IPNetworkSolution

Cisco ASA X-series Firewall

noreply@blogger.com (Anonymous) — Sat, 02 Mar 2013 05:21:00 +0000

Cisco ASA x series Devices, Its an dvance ASA firewall with Gigaport supports. In X-series you have Gigaports in all version. Hiher firewall throuhput and performance....!

Habib Foundation University - Assistant Manager – Networks & Systems

noreply@blogger.com (Anonymous) — Thu, 28 Feb 2013 05:09:00 +0000

Position Vacant

Assistant Manager – Networks & Systems

Position Title	Assistant Manager – Networks & Systems
Department	Information Technology
Reporting Relationship	Senior Strategist, IT

Scope of the Position
Assistant Manager – Network & Systems Administration is responsible for effective provisioning, installation/configuration, operation, and maintenance of systems hardware, software and related infrastructure. This individual participates in technical research and development to enable continuing innovation within the infrastructure. This individual ensures that system hardware, operating systems, software systems, and related procedures adhere to organizational values, enabling staff, faculty, and Partners. This individual will assist project teams with technical issues in the Initiation and Planning phases of our standard Project Management Methodology. These activities include the definition of needs, benefits, and technical strategy; research & development within the project life-cycle; technical analysis and design; and support of operations staff in executing, testing and rolling-out the solutions. This individual is accountable for the following systems: Linux and Windows systems that support IS infrastructure; Enterprise Applications Campus Management; Database Administration on SQL, MYSQL and Oracle on these systems include SA engineering including provisioning, operations, support, maintenance and research and development to ensure continual innovation.

Summary of Key Functions

Characteristics, Duties and Responsibilities:

Development:

Responsible to work with consultants and vendor for requirements gathering, design, configuration, technical specifications, integration, data migration, testing, documentation, training, pre & post implementation setups / configuration and support.
Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
Research and recommend innovative, and where possible automated approaches for system administration tasks. Identify approaches that leverage our resources and provide economies of scale.
Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
Perform regular security monitoring to identify any possible intrusions.
Provide Tier III/other support per request from various constituencies. Investigate and troubleshoot issues.
Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.
Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary. Maintain operational, configuration, or other procedures.
Perform periodic performance reporting to support capacity planning. Perform ongoing performance tuning, hardware upgrades, and resource optimization as required. Configure CPU, memory, and disk partitions as required. Maintain data center environmental and monitoring equipment.
Functions as a lead worker doing the work similar to those in the work unit; responsibility for training, instruction, setting the work pace, and possibly evaluating performance.
Establishing the needs of users and monitoring user access and security; monitoring performance and managing parameters to provide fast query responses to front-end users.
Mapping out the conceptual design for a planned database in outline; considering both back-end organization of data and front-end accessibility for end-users.
Refining the logical design so that it can be translated into a specific data model; further refining the physical design to meet system storage requirements.
Installing and testing new versions of the DBMS; maintaining data standards, including adherence to the Data Protection Act.
Writing systems documentation, including data standards, procedures and definitions for the data dictionary (metadata); controlling access permissions and privileges.
Developing, managing and testing back-up and recovery plans; ensuring that storage, archiving, back-up and recovery procedures are functioning correctly.
Capacity planning; working closely with IT project managers, database programmers and multimedia programmers.
Communicating regularly with technical, applications and operational staff to ensure database integrity and security.
Commissioning and installing new applications and customizing existing applications in order to make them fit for purpose.

RequiredQualification, Experience and Skills
The Assistant Manager – Networks & Systems will have:. Bachelor’s degree in Computer Science, Information Technology, Information Systems, Computer Engineering or equivalent combination of experience, education and training from a reputed university. Overall 03 years’ System Administration experience ideally at Higher Education institution, development / software house or at Systems Integrators SI’s and vendor business. Proven track record of managing / assisting on Networking projects, designing and configuring wired / wireless networks is must. Experience in designing and configuring telecommunication systems project is an advantage. Systems Administration/System Engineer certification in Linux and Microsoft. Systems Administration/System Engineer certification in Microsoft Exchange. Systems Administration/System Developer certification in Microsoft Lync Servers. Systems Administration experience in MS SharePoint and other open source systems. Application deployments of Open Source platforms, its customization and integrations. Good knowledge of ASP.NET, PHP, Java and open source platforms. Good knowledge of Web Applications deployment and integration. Excellent communication skills and the ability to work with stakeholders of differing levels. Attention to detail and a flexible approach to work. Excellent planning, coordination and prioritization skills and proven capacity to undertake varied tasks simultaneously within stringent deadlines. Experience of working at jobs requiring close attention to detail. Proven record of teamwork and project management in previous roles. Self-motivated and able to meet agreed objectives on own initiative.

