Cisco Router

Cisco CCNA / CCNP Exam Tutorial: Five Debugs You Must Know

2011-02-12T15:08:00.000+07:00

Cisco CCNA / CCNP Exam Tutorial: Five Debugs You Must Know
To pass the BSCI exam and move one step closer to CCNP certification success, you've got to know how and when to use debug commands to troubleshoot and verify network operations. While you should never practice debug commands on a production network, it's important to get some hands-on experience with them and not rely on "router simulators" and books to learn about them.

When it comes to RIP, "debug ip rip" is the primary debug to use. This debug will show you the contents of the routing update packets, and is vital in diagnosing RIP version mismatches and routing update authentication issues.

You know how to use the variance command to configure unequal-cost load-sharing with IGRP, but IGRP has no topology table that will give you the feasible successor metrics you need. With IGRP, you need to use the "debug ip igrp transactions" command to get these vital metrics.

Several factors are considered by OSPF-enabled routers when it comes to forming adjacencies, including hello and dead timer settings. If an adjacency doesn't form when you think it should, run "debug ip ospf adj". The reason the adjacency isn't forming is usually seen quickly with this command's output.

Let's not ignore Layer Two! If frame relay mappings are not forming according to your configuration, run "debug frame lmi". This debug will allow you to quickly diagnose and correct any LMI mismatches.

When it comes to PPP, it can be very frustrating to try to spot a problem with a password or username. Instead of staring at the configuration for 10 minutes, run "debug ppp negotiation" and send a ping over the link. This command will help you spot the router with the misconfigured username or password, not to mention saving you a lot of time!

Effectively using debugs during your CCNA and CCNP exam study will help you truly understand what's going on "behind the command" - and it will really come in handy on that day when your production network just isn't doing what you (think) you told it to do!

Cisco CCNA / CCNP Tutorial: Home Lab Assembly Case Study

2011-02-11T15:06:00.000+07:00

Part of your CCNA / CCNP education is deciding what network topology to use when you're putting together your home lab. Some of you are starting with one or two routers or switches, while others are starting with more. A customer recently sent me a list of his Cisco routers and switches that he has available for a home lab and asked for my help in coming up with the best way to use them.

There is no "right" or "wrong" answer to this question; again, part of the learning process is configuring and reconfiguring the physical topology of your lab. Let's look at the routers and switches he has available, including the interfaces on each, and come up with one possible CCNA / CCNP home lab setup.

The equipment list:

Two 3620 routers. Each has 1 serial port and 2 ethernet ports.

One 3640 router. This has two ethernet cards, each with two ports, and two AUI ports.

Three 2503s, my personal favorite for home labs! These have 1 AUI port, 2 serial interfaces, and one BRI interface apiece.

One 2524 router. This has one serial port, 1 ethernet port, and one BRI interface.

One 4500 router. This has eight BRI ports, 2 ethernet ports, and more importantly, four serial ports.

He also has a 5200 access server, an ISDN simulator, one 2924 switch, and one 1924 switch.

Now, if you don't have this much equipment to work with, don't panic! Most CCNA / CCNP candidates don't; this is more of an exercise in looking at what you do have and using it to the utmost.

As I've mentioned in many of my CCNA / CCNP home lab articles, an access server is a great thing to have. All he needs is an octal cable to connect his AS to the other devices we choose to use, and he's all set. (If you need an access server sample configuration, there is one on my website in the Home Lab section.)

A frame relay switch is also great to have, and the 4500 will make a great FR switch. Having a frame relay cloud in your CCNA / CCNP home lab is a great way to get experience configuring and troubleshooting frame relay, an essential skill for CCNA success.

I would put both of the 3620s on the frame relay cloud via the Serial interface, as well as two of the 2503s. That gives you four routers that will be using frame relay to communicate, and that's the most we can have since the 4500 has four serial ports. The 4500 will need to be configured as a frame relay switch and connected to the other routers via a DTE/DCE cable. (Again, if you need a frame relay switch configuration, the one I use in my pods is on the website in the same place as the access server configuration.)

The two 2503s that are on the frame relay cloud should also be connected via their BRI interfaces. The home lab also includes an ISDN simulator, which is necessary to allow routers to communicate via their BRI interfaces. Just get a couple of straight-through cables to connect those two routers to the ISDN simulator and that segment is ready to go. (Remember that you can't connect Cisco routers directly via their BRI interfaces.)

All of the routers in this lab have at least one ethernet or AUI port, so we can connect them all to either one of the switches. The switches should be connected via at least two crossover cables to allow practice with trunking, root bridge election, and VLANs. Having two switches really does add quite a bit to a CCNA / CCNP home lab's capabilities. You can experiment with different subnets and vlans with as well. Don't be afraid to dive in - that's what a home lab is all about!

So now we've got four routers connected via frame relay, two via ISDN, and the others via ethernet segments. Two of the routers that are not using their serial interfaces should be connected directly via their serial ports. For this, you'll just need another DTE/DCE cable. Knowing how to bring up the line between two directly connected serial ports is an important CCNA skill, and so is troubleshooting it. You should be able to bring such a connection up with your eyes closed, and once you work with your own CCNA / CCNP home lab, you'll be able to!

