellos from routers, allowing discovery of host-router. HSRP router, virtual router, home to think about is a router itself. Both protocols help networks section of a functional router quickly when their primary router fails.

Visit : MP3 Player freedesignsoftware data recovery software plantronicsbluetooth

Continuar leyendo

Cisco CCNA / CCNP Certification Exam Tutorial: Configuring PPP Callback

You can, in situations where a router needs a remote site to dial into a central router to run, but the budget is much higher when the remote router allows the call. This scenario is perfect for callback when the PPP callback client makes a call to a callback server, authentication is, and then the server depends on the client! This ensures that the client is not paying. The server then calls back to the customer.

InIn the following example, the client was configured and when R2-R1 is the callback server. Lets look at both configurations and requires only the PPP callback commands.

Client:

Forgot your username R1 CCIE

Interface BRI0

IP address 172.12.12.2 255.255.255.0

encapsulation ppp

dialer map ip 172.12.12.1 name R1 5557777 broadcast

Dialer-group 1

isdn switch-type basic-ni

ppp callback

PPP AuthenticationType

Most of this configuration will be familiar to you, but the command PPP callback can not work. This command enables BRI to request a callback.

Pretty simple, right? The PPP callback server configuration requires more configuration and an additional map class as well.

Server:

Forgot your username R2 CCIE
Interface BRI0

IP address 172.12.12.1 255.255.255.0

encapsulation ppp

Dialer callback-secure

dialer map ip 172.12.12.2R2 CALL_R2_BACK class name broadcast 5558888

Dialer-group 1

isdn switch-type basic-ni

accept PPP callback

PPP CHAP

CALL_R2_BACK dialer map-class

User name dialer callback-server

Survey control PPP callback server from top to bottom ...

Dialer callback-Secure provides security for the withdrawal. If the remote router can not be authenticated for the withdrawal, the call is interrupted.

The dialer map statement hoursCALL_R2_BACK calls the class appears at the bottom of the card configuration.

PPP callback can accept PPP callback on this router.

dialer callback-server username callback server says that the statement refers to the device map is a client dialer callback.

The only way to find out if the work configuration and testing, then try to ping from R1 to R2 to see if the withdrawal takes place.

R2 # ping 172.12.12.1

Type cancel the escape sequence.

Sending5, 100-byte ICMP Echos to 172.12.12.1 timeout is 2 seconds:

02:45:42: br0 DDR: Dialing cause ip (s = 172.12.12.2, d = 172.12.12.1)

02:45:42: DDR br0: Attempting to dial 5557777

02:45:42:% LINK-3-UPDOWN: Interface BRI0: 1, was amended in

02:45:42: br0: 1 DDR: Callback negotiated - now separated

02:45:42: br0: DDR 1: Disconnect call

02:45:42:% ISDN-6-CONNECT: Interface BRI0: 1 is now connected to 5557777 R1

02:45:42:% LINK-3-UPDOWN: Interface BRI0: 1,different situation down

02:45:42: DDR: Callback client for R1 created 5,557,777

02:45:42: br0: 1 DDR: disconnecting call .....

Success rate is 0 percent (0 / 5)

R2 #

02:45:57:% LINK-3-UPDOWN: Interface BRI0: 1, changed to

R2 #

02:45:57: br0: 1 DDR: Callback received from R1 5,557,777

02:45:57: DDR: Freeing callback R1 5,557,777

02:45:57: br0: 1 DDR: dialer protocol up

1 02:45:58:% LINE PROTO-5-UPDOWN: Line protocol interface BRI0:been amended

The recall has been successfully negotiated, and then disconnected the call. R1 and R2 then called dialers point to R1, confirmed the end of the call.

R1 # show dialer

type dialer BRI0 - = ISDN

Dial String Successes Failures Last DNIS Last status

5558888 2 4 00:00:20 happened

Zero incoming call (s) have been shown.

0 incoming call (s) rejected for callback.