Habib Universtiy

Habib University will be a pioneering institution providing a rich liberal arts education to the youth of Pakistan to create a generation of socially responsible and critically conscious individuals, who can bring Pakistan to the forefront not only economically and financially, but intellectually as well. The University is being established in Karachi, Pakistan. Habib University will initiate its classes in the year 2014 with 200 students, offering four undergraduate programs offered through the School of Arts, Humanities and Social Sciences and the School of Science and Engineering. The University will offer a rich, interdisciplinary learning fabric by bringing together the innovative spirit of Entrepreneurship with high quality Science, Engineering and Liberal Arts education. The University will be a modern learning space fully equipped with state-of-the-art research and teaching facilities in order to attract the best faculty from around the world. For more information please visit: http://habib.edu.pk/

About Habib Universtiy Foundation

Habib University Foundation (H.U.F.) is a not-for-profit organization, which commenced its work in 2007. H.U.F. responds to existing gaps in the educational scenario of Pakistan, by supporting educational initiatives, research and innovation. It is focused on improving the status of education within the country by supporting research, planning and implementation of innovative educational models. H.U.F. extends support at all tiers of education delivery within the country including higher education, vocational skill development, pre-tertiary education and research and advocacy. For more information on the foundation please visit: http://www.huf.org.pk

About House of Habib

The House of Habib (HoH) is a well-established industrial house in Pakistan. It is equally famous for its philanthropic contributions towards the development of Pakistani society. HoH has a rich tradition in commerce and finance that dates all the way back to 1841 when Esmail Ali of Jamnagar, India, set up a utensil factory in Bombay (present day Mumbai). Since then, his descendants have built on his hard work and today the House of Habib has business interests across varied industries. Today, the House of Habib’s portfolio boasts of some of the most successful and financially stable companies in Pakistan including Indus Motors, AuVitronics Limited, DYNEA Pakistan Limited, Shabbir Tiles and Ceramics Limited, Thal Limited, Habib Bank AG Zurich etc.We are an equal opportunity employer and appreciate diversity in our organization. We assure you that at the foundation, you will interact with people from various backgrounds, increasing your exposure to various skill sets and opportunities.

Offered Benefits

The foundation offers a comprehensive salary package that is designed to meet the needs of a diverse workforce. In addition to this, employees are also entitled to become members of the Foundation’s Provident Fund, Group Life Insurance and Hospitalization/Health Coverage schemes. We also support personal and professional development of our employees and offer excellent professional learning and development possibilities. .

Our Culture

The foundation firmly believes that trust and respect for the potential of people is the key to creating an inspiring and exciting work environment which promotes creativity and innovation, and a sense of self accountability and pro activeness. Our values guide the work we do and help us create a unique culture where each of our colleagues feel valued and empowered. .

APPLY AT:

http://www.huf.org.pk/employment/ADIT.htm?goback=.gde_4267483_member_217974687

Cisco vs HP

noreply@blogger.com (Anonymous) — Thu, 28 Feb 2013 04:47:00 +0000

Comparison between Two core switches HP 8400 & 5200 series core switch & Cisco Core switch Cataylst 4500 series core switch. You can understand which core switch is better for u. Cost also a major factor cisco switch cost is high and HP core switch low but performance you can make your decision which is more reliable to you at your environment.

How to Configure Cisco CME [Call Manager Express] with 3rd [ThirdParty]

noreply@blogger.com (Anonymous) — Wed, 27 Feb 2013 05:05:00 +0000

Call Manager Express basically available at ISR [Integrated service router because it has minimum features for all flavours like IPS, IDS, VPN, Routing and etc.

Had to configure a Cisco Callmanager Express to accept connections from 3rd party SIP phones via the Internet. The SIP phones need to reach each other, their voicemail and PSTN phones via ISDN breakout.
Keep in mind that, as always, public IP's have been changed to private ones. Phone numbers are also fake. Signalling & RTP communication is NOT encrypted in this example! Be aware of that! You could tunnel this traffic through a VPN. Registration would then work too & everything should be fine (except for the additional delays ...). ISDN configuration is for German PSTN, but you should be able to modify it for your needs. If you have trouble to get this to work, try this debug commands:

debug ccsip all (Be carefull, some phones fire off over 20 register requests per second. This usually only happens if the phone is not able to register, but it might freeze your router. This is not a theoretically option!)
debug voice register errors
debug voice register events

Check your systems firewall settings if you use software phones. Might be a good idea to deactivate it temporarily for verifying functionality.

At first I would try to use the X-Lite client. That's a client that usually always works first. Most tolerant one for NAT issues. In general almost any third party SIP client, even IPhones, should work in this implementation. Before delivering such a solution you should always verify functionality thoroughly. Some problems arise after a longer period of time because of timeouts etc..
This is only a short abstract. If you have any suggestions or coments - feel free to post them.

Overview

Configuration of Cisco Callmanager Express

sipgateway#sh run

Building configuration...

Current configuration : 8775 bytes

!

version 15.1

service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname sipgateway

!

boot-start-marker

boot system flash:c2900-universalk9-mz.SPA.151-4.M1.bin

boot-end-marker

!

!

logging buffered 100000

!

aaa new-model

!

!

aaa authentication login default local

aaa authorization exec default local 

!

!

!

!

!

aaa session-id common

clock timezone MEZ 1 0

clock summer-time MESZ recurring last Sun Mar 2:00 last Sun Oct 3:00

network-clock-participate wic 0 

network-clock-select 1 BRI0/0/1

!

no ipv6 cef

no ip source-route

ip cef

!

!

!

!