Also, don't forget to add a loopback interface to each one of your routers. I like to use 1.1.1.1 for R1, 2.2.2.2 for R2, and so on. Advertising loopbacks is another great way to get practice with RIP, OSPF, EIGRP, IGRP, and static routing.

We've taken a pile of routers and switches and turned them into a fantastic CCNA / CCNP home lab. Whether you're working with two Cisco devices or ten, coming up with your own home lab topology is a great learning experience and the beginning of developing your analytical and troubleshooting skills.

CCNA / MCSE / CCNP Certification: Making Failure Work For You

2011-02-04T08:28:00.000+07:00

CCNA / MCSE / CCNP Certification: Making Failure Work For You
Whether you're on the road to the CCNA, CCNP, MCSE, or you're on any other computer certification track, the odds are that sooner or later, you're going to fail an exam. It's happened to almost all of us, yours truly included. What you have to keep in mind in these times is that success is not a straight line. You've probably seen charts showing the growth of an industry or a business -- you know, the ones that go from left to right, and look kind of jagged. The line goes up for a while, then down a bit, then up some more, then down a little.

The key? While every business has its setbacks, the net result is that the line goes up and progress is made. That's how you want your certification pursuit and your career to go as well - upward!

I'm not asking you to be happy about failing an exam. You're allowed to get mad for a few minutes, vow to never take another exam again, and be disappointed. What you're not allowed to do is stay that way.

If you put your books away in a fit of anger, get them out. If you took some time off, it's time to get back to work. Again, there's nothing wrong with being unhappy about failing an exam. It's how you handle that failure that counts. No inventor, executive, or entrepreneur has ever been right 100% of the time. Learn something from your failure. Was your study time quality study time? Did you get some hands-on practice with the technology you're studying? Asking yourself these questions can be tough, but it can be highly valuable in making sure you don't fail the next time. And there must be a next time - because the one thing you cannot do is quit.

Besides, take it from someone who's been there - your temporary failure makes your eventual success that much sweeter.

CCNA / CCNP Home Lab Tutorial: The VLAN.DAT File

2011-02-03T08:28:00.000+07:00

CCNA / CCNP Home Lab Tutorial: The VLAN.DAT File
CCNA and CCNP candidates who have their own Cisco home labs often email me about an odd situation that occurs when they erase a switch's configuration. Their startup configuration is gone, as they expect, but the VLAN and VTP information is still there!

Sounds strange, doesn't it? Let's look at an example. On SW1, we run show vlan brief and see in this abbreviated output that there are three additional vlans in use:

SW1#show vlan br

10 VLAN0010 active

20 VLAN0020 active

30 VLAN0030 active

We want to totally erase the router's startup configuration, so we use the write erase command, confirm it, and reload without saving the running config:

SW1#write erase

Erasing the nvram filesystem will remove all configuration files! Continue?

[confirm]

[OK]

Erase of nvram: complete

00:06:00: %SYS-7-NV_BLOCK_INIT: Initalized the geometry of nvram

SW1#reload

System configuration has been modified. Save? [yes/no]: n

Proceed with reload? [confirm]

The router reloads, and after exiting setup mode, we run show vlan brief again. And even though the startup configuration was erased, the vlans are still there!

Switch#show vlan br

10 VLAN0010 active

20 VLAN0020 active

30 VLAN0030 active

The reason is that this vlan and VTP information is actually kept in the VLAN.DAT file in Flash memory, and the contents of Flash are kept on a reload. The file has to be deleted manually.

There's a little trick to deleting this file. The switch will prompt you twice to ask if you really want to get rid of this file. Don't type "y" or "yes"; just accept the defaults by hitting the return key. If you type "y", the router attempts to delete a file named "y", as shown here:

Switch#delete vlan.dat

Delete filename [vlan.dat]? y

Delete flash:y? [confirm]

%Error deleting flash:y (No such file or directory)

Switch#delete vlan.dat

Delete filename [vlan.dat]?

Delete flash:vlan.dat? [confirm]

Switch#

The best way to prepare for CCNA and CCNP exam success is by working on real Cisco equipment, and by performing lab tasks over and over. Repetition is the mother of skill, and by truly erasing your VLAN and VTP information by deleting the vlan.dat file from Flash, you'll be building your Cisco skills to the point where your CCNA and CCNP exam success is a certainty.

CCNA / CCNP Home Lab Tutorial Assembling Your Cisco Home Lab

2011-02-03T05:51:00.000+07:00

A CCNA or CCNP candidate who wants to be totally prepared for their exams is going to put together a home lab to practice on. With used Cisco routers and switches more affordable and plentiful then ever before, there's really no excuse to not have one!

With the many different models available, there is some understandable confusion among future CCNAs and CCNPs about which routers to buy and which ones to avoid. You can take almost any set of Cisco routers and put together a home lab; part of the learning process is taking what equipment you have available and putting together your own lab! For those of you preparing to start your home lab or add to your existing one, this article will list the routers I use in my Cisco pods. You certainly don't have to have all this equipment, but this will give you some good ideas on how to get started.