BRI0 1 - dialer type =ISDN

Idle timer (120 seconds), Fast idle timer (20 sec)

Wait for carrier (30 seconds), resume (15 seconds)

Dialer state of the data link layer up

Dial reason: Callback callback

Time to disconnect 99 secs

Connected to 5558888 (R2)

Pretty cool! Callback is not only important for the transfer of your CCNA and CCNP exams - in a case such as this example shows, the company can save a lot of money!

Friends Link : MP3 Player camcorderbuyguide notebookwindows7 freedesignsoftware

Continuar leyendo

Cisco CCENT - CCNA Certification Exam Tutorial - Logging Synchronous And Exec-Timeout Commands

Throughout my CCENT and CCNA tutorials, you will notice these two curious commands on the console port:

line con 0

exec-timeout 0 0

Logging synchronous -

I recommend these commands together for many years, CCNA and CCNP candidates from their own home labs, but they can come in handy at work as well. Let us consider these commands one at a time, starting with the logging synchronous command.

If the router wants you to know something, it wants you toknow right now. If the router sends a message to the console while you're entering a config, by default the router will interrupt your work to show you that message.

In the following example, I opened a Serial interface, which will always result in at least two messages relating to the physical and logical state of the interface. I started typing a sentence immediately after I opened the interface to show you what happens. I've bolded the sentence I was entering.

R1(config)#int s0

R1 (config-if) # closed

R1 (config-if) # ^ Z

R1 # So here I am

4d04h:% SYS-5-CONFIG_I: Configured from console by CONSOLETYPE

4d04h:% LINK-3-UPDOWN: Interface Serial0, changed state to uping and

4d04h:% LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to interrupt upi've very bad!

4d04h:% LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down

This may seen trivial, but if you have a long commandEntry interrupted by a console message, you are wondering how to prevent it. (If you stop crying to the router, that is.) By configuring the logging synchronous command on the console port, tell the router to keep those messages until there is no input from the keyboard and no other exit the router recognizes as a show command output.

R1 (config) # line console 0

R1 (config-line) # logging?

Synchronous synchronous signal output

The secondCommand I always enter on the console port of a house lab router or switch, exec-timeout 0 0. This disables the default timeout of 5 minutes and 0 seconds. If you change the timer, instead of to disable it, the first number represents the number of minutes of inactivity in the timer and the second number is the number of seconds.

R1 (config) # line con 0

R1 (config-line) # exec-timeout?

Timeout in minutes

R1 (config-line) # exec-timeout 0?

Timeout inSeconds

R1 (config-line) # exec-timeout 0 0 disabled (the inactivity timer)

This command can also be configured on the VTY lines, and that the inactivity timer for Telnet or SSH and disable users. Here we find the VTY line inactivity timer to 10 minutes.

R1 (config) # line vty 0 4

R1 (config-line) # exec-timeout?

Timeout in minutes

R1 (config-line) # exec-timeout 0?

Timeout in seconds

R1 (config-line) # exec-timeout 10?

Timeout inSeconds

R1 (config-line) # exec-timeout 10 0

Some network administrators hate this command, and I personally do not like to disable my router Telnet and SSH inactivity timer. They're great commands for your current or future home lab, and I also recommend for your CCENT and CCNA exams!

Friends Link : spyware protection free spyware removal computer consulting spyware removal intel core processor

Continuar leyendo

Basic Configuration Tutorial For the Cisco ASA 5505 Firewall

The Cisco ASA 5505 firewall is the smallest model of the new Cisco 5500 series hardware appliances. Although this model is ideal for small businesses, branch offices or even home use are likely to be the firewall security features such as the largest models (5510, 5520, 5540, etc.). The Adaptive Technology of the ASA Firewall Security provides solid and reliable firewall security, advanced application security features, Denial of Service attack protection, and much more.In addition, the implementation of the ASA 5505 appliance supports 150Mbps firewall throughput, and 4000 firewall connections per second, which is more than enough for small networks is.