!

ip domain name lab.local

ip name-server 172.20.21.5

multilink bundle-name authenticated

!

!

!

!

isdn switch-type basic-net3

!

voice-card 0

 dsp services dspfarm

!

!

voice call disc-pi-off

!

voice service voip

 allow-connections sip to sip

 redirect ip2ip

 fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none

 sip

  bind control source-interface GigabitEthernet0/0

  bind media source-interface GigabitEthernet0/0

  registrar server expires max 600 min 60

  no call service stop

!

voice class codec 10

 codec preference 1 g711ulaw

!

!

voice register global

 mode cme

 source-address 172.20.21.165 port 5060

 max-dn 35

 max-pool 10

 authenticate register ==> This is needed, because phones are not localy connected.

 authenticate realm lab.local ==> This is needed by some SIP phones to switch to digest auth.

 timezone 21

 time-format 24

 date-format D/M/Y

 voicemail 88888888

 tftp-path flash:

 create profile sync 0429414478545137

!

voice register dn  1

 number 12344887

 call-forward b2bua unregistered 88888888  

 allow watch

 name Test1

 label 12344887

 mwi

!

voice register dn  2

 number 12344898

 allow watch

 name Test2

 label 12344898

 mwi

!

voice register dn  4

 number 12344971

 call-forward b2bua unregistered 88888888  

 allow watch

 name Test4

 label 12344971

 mwi

!

voice register dn  5

 number 12341453

 allow watch

 name Test5

 label 12341453

 mwi

!

voice register dn  7

 number 12341455

 allow watch

 name Test7

 label 12341455

 mwi

!

voice register pool  1

 id mac 0000.0000.0000 ==> Mac is irrelevant. Auth is now digest based.

 number 1 dn 1

 presence call-list

 dtmf-relay rtp-nte

 username 12344887 password 1234

 codec g711ulaw

!

voice register pool  2

 id mac 0000.0000.0000

 number 1 dn 2

 presence call-list

 dtmf-relay rtp-nte

 username 12344898 password 1234

 codec g711ulaw

!

voice register pool  4

 id mac 0000.0000.0000

 number 1 dn 4

 presence call-list

 dtmf-relay rtp-nte

 username 12344971 password 1234

 codec g711ulaw

!

voice register pool  5

 id mac 0000.0000.0000

 number 1 dn 5

 presence call-list

 dtmf-relay rtp-nte

 username 12341453 password 1234

 codec g711ulaw

!

voice register pool  7

 id mac 0000.0000.0000

 number 1 dn 7

 presence call-list

 dtmf-relay sip-notify

 username 12341455 password 1234

 codec g711ulaw

!

!

!

voice translation-rule 5

 rule 1 /^\(.*\)/ /30\1/ type any national

!

voice translation-rule 10

 rule 1 /^\(.*\)/ /0\1/ type subscriber unknown

 rule 2 /^\(.*\)/ /00\1/ type national unknown

 rule 3 /^\(.*\)/ /000\1/ type international unknown

!

!

voice translation-profile From-PSTN

 translate calling 10

!

voice translation-profile To-PSTN

 translate calling 5

!

!

license udi pid CISCO2901/K9 sn 12341234

license accept end user agreement

hw-module ism 0

!

hw-module pvdm 0/0

!

!

!

username labtest privilege 15 labt3st

!

redundancy

!

!

!

interface Loopback0

 ip address 172.20.20.1 255.255.255.252

!

interface Embedded-Service-Engine0/0

 no ip address

 shutdown

!

interface GigabitEthernet0/0

 description LAN Interface

 ip address 172.20.21.165 255.255.255.248

 duplex auto

 speed auto

!

interface ISM0/0

 ip unnumbered Loopback0

 service-module ip address 172.20.20.2 255.255.255.252

 !Application: CUE Running on ISM

 service-module ip default-gateway 172.20.20.1

!

interface GigabitEthernet0/1

 no ip address

 shutdown

 duplex auto

 speed auto

!

interface ISM0/1

 description Internal switch interface connected to Internal Service Module

 no ip address

 shutdown

!

interface BRI0/0/0

 no ip address

 shutdown

 isdn switch-type basic-net3

 isdn point-to-point-setup

 isdn incoming-voice voice

!

interface BRI0/0/1

 no ip address

 isdn switch-type basic-net3

 isdn point-to-point-setup

 isdn incoming-voice voice

!

ip http server

ip http access-class 24

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

ip http path flash:

!

ip route 0.0.0.0 0.0.0.0 172.20.21.161

ip route 172.20.20.2 255.255.255.255 ISM0/0

!

!

!

!

!

control-plane

!

!

voice-port 0/0/0

 compand-type a-law

 cptone DE

 bearer-cap Speech

!

voice-port 0/0/1

 compand-type a-law

 cptone DE

 bearer-cap Speech

!

!

dial-peer voice 1 pots

 description ISDN

 translation-profile incoming From-PSTN

 translation-profile outgoing To-PSTN

 destination-pattern 0.T

 incoming called-number .

 direct-inward-dial

 port 0/0/1

!

dial-peer voice 5 voip

 destination-pattern 88888888

 session protocol sipv2

 session target ipv4:172.20.20.2

 incoming called-number .

 voice-class codec 10  

 dtmf-relay sip-notify

 no vad

!