The most versatile router you can get for your CCNA / CCNP home lab is a 2520. These routers come with four serial ports, one ethernet port, and one BRI interface for ISDN practice. This mix of interfaces means you can actually use it as a frame relay switch while using the ethernet and BRI ports for routing. (There is no problem with using a lab router as both your frame relay switch and a practice router; for a frame relay switch sample configuration, visit my website!)

My pods consist of five routers and two switches, and three of the five routers are 2520s, due to their versatility. A recent ebay search showed these routers selling for $99 - $125, an outstanding value for the practice you're going to get.

I also use 2501s in my home labs. These have fewer interfaces, but the combination of two serial interfaces and one ethernet interface allows you to get plenty of practice.

A combination that works very well is using three 2520s; one as my dedicated frame relay switch, one as R1, and another as R2. Add a 2501 as R3, and you can have a frame cloud connecting R1, R2, and R3, a direct serial connection between R1 and R3, an Ethernet segment that includes all three routers, and an ISDN connection between R1 and R2 if you have an ISDN simulator. That combination will allow you to get a tremendous amount of practice for the exams, and you can always sell it when you're done!

2501s are very affordable, with many in the $50 range on ebay. It's quite possible to get three 2520s and one 2501 for less than $500 total, and you can get most of that money back if you choose to sell it when you're done.

With four routers to work with, you're probably going to get tired of moving that console cable around. An access server (actually a Cisco router, not the white boxes we tend to think of when we hear "server") will help you out with that. An access server allows you to set up a connection with each of your other routers via an octal cable, which prevents you from moving that console cable around continually. For an example of an access server configuration, just visit my website and look in the "Free Training" section.

Access server prices vary quite a bit; don't panic if you do an ebay search and see them costing thousands of dollars. You do NOT need an expensive access server for your CCNA / CCNP home lab. 2511s are great routers to get for your access server.

One question I get often from CCNA / CCNP candidates is "What routers should I buy that I can still use when I'm ready to study for the CCNP?" The CCIE lab changes regularly and sometimes drastically when it comes to the equipment you'll need. During my CCIE lab studies, I found that renting time from online rack rental providers was actually the best way to go. Don't hesitate when putting your CCNA / CCNP home lab together, wondering what will be acceptable for the CCIE lab a year or so from now. None of us know what's going to be on that equipment list, so get the CCNA and CCNP first - by building your own Cisco home lab!

CCNA Cisco Certified Network Associate

2011-02-02T05:50:00.001+07:00

What is CCNA? CCNA stands for Cisco Certified Network Associate - a certification for IT professionals that is issued by Cisco Systems, Inc., one of the most successful computer networking companies. Cisco manufactures and markets a wide range of devices for both enterprises and telecommunications carriers. Cisco is an abbreviation of San FranCISCO.

The Cisco Certified Network Associate is an apprentice, or foundation level (along with Cisco Certified Design Associate), within the three levels of certification that include Associate, Professional, and Expert. Basically, CCNA professionals are certified to install, configure, and operate LAN, WAN, and dial access services for small networks (100 nodes or fewer), including but not exclusive to use of these protocols: IP, IGRP, Serial, Frame Relay, IP RIP, VLANs, RIP, Ethernet, and Access Lists. The certification is valid for three years, after which recertification may be sought.

In order to hold a CCNA certification, a candidate has to pass either the Cisco Certified Network Associate Exam or a combination of Introduction to Cisco Networking Technologies Exam and Interconnecting Cisco Networking Devices Exam. Main topics for these three exams include Planning and Designing; Design and Support; Implementation and Operation; Troubleshooting; and Technology. Other related topics may also appear on any specific delivery of the exam.

There are also some recommended training programs that may be taken before the above-mentioned examinations. These programs include Introduction to Cisco Networking Technologies (INTRO), Interconnecting Cisco Network Devices (ICND), and Additional Training (CCNA Prep Center Pilot). These trainings incorporate topics such as fundamental knowledge and comprehension of networking; how to select, connect, configure, and troubleshoot the various Cisco networking devices; sample questions, simulations, e-learning modules, labs, tips, etc.

Cisco / MCSE Exam Study: Creating A Road Map To Success

2011-02-01T09:50:00.000+07:00

Planning for success on the CCNA, CCNP, and other Cisco exams is much like taking a trip in your car. You've got to plan ahead, accept the occasional detour, and just keep on going until you get there. But what do you do before you get started?

Create a road map - for success.

If you were driving from one side of the country to another, you certainly wouldn't just get in your car and start driving, would you? No. You would plan the trip out ahead of time. What would happen if you just got in the car and started driving in the hope that you would someday arrive at your final destination? You would never get there, and you'd spend a lot of time wandering aimlessly.

Don't spend your study time and slow your progress by studying for a Cisco exam without planning the trip. Schedule your study time as you would an appointment with a client, and keep that appointment. Make sure that your study time is quality study - turn your TV, iPod, and cell off. If you hit a bump in the road and don't get your certification the first time you take the exam, regroup and create another plan. Study until you get to the point that on exam day, you know that you are already a CCNA or CCNP and you’re just there at the testing center to make it official.

