The Internet uses IP addresses to refer to all resources but IP addresses are difficult to remember for humans. We instead use easy-to-remember domain names such as www.networkstraining.com to refer to Internet resources. Domain Name System (DNS) is the Internet directory service that automatically translates domain names to corresponding IP addresses. Dynamic Domain Name System […]
Comparison of Cisco ASA Software Versions
With the expansion of Cisco ASA models and the addition of new types of devices, it is inevitable to have also a confusion about which software version is supported for each model. A few years ago we had only the Cisco PIX series which were replaced by the successful Cisco ASA 5500 series firewalls. Now […]
Cisco ASA Firewall Version 9.0 Released
Cisco released a new Cisco ASA software version 9.0 recently and I wanted to inform you about the most notable new features of this release and also about some other important changes you need to keep in mind before upgrading. Upgrade Notes If you upgrade to version 9.0 from any previous ASA version (8.x) then […]
Configuring Static NAT on Cisco Routers
Network Address Translation (NAT) is an operation by which source and/or destination IP addresses within a packet are replaced with different IP addresses. NAT conserves available IP address space by allowing many private IP addresses to be represented by some smaller number of public IP addresses. Private IP addresses are defined in RFC 1918 and […]
Which Cisco VPN Topic Are you Interested in – Vote Below
Recently I have been thinking to write a new Cisco book which will be about Cisco VPN configuration. The topic of Virtual Private Networks (used to connect remote sites together over the Internet or to allow mobile users to establish remote access connections to their corporate network resources) is a hot topic in networking. I […]
Initial Configuration of Cisco ASA For ASDM Access
In this Video Tutorial I will show you how to enable initial access to the ASA device in order to connect with ASDM graphical interface or with SSH. An out-of-the-box Cisco ASA device is not fully ready to be managed by the GUI interface (Adaptive Security Device Manager – ASDM). There is an initial configuration […]
Configuring Cisco IP SLA (IP Service Level Agreement Tutorial)
Getting back to the basics! Sometimes less is more and with this simple IOS IP SLA configuration tutorial this is true. Cisco IOS IP SLA (Service Level Agreement) is a tool that can be used to generate synthetic network traffic used for network management. SLA can be configured to send TCP connects, ICMP or even […]
Cisco UC560 Dial Plan for Voice Mail Configuration Example
While working with a Cisco UC560 setting up CME (Call Manager Express) and CUE (Cisco Unity Express) I came across an issue. I had setup and registered my phones and extensions and all was well. I was able to make calls to and from internal phones. While working to setup CUE and my first mailbox […]
How to Configure IP Traffic Export on Cisco Routers
Have you ever been in a situation where you needed to capture traffic going through a router? Have you ever wished you had a switch available to create a SPAN port? Have you ever asked why you took that small hub out of your computer bag? With all of these tools you could have simply […]
Cisco IOS DHCP Configuration
One of the most exciting pieces of configuration within Cisco IOS, in my opinion, is IP DHCP Pools. With this feature we can configure a Cisco switch or router to act as a DHCP server. This ability is useful in several cases including some of the following; small business DHCP sever, disaster recovery DHCP server […]
Cisco ASA NAT Configuration for version 8.3 and later
If you administer any of the Cisco ASA 5500 firewall family products some things should be noted about the differences in configuration for 8.3 and newer versions of code. One of the most significant changes to be noted is NAT (Network Address Translation). In the Cisco ASA 8.3 version of code Cisco has introduced the […]
CCSP Retired – Replaced By CCNP Security
Since November 17, 2011, the Cisco Certified Security Professional (CCSP) certification has been retired and will not be offered anymore from Cisco. People who are already certified (like myself) as CCSP professionals, will keep their certification until it expires within the usual 3 year period that Cisco certifications last. For example, looking at my certification […]
Cisco ASA IKEv1 and IKEv2 Support for IPSEC
IETF proposed an updated Internet Key Exchange (IKE) protocol, called IKEv2, which is used to simplify and improve the legacy IKE protocol (IKEv1). Cisco ASA introduced support for IPSEC IKEv2 in software version 8.4(1) and later. In this ASA version, IKEv2 was added to support IPsec IKEv2 connections for AnyConnect and LAN-to-LAN VPN implementations. Of […]