!

gateway 

 timer receive-rtp 1200

!

sip-ua 

!

end

sipgateway#

Verify registration

sipgateway#sh sip-ua status registrar 

Line          destination      expires(sec)  contact

transport     call-id

              peer

============================================================

12341455      172.20.22.52     597           172.20.22.52

UDP           g7ngEr-P2hu1kPJ6mDgWP8FNWrPJDIql              

              40002

These are the phone configs I tested:

Android CSipSimple Settings
Accountname: 12344971
Send own number: 12344971
SIP Server: 172.20.21.165
Username: 12344971
Password: 1234
Proxy: 172.20.21.165

Phoner Lite Settings

Configuration -> Server
Proxy/registrar: 172.20.21.165
STUN Server: stun.counterpath.com
Domain/Realm: 172.20.21.165
Check Registration
Configuration -> User
Username: 12341453
Shown username: 12341453
Password: 1234
Authentication name: 12341453
Number: 12341453
Configuration -> Network
Check preferred connection type: UDP
Check Windows Firewall

Xlite (ver 4.0) settings

Softphone -> Account Settings -> Account
Check allow this account for call
User ID: 12341453
Domain: 172.20.21.165
Password: 1234
Authorization name: 12341453
Check Domain Proxy to register with Domain and receive calls
Check outbound via domain
Softphone -> Account Settings -> Topology
Autodetect firewall traversal method using ICE
Softphone -> Preferences -> Advanced
Check send DTMF via RFC2833

Snom 360 Settings

Identity1
Login
   Account: 12344887
   Password: 1234
   Registrar: 172.20.21.165
   Authentication Username: 12344887
SIP
   Check Support broken Registrar
NAT
   Check Offer ICE
   STUN Server: stun.counterpath.com

JOB in saudia arab

noreply@blogger.com (Anonymous) — Tue, 26 Feb 2013 04:56:00 +0000

CCIE training

noreply@blogger.com (Anonymous) — Tue, 26 Feb 2013 04:50:00 +0000

CCIE Promotional.

CCIE is the highest level of certification offered by Cisco.

Enhance your skills with the newly revised Cisco CCIE R&S v 4.0

Starting Date: Thu Feb 28

Schedule: Mon-Wed-Thu 08:00-09:30 PM

Duration: 3 Months

Course Fee: Rs.14900

Upgrade your CCNP to CCIE for RS 7495

Prerequiste:CCNA Course

Venue: 45 M Block 6, PECHS Karachi

The CCIE Routing & Switching Written Exam course download is specifically designed for students who want to focus on the topics and technologies covered in the CCIE Routing & Switching Written Exam version 4 blueprint. This thorough and well-structured course will give you the solid foundation of concepts you'll need to pass the CCIE Routing & Switching Written Exam and also prepare you to continue straight onto CCIE lab exam preparation.

For registrations, please send email to:info@cttc.net.pk

CTTC PECHS Branch

45M, PECHS Block 6, Nursery, Karachi. Tel 34310956-58

Course outline

· Introduction

· VLANs,Trunking and VTP

· Spanning Tree Protocol

· EtherChannel

· Frame Relay

· IPv4 Routing Overview

· RIP

· EIGRP

· OSPF

· BGP

· IPv6

· MPLS

· Multicast

· Security

· Network Services

· QoS

JOB 2-26-2013

noreply@blogger.com (Anonymous) — Tue, 26 Feb 2013 04:43:00 +0000

Walk-in Interview	Morning or evening shift Start your Data Entry operator job from March 1
Venue:203, 2nd Floor, 24-A, Park Avenue, Shahrah-e-Faisal, Block-6, P.E.C.H.S., Karachi. phone: 9221-3432 6913 9221-3432-CTTC (2882) email :info@cttc.net.pk	On Wednesday Feb 27 from 01:00pm to 6:00pm

سنڌي ڊيٽااِنٽري آپريٽر جي ضرورت آهي

1. درخواست گزار لاءِ ضروري آهي ته ان کي سنڌي ٻولي تي پوري مهارت هُجي.

2. درخواست گزار لاءِ ضروري آهي ان کي ڪمپيوٽر جي معلومات ۾ به مهارت هُجي.

3. چونڊيل اُميدوارن کي ڊيٽااِنٽري سوفٽويئر جي تربيت ڏني ويندي.

تجربو رکندڙن کي ترجيح ڏني ويندي

فون نمبر:- +9221-34322882,34326913

اي ميل :- info@cttc.net.pk

سي ٽي ٽي سي (پرائيويٽ) لِمٽيڊ

203- دوسري منزل، پارڪ ايوينو، شاهرإفيصل

بلاڪ نمبر-6، پي اي سي ايڇ ايس

ڪراچي- 75400، پاڪستان

TSHOOT Mind Map with Description

noreply@blogger.com (Anonymous) — Mon, 25 Feb 2013 06:21:00 +0000

JOB for Web Developer & Graphic

noreply@blogger.com (Anonymous) — Fri, 22 Feb 2013 07:16:00 +0000

A job available at a renowned company Kindly email at abdulwadoodkhan@hotmail.com

Position for Both
-Male
-Female

Job responsibility:

-Maintain a website , develop
- Making a product Portfolio as per requirement using different graphic tool like Adobe etc

Salary offered between 20 to 25 K

Cisco CCNP Switch 642-813

noreply@blogger.com (Anonymous) — Thu, 21 Feb 2013 18:35:00 +0000

Today, I have Passed CCNP switch 155 question Dumps are still valid .
LABS:
- MLs & Eigrp [Just IP change all are same]
-AA dot1X [All same no changes ]
-LACp with STm [ same as mention in Certprepar.com]

Drag & Drop:

-interactive video, voice, call signalling ....
-security, username, informed request....
-rstp,nsf,Ntp....