The journey to success is not a straight line. When you look at a chart that shows a company's financial progress, the line never goes straight up. there are some ups and downs, but the overall result is success. The path to your eventual career and certification exam success may not be a direct one, but the important part is to get started - and to get any journey started, you've got to create a road map for a successful arrival at your destination.

Cisco ProtectLink Security Solutions

2010-11-30T20:35:00.000+07:00

Your network security is in good hands with ProtectLink products. These security products work together with selected Cisco routers and security appliances so you don't need any additional hardware, and ProtectLink products are easy to deploy and manage across your network.

Each ProtectLink product addresses a specific security threat and as part of an overall security approach provides layers of protection against different threats.

Cisco ProtectLink Web offers:

* Web Protection: ProtectLink Web combines powerful website content filtering and web-reputation assessment to block web-based attacks and control web access for your entire business at the Internet gateway.

* Easy Deployment: Designed to work with your Cisco Small Business router or security product, ProtectLink Web requires no additional hardware and is easy to set up and manage.

* Continuous Updates: Automatic and around-the-clock updates to threat information keep your network safeguarded against the latest web threats.

* Workforce Enhancement: By using ProtectLink Web to restrict access to offensive or non-work-related websites, you can enforce web-usage policies to improve company productivity, reduce web-based threats, and conserve bandwidth.

Cisco ProtectLink Gateway offers:

* Comprehensive Email and Web Protection: Defending a business's email and web traffic at the Internet entry point, ProtectLink Gateway integrates powerful antispam, antiphishing, URL content filtering, and web-reputation assessment to block potential email and web-based attacks.

* Easy Deployment: ProtectLink Gateway is a hosted service, which means that there are no additional hardware requirements. Setting up ProtectLink Gateway to work with your Cisco SA 500 Series Appliance is a simple process.

* Continuous Updates: Automatic and around-the-clock updates to threat information keep your network safeguarded against the latest email and web threats.

* Workforce Enhancement: By using ProtectLink Gateway to restrict access to offensive or non-work-related websites, you can enforce web-usage policies to improve company productivity, reduce web-based threats, and conserve bandwidth.

Cisco ProtectLink Endpoint offers:

* Virus, Spyware, and Web Protection: Protect Windows-based desktops, laptops, and servers located both inside and out of the office from viruses, spyware, or other web threats without running software on a server.

* Enforce Company Policy Compliance: Built-in policy enforcement on the Cisco SA 500 Series Security Appliances restricts users from Internet access if their desktop security is not current and active.

* Continuous Updates: Automatic and around-the-clock updates to threat information keep your network safeguarded against the latest email and web threats.

* Minimal Administration: With continuous updates and consolidated reporting, administration is easy and minimal.

Spend your time building a successful business. Leave your network security to Cisco.

Source : http://www.cisco.com/cisco/web/solutions/small_business/products/security/protectlink/index.html

Cisco Security Bundles

2010-11-20T12:57:00.000+07:00

Cisco^® router security bundles deliver security features such as Cisco IOS^® Software-based intrusion prevention systems (IPSs), firewall, content filtering, VPN, and infrastructure security services over numerous WAN access technologies, offering high levels of performance, security, scalability, and availability to meet today's growing business requirements. Cisco Catalyst^® 6500 Series security bundles are based on the Cisco Catalyst 6500 Series E chassis and the Cisco 7600 Series/Catalyst 6500 Series IPSec VPN Shared Port Adapter (SPA), Cisco Catalyst 6500 Supervisor Engine 32 PISA, or Cisco Catalyst 6500 Series Firewall Services Module. Cisco 7600 Series security bundles are based on the Cisco 7600 Series E chassis and the IP Security (IPsec) VPN SPA. Cisco ASR 1000 Series Aggregation Services Router security bundles are available for the Cisco ASR 1002, ASR 1004, and ASR 1006 chassis and include the respective Cisco IOS XE feature licenses without the need for additional hardware support in the form of security blades or modules. The next generation of the Cisco Integrated Services Routers security bundles include the Cisco IOS Security PAK license. The bundles listed in Table 1 have been created and discounted for ease of ordering and adopting these advanced services.