In this article I will explain the basic configuration steps are necessary to set up a Cisco ASA 5505 firewall to connect a small network to the Internet. We anticipate that our ISP has assigned us a static public IP address (for example) 200.200.200.1 as an example, and that our internal network 192.168.1.0/24 area. Weis Port Address Translation (PAT) to use to translate our internal IP addresses to the public outside of the interface. The difference between the 5505-model from the larger models, ASA is that there is an 8-port 10/100 switch, which acts as a Layer 2 only. This means you can not configure the physical port as a Layer 3 ports, but you have to create VLANs and assign the interface to layer 2 interfaces in each VLAN. By default, the interface Ethernet0 / 0 assigned to VLAN 2 and it is the external interface(the one that connects to the Internet), and assigned to the other 7-interfaces (Ethernet0 / 1 to 0 / 7) by default on VLAN 1 and are used for connecting to the internal network. Let's see, the basic configuration setup of the most important steps you need to configure.

Step 1: Configure the internal VLAN interface
-------------------------------------------------- ----
ASA5505 (config) # interface vlan 1
ASA5505 (config-if) # nameif inside
ASA5505 (config-if) # security-level100
ASA5505 (config-if) # ip address 192.168.1.1 255.255.255.0
ASA5505 (config-if) # closed

Step 2: Configure the external interface VLAN (Internet connected)
-------------------------------------------------- -----------------------------------
ASA5505 (config) # interface vlan 2
ASA5505 (config-if) # nameif outside
ASA5505 (config-if) # security-level 0
ASA5505 (config-if) # ip address 200.200.200.1 255.255.255.0
ASA5505 (config-if) # closed

Step 3: AssignEthernet 0 / 0 to VLAN 2
-------------------------------------------------
ASA5505 (config) # interface Ethernet0 / 0
ASA5505 (config-if) # switchport access vlan 2
ASA5505 (config-if) # closed

Step 4: Check the other interfaces with no closed
--------------------------------------------------
ASA5505 (config) # interface Ethernet0 / 1
ASA5505 (config-if) # closed

Do the same for Ethernet0 / 1 to 0 / 7.

Step 5: Configuring PAT on the outsideInterface
-------------------------------------------------- ---
ASA5505 (config) # global (outside) 1 interface
ASA5505 (config) # nat (inside) 1 0.0.0.0 0.0.0.0

Step 6: Configure the default route to the ISP (assume default gateway is 200.200.200.2
-------------------------------------------------- -------------------------------------------------- -----
ASA5505 (config) # route outside 0.0.0.0 0.0.0.0 200.200.200.2 1

The above steps are absolutely necessary stepsYou need to configure for the manufacture of the device in operation. Of course there are many more configuration details that you need to implement to ensure the safety and functionality of your device, such as Access Control Lists, Static NAT, DHCP, DMZ zones, improving authentication, etc.

Visit my website in my resource box below for more information about Cisco products and solutions. You can also configure all Cisco ASA 5500 firewall here.

Continuar leyendo

cisco vpn

3194 Error Repair Tutorial - iTunes Restore Error Fix

Basic Configuration Tutorial For the Cisco ASA 5510 Firewall

Cisco CCNA / CCNP Home Lab Setup Tutorial: How To Buy & Build A Frame Relay Switch

Cisco CCNP / BSCI Exam Tutorial: Ten IP Routing Details You Must Know!

How To Resolve Windows Error 43 - Working Tutorial To Repair Windows 43 Error

Working Tutorial - For 9 runtime error on your PC repair

Working Tutorial - For 9 runtime error on your PC repair

Cisco CCNA Exam Tutorial: Cisco Discovery Protocol (CDP)

Cisco CCNP Certification exam tutorial - Knowing RADIUS and TACACS + For Your ISCW Exam

Basic setup tutorial for the Cisco ASA 5510 Firewall

Cisco CCNA Certification Exam Tutorial: Configuring and Troubleshooting VTP

Cisco CCNP / BSCI Exam Tutorial: Ten IP Routing Details You need to know!

Cisco CCNA / CCNP Certification Exam Tutorial: Configuring PPP Callback

Cisco CCENT - CCNA Certification Exam Tutorial - Logging Synchronous And Exec-Timeout Commands

Basic Configuration Tutorial For the Cisco ASA 5505 Firewall

Search

Popular Posts

Categories

Total Pageviews