Question are same as in dumps but options are rotate so please read dumps be careful.

Couple of question are different i dont remember yet but i have got my marks 1000 - 834

so i just passed.

Site-to-site VPN CISCO ASA to JUNIPER

noreply@blogger.com (Anonymous) — Wed, 20 Feb 2013 08:10:00 +0000

Site to Site VPN tunnel config

[Cisco ASA & Juniper SSG ScreenOS]

Below is a config to create a VPN tunnel between a Cisco ASA (Blue side) to a Juniper SSG ScreenOS (Red Side).

Juniper Settings:

Ethernet0/0: 22.22.22.22, Untrust
bgroup0: 172.16.22.1, Trust

Cisco ASA config (Blue):

!^^^^^^^ ISAKMP (Phase 1) ^^^^^^^!
! must match with the other side in order for Phase 1 to complete.
! Lower policy numbers will likely be used before higher ones.

crypto isakmp policy 5
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400

! Enable ISAKMP on the outside interface
crypto isakmp enable OUTSIDE

! Define the pre-shared-key

tunnel-group 22.22.22.22 type ipsec-l2l
tunnel-group 22.22.22.22 ipsec-attributes
pre-shared-key sekretk3y

!^^^^^^^ IPSEC (Phase 2) ^^^^^^^!
! Define the interesting traffic in the ACL
access-list ACL-RED-VPN permit ip 192.168.11.0 255.255.255.0 172.16.22.0 255.255.255.0
crypto ipsec transform-set ESP-AES128-SHA esp-aes esp-sha-hmac

! Create a crypto map entry that defines the tunnel

crypto map MAP-OUTSIDE 20 set peer 22.22.22.22

! ACL must be exactly the opposite of the other sides ACL

crypto map MAP-OUTSIDE 20 match address ACL-RED-VPN

! Transform set must match other side identically

crypto map MAP-OUTSIDE 20 set transform-set ESP-AES128-SHA
crypto map MAP-OUTSIDE 20 set security-association lifetime kilobytes 10000

! Apply crypto map to an interface

crypto map MAP-OUTSIDE interface OUTSIDE

!^^^^^^^ Routes and No-NATS ^^^^^^^!
! Point the destination network out the outside interface with a next hop as the default gateway.

route OUTSIDE 172.16.22.0 255.255.255.0 11.11.11.1

! Make sure that the VPN traffic is NOT NAT’d

access-list ACL-INSIDE-NONAT extended permit ip 192.168.11.0 255.255.255.0 172.16.22.0 255.255.255.0
nat (INSIDE) 0 access-list ACL-INSIDE-NONAT

Juniper SSG-5 ScreenOS config (Red):

# Create a tunnel interface
set interface tunnel.1 zone Untrust
set interface tunnel.1 ip unnumbered interface ethernet0/0
# Create the gateway (IKE settings)
# note that “sec-level standard” means the IKE policies will try to use: pre-g2-3des-sha and pre-g2-aes128-sha
set ike gateway “VPN-GATEWAY” ip 11.11.11.11 outgoing-interface ethernet0/0 preshare “sekretk3y” sec-level standard
# Configure VPN IPSEC settings
set vpn “VPN” gateway “VPN-GATEWAY” replay tunnel idletime 0 proposal “nopfs-esp-aes128-sha”
set vpn “VPN” id 1 bind interface tunnel.1
set vpn “VPN” proxy-id local-ip 172.16.22.0/24 remote-ip 192.168.11.0/24 “ANY”
# Configure a route for the remote end traffic
set vrouter trust-vr route 192.168.11.0/24 interface tunnel.1
# Create 2 address book entries and create two policies to permit this traffic
set address Untrust “192.168.11.0/24″ 192.168.11.0/24
set address Trust “172.16.22.0/24″ 172.16.22.0/24
set policy top from “Trust” to “Untrust” “172.16.22.0/24″ “192.168.11.0/24″ “ANY” Permit log count
set policy top from “Untrust” to “Trust” “192.168.11.0/24″ “172.16.22.0/24″ “ANY” Permit log count

Network - JOB

noreply@blogger.com (Anonymous) — Wed, 20 Feb 2013 07:39:00 +0000

Jobs at Rozee.pk

IT & Network Administrator Job

Contour Software - Constellation Software Inc.