Table 1. Bundles for Ordering and Adopting Advanced Services

Product Family	Bundle	Description
Voice and Security Bundles
3900	C3945-VSEC/K9	Cisco 3945 Voice Sec. Bundle, PVDM3-64, UC and SEC License PAK
	C3925-VSEC/K9	Cisco 3925 Voice Sec. Bundle, PVDM3-64, UC and SEC License PAK
3800	C3825-35UC-VSEC/K9	3825 Voice Security Bundle with CME, CUE, and Phone licenses for 35 users, PVDM2-64,NME-CUE, Adv IP Serv,128MB Flash and 512MB DRAM
	C3845-35UC-VSEC/K9	3845 Voice Security Bundle with CME, CUE, and Phone licenses for 35 users, PVDM2-64,NME-CUE, Adv IP Serv,128MB Flash and 512MB DRAM
	C3845-H-VSEC/K9	Cisco 3845 HVSEC Bundle with IOS Advanced IP Services, PVDM2-64, AIM-VPN/SSL-3, 100 User SRST License, 25 User SSL VPN License, 512 MB Flash/1GB DRAM
	C3825-H-VSEC/K9	Cisco 3825 HVSEC Bundle with IOS Advanced IP Services, PVDM2-64, AIM-VPN/SSL-3, 100 User SRST License, 25 User SSL VPN License, 512 MB Flash/1GB DRAM
	C3825-VSEC/K9	3825 Voice Security Bundle, PVDM2-64, Adv IP Serv, 128F/512D
	C3825-VSEC-CCME/K9	3825 VSEC Bundle with PVDM2-64, FL-CCME-168, Adv IP Serv, 128F/512D
	C3825-VSEC-SRST/K9	3825 VSEC Bundle with PVDM2-64, FL-SRST-168, Adv IP Serv, 128F/512D
	C3845-VSEC/K9	3845 Voice Security Bundle, PVDM2-64, Adv IP Serv, 128F/512D
	C3845-VSEC-CCME/K9	3845 VSEC Bundle with PVDM2-64, FL-CCME-240, Adv IP Serv, 128F/512D
	C3845-VSEC-SRST/K9	3845 VSEC Bundle with PVDM2-64, FL-SRST-240, Adv IP Serv, 128F/512D
2900	C2901-VSEC/K9	Cisco 2901 Voice Sec. Bundle, PVDM3-16, UC and SEC License PAK
	C2911-VSEC/K9	Cisco 2911 Voice Sec. Bundle, PVDM3-16, UC and SEC License PAK
	C2921-VSEC/K9	Cisco 2921 Voice Sec. Bundle, PVDM3-32, UC and SEC License PAK
	C2951-VSEC/K9	Cisco 2951 Voice Sec. Bundle, PVDM3-32, UC and SEC License PAK
2800	C2821-H-VSEC/K9	Cisco 2821 HVSEC Bundle with IOS Advanced IP Services, PVDM2-32, AIM-VPN/SSL-2, 50 User SRST License, 10 User SSL VPN License, 256 MB Flash/512 MB DRAM
	C2811-H-VSEC/K9	Cisco 2811 HVSEC Bundle with IOS Advanced IP Services, PVDM2-16, AIM-VPN/SSL-2, 35 User SRST License, 10 User SSL VPN License, 256 MB Flash/512 MB DRAM
	C2801-H-VSEC/K9	Cisco 2801 HVSEC Bundle with IOS Advanced IP Services, PVDM2-8, AIM-VPN/SSL-2, 25 User SRST License, 10 User SSL VPN License, 128 MB Flash/384 MB DRAM
	C2801-VSEC/K9	2801 Voice Security Bundle, PVDM2-8, Adv IP Serv, 64F/256D
	C2801-VSEC-CCME/K9	2801 VSEC Bundle with PVDM2-8, FL-CCME-24, Adv IP Serv, 128F/256D
	C2801-VSEC-SRST/K9	2801 VSEC Bundle with PVDM2-8, FL-SRST-24, Adv IP Serv, 128F/256D
	C2811-VSEC/K9	2811 Voice Security Bundle, PVDM2-16, Adv IP Serv, 64F/256D
	C2811-VSEC-CCME/K9	2811 VSEC Bundle with PVDM2-16, FL-CCME-36, Adv IP Serv, 128F/256D
	C2811-VSEC-SRST/K9	2811 VSEC Bundle with PVDM2-16, FL-SRST-36, Adv IP Serv, 128F/256D
	C2821-VSEC/K9	2821 Voice Security Bundle, PVDM2-32, Adv IP Serv, 64F/256D
	C2821-VSEC-CCME/K9	2821 VSEC Bundle with PVDM2-32, FL-CCME-48, Adv IP Serv, 128F/256D
	C2821-VSEC-SRST/K9	2821 VSEC Bundle with PVDM2-32, FL-SRST-48, Adv IP Serv, 128F/256D
	C2851-VSEC/K9	2851 Voice Security Bundle, PVDM2-48,Adv IP Serv,64F/256D
	C2851-VSEC-CCME/K9	2851 VSEC Bundle with PVDM2-48, FL-CCME-96,Adv IP Serv,128F/256D
	C2851-VSEC-SRST/K9	2851 VSEC Bundle with PVDM2-48, FL-SRST-96,Adv IP Serv,128F/256D
1861	C1861-4F-VSEC/K9	1861,8-user CME, CUE,Ph Lic,4FXS,4FXO,8xPOE,HWIC slot, Adv IP
	C1861-2B-VSEC/K9	1861,8-user CME, CUE,Ph Lic,4FXS,2BRI,8xPOE,HWIC slot, Adv IP
Security Bundles
7600	7613-VPN+-K9	Cisco 7613 with Supervisor Engine 720-3B, IPSec VPN SPA and Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	7609-VPN+-K9	Cisco 7609 with Supervisor Engine 720-3B, IPSec VPN SPA and Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	7606-VPN+-K9	Cisco 7606 with Supervisor Engine 720-3B, IPSec VPN SPA and Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	7604-VPN+-K9	Cisco 7604 with Supervisor Engine 720-3B, IPSec VPN SPA and Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