Job Detail

Industry:

Information Technology

Functional Area:

Computer Networking

Total Position:

Job Type:

Full Time/Permanent

Job Location:

Karachi, Pakistan

Gender:

Doesn't Matter

Minimum Education:

Bachelors

Career Level:

Experienced (Non-Manager)

Required Experience:

2 Years - 10 Years

Apply By:

Mar 13, 2013

Job Posting Date:

Feb 19, 2013

Job Description:

The Position:

Contour requires an energetic and technically sound IT & Network Administration resource, to join our CHS New Star divisions’ IT department, to manage servers and perform technical services work for internal requirements as well as for customer needs.

The hired resource will work in collaboration and under guidance from the senior IT Administrator located in our Toronto office. Thus the position requires strong communication skills and the ability to work a later shift, in order to have appropriate overlap with the Eastern time work day.

Since some of the work will be performed on client systems, a rigorous level of conscientiousness and attention to detail is necessary for success in this role.

Skills Required:

2-10 years’ experience as a system administrator in a Windows networking environment
Microsoft Certification, MCSE or MCITP
Experience in Microsoft Licensing (SPLA)
Familiarity with the remote desktop protocol (RDP). Remote App familiarity is not a necessity but would be a plus
Familiarity with IIS 6, 7 and 7.5
Microsoft SQL Server database administration skills (2005, 2008, 2012)
Familiarity with disaster recovery planning and testing
Familiarity with virtual environments (VMWare)
Experience managing Sonic Wall Firewall
Experience working with Go Grid
Experience working with Progress
Strong verbal and written communication skills

How to Configure IP survelliance

noreply@blogger.com (Anonymous) — Wed, 20 Feb 2013 07:25:00 +0000

IP surveillance Solution required:

- DNR-322L [Network Video Recording]

- DCS-932L [IP Cam]

- DGS-1100-16 port [As per requirement of customer ]

you can recod video at D-Link NVR This IP cam have IR feature as well i.e. Night Vision.

Juniper Basic Commands

noreply@blogger.com (Anonymous) — Tue, 19 Feb 2013 11:15:00 +0000

HowTo: Basic ASA 5505 configuration

noreply@blogger.com (Anonymous) — Tue, 19 Feb 2013 10:59:00 +0000

Basic ASA (5505) configuration

Since there are alot of posts regarding questions about ASA configurations I will explain here how to make a ASA (5505) work with a basic configuration.
Image

When you open the box containing your new ASA 5505 and plug in your console you will see the following:

Type help or '?' for a list of available commands.
ciscoasa>

Here you type the command “enable” to get in enabled mode.

Type help or '?' for a list of available commands.
ciscoasa> enable
Password:
ciscoasa#

As you can see you will get a password prompt. Simply hit enter here because there is no enable password configured.

The 1st thing you want to do is type the command “write erase”. This will delete all the default configuration Cisco made for you. You might wonder why but there is a lot of stuff in that configuration that you don’t need/want and could even cause some network issues if you connected it to your network (DHCP).

ciscoasa# write erase
Erase configuration in flash memory? [confirm]
[OK]
ciscoasa#

You will be prompted to confirm that you want to erase the configuration. Simply hit enter here.

Now that you erased your startup configuration you will need to reload the ASA to get a clean configuration. You will use the “reload” command for this.

ciscoasa# reload
Proceed with reload? [confirm]
ciscoasa#

***
*** --- START GRACEFUL SHUTDOWN ---
Shutting down isakmp
Shutting down File system

***
*** --- SHUTDOWN NOW ---

Now when your router is restarted you will get this question:

Pre-configure Firewall now through interactive prompts [yes]?

Answer with “no” since you want to configure the ASA yourself (you want to be a cisco engineer right ?).

Now enter enabled mode (look up if you forgot how to) and issue the command “show running-config“.

ciscoasa# show running-config

Looks nice and clean right ?
Now we can start the configuration.

The 1st thing you want to do is get into configuration mode. You can do this by issuing the command “configure terminal”

ciscoasa# configure terminal
ciscoasa(config)#

Notice the (config) behind the device hostname. This means your in configuration mode.
Now we will give our ASA another hostname.

ciscoasa(config)# hostname ASA
ASA(config)#

As you can see the hostname changes immediately.
Now we will set a username and password so you can actually manage the ASA from your desk with SSH/Telnet/ASDM.

ASA(config)# username example password example privilege 15
ASA(config)#

Setting your privilege to 15 is very important if you’re the one that is going to manage the ASA. Privilege 15 is the highest of the privileges and gives you full control over the device.

Now that this is done we will configure the inside (LAN) address of the ASA.
With the ASA 5505 you work with VLANs instead of assigning IP addresses to actual interfaces. We will use VLAN 1 as our inside VLAN.

ASA(config)# interface vlan 1
ASA(config-if)# ip address 192.168.1.1 255.255.255.0
ASA(config-if)# nameif inside
INFO: Security level for "inside" set to 100 by default.

All the ASA devices work with security levels that you apply to VLANs/interfaces. With security levels you can always go from high (100) to low (0) but never the other way around unless configured otherwise. This means that no one from the outside can start a session to the inside.
So far for the inside VLAN.
Now we will start on the outside (WAN) configuration.
Depending on the provider you might have to do this a little bit different but I will start with a static IP address first.

ASA(config)# interface vlan 2
ASA(config-if)# ip address 212.115.192.193 255.255.255.248
ASA(config-if)# nameif outside
INFO: Security level for outside set to 0 by default.
ASA(config-if)# exit
ASA(config)# route outside 0.0.0.0 0.0.0.0 212.115.192.192

As you can see the ASA sets the security level of the interface called outside to 0.
You also need to make a static route if your provider supplied you with a static IP address. This is called the default gateway.

If your provider gives you a IP address trough DHCP the configuration is a little easier.

ASA(config)# interface vlan 2
ASA(config-if)# ip address dhcp setroute
ASA(config-if)# nameif outside

With this command you dont need to configure a default gateway since you will get this from your provider.

Now we need to attach the outside VLAN to one of the interfaces of the ASA.
By default all the interfaces are attached to VLAN 1 and by default all the interfaces are in the “shutdown” state. In this example I will attach the interface “Ethernet 0” to the outside VLAN (VLAN 2) and make the port operational.

ASA(config)# interface ethernet0/0
ASA(config-if)# switchport access vlan 2
ASA(config-if)# no shutdown

Now this interface is attached to VLAN 2 and operational.
You need to make at least one other port operational for your inside network by typing the command “no shutdown”.

ASA(config)# interface ethernet0/1
ASA(config-if)# no shutdown

By default all the interfaces are attached to VLAN 1 so you don’t need to assign a VLAN to the interface.

And now to make internet work from your inside network we have to configure NAT.
1st you make a global interface to where all the addresses from the inside need to be translated to.

ASA(config)# global (outside) 10 interface
INFO: outside interface address added to PAT pool

The number 10 in that line of configuration is a identifier. This way you can tell the NAT on the inside to wich outside IP address they should translate to.
The interface part means that you use your interface IP address to translate to. In this case the outside interface.

2nd we need to make a NAT rule for the inside network.

ASA(config)# nat (inside) 10 192.168.1.0 255.255.255.0
ASA(config)#

As you can see I also used the number 10 in this rule. This links the inside network to the outside global. The subnet behind that states that the network 192.168.1.0/24 is allowed to be translated to the outside IP address.

Congratulations! You now should have an internet connection!
But now you want to manage the ASA without having to walk to the server room all the time.
The ASA supports remote administration trough SSH and Telnet. The ASA also has a good graphical interface called the ASDM (Advanced Security Device Manager).
I will show you how to configure the ASA so you can connect with the ASDM (graphical) and with SSH (CLI).
First we start with SSH. To enable SSH you will need to generate a key wich will encrypt the traffic between the user and the ASA.

ASA(config)# crypto key generate rsa modulus 1024
INFO: The name for the keys will be: <Default-RSA-Key>
Keypair generation process begin. Please wait...
ASA(config)#

Now we want to use the username we made earlier to connect to the ASA with SSH.

ASA(config)# aaa authentication ssh console LOCAL

The LOCAL means that the ASA uses the local username database to authenticate users.

When this is done you need to tell the ASA wich IP address are allowed to connect to the ASA. We will only allow users on the inside to access the ASA by SSH.

ASA(config)# ssh 192.168.1.0 255.255.255.0 inside

Now your ASA is accessible by SSH from your own workspace.

Next, we enable the ASDM graphic interface.

ASA(config)# http server enable

This command enables the ASDM on the ASA.
We want to use the username we made earlier and tell wich networks are allowed to connect to the ASA with the ASDM.

ASA(config)# aaa authentication http console LOCAL
ASA(config)# http 192.168.1.0 255.255.255.0 inside

When this is done you want to make sure your ASA doesn’t start up without a configuration next time the ASA reboots. You can do this by saving the configuration with the following command.

ASA(config)# write mem
Building configuration...
Cryptochecksum: e5fa3ae9 add2aae4 c0be8847 79cec1ba

2502 bytes copied in 1.190 secs (2502 bytes/sec)
[OK]
ASA(config)#

Telenor JOB

noreply@blogger.com (Anonymous) — Tue, 19 Feb 2013 05:08:00 +0000

Telenor JOB Recently updated:

Cisco Catalyst 3750-X & 3560-X

noreply@blogger.com (Anonymous) — Sun, 17 Feb 2013 18:16:00 +0000

Cisco Catalyst 3750-X and 3560-X Series primary features:
● 24 and 48 10/100/1000 PoE+, non-PoE models, and 12 and 24 GE SFP port models
● Four optional uplink network modules with GE or 10GE ports
● Industry first PoE+ with 30W power on all ports in 1 rack unit (RU) form factor
● Dual redundant, modular power supplies and fans
● Media Access Control Security (MACsec) hardware-based encryption
● Flexible NetFlow and switch-to-switch hardware encryption with the uplink Service Module
● Open Shortest Path First (OSPF) for routed access in IP Base image
● IPv4 and IPv6 routing, Multicast routing, advanced quality of service (QoS), and security features in
hardware
● Enhanced limited lifetime warranty (LLW) with next business day (NBD) advance hardware replacement
and 90 day access to Cisco Technical Assistance Center (TAC) support
● Enhanced Cisco EnergyWise for operational cost optimization by measuring actual power consumption of
the PoE devices, reporting, and reducing energy consumption across the network
● USB Type-A and Type-B ports for storage and console respectively and an out-of-band Ethernet
management port
In addition to the above features, the Cisco Catalyst 3750-X switches also offer:
● Cisco StackPower
™
technology: An innovative feature and industry first for sharing power among stack
members
● Cisco StackWise Plus technology for ease of use and resiliency with 64 Gbps of throughput
● Investment protection with backward compatibility with all other models of Cisco Catalyst 3750 Series switch