ASR 1000	ASR1002-5G-VPN/K9	Cisco ASR 1002 Router VPN Bundle with 5 Gbps ASR1000-ESP5 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1002-10G-VPN/K9	Cisco ASR 1002 Router VPN Bundle with the 10 Gbps ASR 1000-ESP10 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1004-10G-VPN/K9	Cisco ASR 1004 Router VPN Bundle with the 10 Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1004-20G-VPN/K9	Cisco ASR 1004 Router VPN Bundle with the 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1006-10G-VPN/K9	Cisco ASR 1006 Router VPN Bundle with the 10 Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card SASR1R1-AESK9-21SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1006-20G-VPN/K9	Cisco ASR 1006 Router VPN Bundle with the 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card SASR1R1-AESK9-22SR consolidated software package, and FLASR1-IPSEC-RTU (IPsec VPN) feature license
	ASR1002-5G-SEC/K9	Cisco ASR 1002 Router VPN and Firewall Bundle with the 5 Gbps ASR1000-ESP5 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1002-10G-SECK9	Cisco ASR 1002 Router VPN and Firewall Bundle with the 10 Gbps ASR1000- ESP10 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1004-10G-SEC/K9	Cisco ASR 1004 Router VPN and Firewall Bundle with the 10 Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1004-20G-SEC/K9	Cisco ASR 1004 Router VPN and Firewall Bundle with the 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1006-10G-SEC/K9	Cisco ASR 1006 Router VPN and Firewall Bundle with the 10Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card , SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1006-20G-SEC/K9	Cisco ASR 1006 Router VPN and Firewall Bundle with the 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card , SASR1R1-AESK9-22SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), and FLASR1-FW-RTU (Firewall) feature licenses
	ASR1002-5G-SHA/K9	Cisco ASR 1002 Router Security HA Bundle with the 5 Gbps ASR1000-ESP5 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPSec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM), FLASR1-IOSRED-RTU (IOS Software Redundancy) feature licenses
	ASR1002-10G-SHA/K9	Cisco ASR 1002 Router Security HA Bundle with the 10 Gbps ASR1000-ESP10 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPSec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM), FLASR1-IOSRED-RTU (IOS Software Redundancy) feature licenses
	ASR1004-10G-SHA/K9	Cisco ASR 1004 Router Security HA Bundle with the 10Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM), FLASR1-IOSRED-RTU (IOS Software Redundancy) feature licenses
	ASR1004-20G-SHA/K9	Cisco ASR 1004 Router Security HA Bundle with the 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM), FLASR1-IOSRED-RTU (IOS Software Redundancy) feature licenses
	ASR1006-10G-SHA/K9	Cisco ASR 1006 Router Security HA Bundle with two 10 Gbps ASR1000-ESP10 Embedded Services Processors, two ASR1000-RP1 Route Processors, one ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM) feature licenses
	ASR1006-20G-SHA/K9	Cisco ASR 1006 Router Security HA Bundle with two 20 Gbps ASR1000-ESP20 Embedded Services Processors, two ASR1000-RP1 Route Processors, one ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, FLASR1-IPSEC-RTU (IPsec VPN), FLASR1-FW-RTU (Firewall), FLASR1-FPI-RTU (NBAR+FPM) feature licenses
7301	CISCO7301/2+VPNK9	Cisco 7301 Bundle with IP FW/IDS IPSec IOS, 3 FE/GE, 64 MB Flash/512 MB DRAM, VAM2+
7200	7206VXRG2/VSAVPNK9	Cisco 7206VXR, NPE-G2 Bundle with Advanced Security IOS release 12.4(4)XD, 3FE/GE, 256 Flash/1 GB DRAM, VSA
	7206VXRG2/2+VPNK9	Cisco 7206VXR, NPE-G2 Bundle with Advanced Security IOS release 12.4(4)XD, 3 FE/GE, 256 Flash/1 GB DRAM VAM2+, and port adapter jacket card
	7206VXR400/2+VPNK9	Cisco 7206VXR NPE400 Bundle with IP FW/IDS IPSec IOS, I/O 2 FE, 64 MB Flash/512 MB DRAM, VAM2+
	7206VXRG1/2+VPNK9	Cisco 7206VXR NPE-G1 Bundle with IP FW/IDS IPSec IOS, 3 FE/GE, 64 MB Flash/512 MB DRAM, VAM2+
3900	CISCO3945-SEC/K9	Cisco 3945 Security Bundle w/SEC license PAK, SPE150, 1GBDRAM
	CISCO3925-SEC/K9	Cisco 3925 Security Bundle w/SEC license PAK, SPE100, 1GBDRAM
3800	CISCO3845-SEC/K9	Cisco 3845 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO3845-HSEC/K9	Cisco 3845 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-3, 128 MB Flash/512 MB DRAM, 25 User SSL License