D-Link DGS-3627

noreply@blogger.com (Anonymous) — Sun, 17 Feb 2013 17:57:00 +0000

Features

Fully Supports IPv6 Routing
24-Gigabit Ports Plus Four SFP Combo Slots and Three 10Gig Uplink Ports
Brings Advanced Enterprise Network Management Features to a Cost-Effective Level
sFlow® Function Enables Wire-Speed Traffic Monitoring to Collect Real-Time and In-Depth Data

DESCRIPTION

The latest generation of D-Link xStack switches support IPv6 routing and have more advanced features than ever to address today’s concerns regarding security, QoS, and management. The xStack DGS-3627 is a 24-Port gigabit managed switch with 4 combo SFP slots or 100BASE-FX fiber ports with 3 optional 10Gigabit uplinks. The D-Link DGS-3627 is equipped with robust features that fulfill the most demanding network for voice and video streaming. The DGS-3627 is stackable up to 12 units with 40Gbps full-duplex of stacking bandwidth fixed-in. To help secure your network, the D-Link Safeguard Engine helps prevent Denial-of-Service (DoS) attacks while the Access Control List (ACL) enhances security of your network. The DGS-3627 is equipped with industry standard management features including an easy-to-use web-based administrator interface and a standard CLI interface. D-Link provides these features on a scalable platform that increases your company’s productivity while protecting your investment.

IPv6 and IPv4 Routing
The xStack DGS-3627 provides current IPv4 networks with a simple migration path to IPv6 and protects your investment for future network upgrades when greater security and larger addressing are required. Basic static routing such as RIP and RIP2 are supported for small network routing applications. Advanced routing protocols such as OSPF and equal cost routing are supported for load balancing and building a scalable network.

Stackable Up to 12 Units
The xStack DGS-3627 has two optional ports to install stacking modules that provide up to 40Gbps in data stacking backplane, full-duplex. This enhances your overall network performance for those switches transmitting large files such as graphics or pictures. Under stacking mode, the switches are hot-swappable. This means that in a stack configuration, any of the switches can be replaced or removed without affecting the network. There is no need to reconfigure a replacement switch; just give the new switch the same stack number ID as the old switch and the network will carry the same configuration as before. This minimizes the downtime of a network and maximizes the productivity of your business. Also, to facilitate network administration, cross stack port mirroring and port trunking are supported.

The D-Link Safeguard Engine and Security
The DGS-3627 incorporates advanced mechanisms to detect an attack against the central processing unit of the switch and to take corrective action on the attacking interface. When a DoS attack is waged against the DGS-3627, the D-Link Safeguard Engine detects the threat and prevents overload of the central processor thus ensuring network integrity and helping to maintain open network bandwidth channels.

In addition, the D-Link xStack DGS-3627 offers a variety of authentication methods, including those without the requirement of a RADIUS server. It supports MAC based Access Control (MAC), which authenticates the user based on the MAC address of the client so that authentication is transparent to the client. It also supports Web-based Access Control (WAC), which prompts for username and password before allowing access to TCP traffic. Lastly, the xStack DGS-3627 supports Network Access Protection (NAP). This feature works in conjunction with Microsoft® software platforms such as Vista® to reinforce health and security policies of the network, including policy validation, network restriction, remediation, and ongoing compliance.

Voice and Video Applications
For today’s business, having voice, data, and video on the same network is common practice. This challenge is met by the D-Link xStack DGS-3627, which supports 802.1p with 8 queues. The administrator can designate the priority of the traffic based on a variety of means including IP and MAC address, so that voice data is clear and jitter-free. Video traffic can also be assigned with the same priority. In addition, the D-Link xStack DGS-3627 provides IGMP Snooping, which allows the forwarding of multicast packets such as streaming audio and video without increasing network broadcast congestion. By snooping IGMP registration information within a frame, a list of workstations that have joined the multicast group is created. This list then allows the switch to intelligently forward packets to only the appropriate member workstations. For IPv6 traffic, the DGS-3627 supports MLD snooping. Multicast routing is supported under independent multicast protocol, including PIM-SM and PIM-DM. DVMRP is also supported to interconnect two multicast-enabled networks across non-multicast networks. In conjunction with support for 802.1Q VLANs, Quality of Service (QoS) and security can be achieved on a network infused with data traffic.

Ease of Management
The DGS-3627 supports SNMP v1/2/3 so traps can be set on abnormal events and information can be polled to maximize the productivity of the network. Other standard management features also supported include RMON and IEEE 802.1d Spanning Tree. User interfaces include an intuitive web-based GUI or standard CLI, with administration traffic protected through SSL or SSH encryptions.