	CISCO3825-SEC/K9	Cisco 3825 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO3825-HSEC/K9	Cisco 3825 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-3, 128 MB Flash/512 MB DRAM, 25 User SSL License
2900	CISCO2901-SEC/K9	Cisco 2901 Security Bundle w/SEC license PAK,512MB DRAM
	CISCO2911-SEC/K9	Cisco 2911 Security Bundle w/SEC license PAK, 512MB DRAM
	CISCO2921-SEC/K9	Cisco 2921 Security Bundle w/SEC license PAK, 512MB DRAM
	CISCO2951-SEC/K9	Cisco 2951 Security Bundle w/SEC license PAK,512MB DRAM
2800	CISCO2851-SEC/K9	Cisco 2851 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO2851-HSEC/K9	Cisco 2851 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-2, 64 MB Flash/256 MB DRAM, 10 User SSL License
	CISCO2821-SEC/K9	Cisco 2821 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO2821-HSEC/K9	Cisco 2821 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-2, 64 MB Flash/256 MB DRAM, 10 User SSL License
	CISCO2811-SEC/K9	Cisco 2811 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO2811-HSEC/K9	Cisco 2811 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-2, 64 MB Flash/256 MB DRAM, 10 User SSL License
	CISCO2801-SEC/K9	Cisco 2801 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 MB DRAM
	CISCO2801-HSEC/K9	Cisco 2801 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-2, 64 MB Flash/256 MB DRAM, 10 User SSL License
1900	CISCO1941-SEC/K9	Cisco 1941 Security Bundle w/SEC license PAK, 256MB DRAM
	CISCO1941W-SEC/K9	Cisco 1941W Security Bundle w/SEC license PAK, 802.11a/b/g/n
1800	CISCO1841-SEC/K9	Cisco 1841 Security Bundle with IOS Advanced Security Image, 64 MB Flash/256 DRAM
	CISCO1841-HSEC/K9	Cisco 1841 Security Bundle with IOS Advanced IP Services Image, AIM-VPN/SSL-1, 64 MB Flash/256 MB DRAM, 10 User SSL License
	CISCO1841-T1SEC/K9	Cisco 1841 T1 Security Bundle with IOS Advanced Security Image, WIC-1DSU-T1-V2, 64 MB Flash/256 MB DRAM
	CISCO1812/K9	Cisco 1812 Fixed configuration Security Router with IOS Advanced IP Services Image, Dual Ethernet with ISDN S/T Backup, 32MB Flash/128MB DRAM
	CISCO1812W-AG-E/K9	Cisco 1812 Fixed configuration Security Router with IOS Advanced IP Services Image, 802.11a+g ETSI Compliant and ISDN S/T, 32MB Flash/128MB DRAM
	CISCO1811/K9	Cisco 1811 Fixed configuration Security Router with IOS Advanced IP Services Image, Dual Ethernet with V.92 Modem backup, 32MB Flash/128MB DRAM
	CISCO1811W-AG-A/K9	Cisco 1811 Fixed configuration Security Router with IOS Advanced IP Services Image, 802.11a+g FCC Compliant and Analog B/U, 32MB Flash/128MB DRAM
800	CISCO881-K9	Cisco 881 Ethernet Sec Router
	CISCO881-SEC-K9	Cisco 881 Ethernet Sec Router w/ Adv IP Services
	CISCO881W-GN-A-K9	Cisco 881 Ethernet Security Router 802.11n FCC Compliant
	CISCO881W-GN-E-K9	Cisco 881 Ethernet Security Router 802.11n ETSI Compliant
	CISCO881W-GN-P-K9	Cisco 881 Ethernet Security Router 802.11n Japan Compliant
	CISCO888-K9	Cisco 888 G.SHDSL Sec Router w/ ISDN B/U
	CISCO888-SEC-K9	Cisco 888 G.SHDSL Sec Router w/ ISDN B/U w/ Adv IP Services
	CISCO888W-GN-A-K9	Cisco 888 G.SHDSL Sec Router ISDN B/U 802.11n FCC Compliance
	CISCO888W-GN-E-K9	Cisco 888 G.SHDSL Sec Router ISDN B/U 802.11n ETSI Compliance
	CISCO861-K9	Cisco 861 Ethernet Security Router
	CISCO861W-GN-A-K9	Cisco 861 Ethernet Security Router 802.11n FCC Compliant
	CISCO861W-GN-E-K9	Cisco 861 Ethernet Security Router 802.11n ETSI Compliant
	CISCO861W-GN-P-K9	Cisco 861 Ethernet Security Router 802.11n Japan Compliant
	CISCO878-K9	Cisco 878 G.SHDSL Security Router
	CISCO878-SEC-K9	Cisco 878 G.SHDSL Security Bundle with PLUS Feature Set
	CISCO878W-G-A-K9	Cisco 878 G.SHDSL Security Router, wireless 802.11g FCC compliant
	CISCO878W-G-E-K9	Cisco 878 G.SHDSL Security Router, wireless 802.11g ETSI compliant
	CISCO877-K9	Cisco 877 ADSL Security Router
	CISCO877-SEC-K9	Cisco 877 ADSL Security Bundle with PLUS Feature Set
	CISCO877W-G-A-K9	Cisco 877 ADSL Security Router, wireless 802.11g FCC compliant
	CISCO877W-G-E-K9	Cisco 877 ADSL Security Router, wireless 802.11g ETSI compliant
	CISCO877W-G-J-K9	Cisco 877 ADSL Security Router, wireless 802.11g Japan compliant
	CISCO876-K9	Cisco 876 ADSL over ISDN Security Router
	CISCO876-SEC-K9	Cisco 876 ADSL over ISDN Security Bundle with PLUS Feature Set
	CISCO876-SEC-I-K9	Cisco 876 ADSL over ISDN Security Bundle with PLUS ISDN Feature Set
	CISCO876W-G-E-K9	Cisco 876 ADSL over ISDN Security Router, wireless 802.11g ETSI compliant
	CISCO871-K9	Cisco 871 Dual Ethernet Security Ethernet Router
	CISCO871-SEC-K9	Cisco 871 Dual Ethernet Security Router Bundle with Advanced IP Services
	CISCO871W-G-A-K9	Cisco 871 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g FCC compliant
	CISCO871W-G-E-K9	Cisco 871 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g ETSI compliant
	CISCO871W-G-J-K9	Cisco 871 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g Japan compliant
	CISCO857-K9	Cisco 857 ADSL SOHO Security Router
	CISCO857W-G-A-K9	Cisco 857 ADSL SOHO Security Router, 802.11g FCC compliant
	CISCO857W-G-E-K9	Cisco 857 ADSL SOHO Security Router, 802.11g ETSI compliant
	CISCO857W-G-J-K9	Cisco 857 ADSL SOHO Security Router, 802.11g Japan compliant
	CISCO851-K9	Cisco 851 Secure Ethernet Router Cisco 857 ADSL SOHO Security Router, 802.11g Japan compliant
	CISCO851W-G-A-K9	Cisco 851 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g FCC compliant
	CISCO851W-G-E-K9	Cisco 851 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g ETSI compliant
	CISCO851W-G-J-K9	Cisco 851 Dual Ethernet Security Router with IOS Advanced Security Image, 802.11g Japan compliant
Cisco Catalyst 6500 Series Security Bundles
6500	WS-C6513-FWM-K9	Cisco Catalyst 6513 Firewall Security System
	WS-C6513-VPN+-K9WS-	Cisco Catalyst 6513 IPSec VPN SPA Security System with Supervisor Engine 720-3B, IPSec VPN SPA, Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	WS-C6513-S32P10GEWS-	Cisco Catalyst 6513 Security System with Supervisor Engine 32-10GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6513-S32P-GEWS-	Cisco Catalyst 6513 Security System with Supervisor Engine 32- 8 port GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6509-E-FWM-K9WS-	Cisco Catalyst 6509 Firewall Security System
	WS-C6509-E-VPN+-K9WS-	Cisco Catalyst 6509E IPSec VPN SPA Security System with Supervisor Engine 720-3B, IPSec VPN SPA, Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	WS-C6509E-S32P10GEWS-	Cisco Catalyst 6509E Security System with Supervisor Engine 32-10GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6509E-S32P-GEWS-	Cisco Catalyst 6509E Security System with Supervisor Engine 32- 8 port GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6506-E-FWM-K9WS-	Cisco Catalyst 6506 Firewall Security SystemCisco
	WS-C6506-E-VPN+-K9WS-	Cisco Catalyst 6506E IPSec VPN SPA Security System with Supervisor Engine 720-3B, IPSec VPN SPA, Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	WS-C6506E-S32P10GEWS-	Cisco Catalyst 6506E Security System with Supervisor Engine 32-10GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6506E-S32P-GEWS-	Cisco Catalyst 6506E Security System with Supervisor Engine 32- 8 port GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6504-E-VPN+-K9WS-	Cisco Catalyst 6504E IPSec VPN SPA Security System with Supervisor Engine 720-3B, IPSec VPN SPA, Services SPA Carrier Card, fan tray modules and IOS release 12.2(18)SXF
	WS-C6504E-S32P10GEWS	Cisco Catalyst 6504E Security System with Supervisor Engine 32-10GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6504E-S32P-GEWS-	Cisco Catalyst 6504E Security System with Supervisor Engine 32- 8 port GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6503E-S32P10GEWS-	Cisco Catalyst 6503E Security System with Supervisor Engine 32-10GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6503E-S32P-GEWS	Cisco Catalyst 6503E Security System with Supervisor Engine 32- 8 port GE-PISA, fan tray, and IOS release 12.2(18)ZY IP Base
	WS-C6503-E-FWM-K9WS	Cisco Catalyst 6503 Firewall Security System
Secure WAN Optimization Bundles
ASR 1000	ASR1002-5G-FPI/K9	Cisco ASR 1002 Router FPI Bundle with 5 Gbps ASR1000-ESP5 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license
	ASR1002-10G-FPI/K9	Cisco ASR 1002 Router FPI Bundle with 10 Gbps ASR1000-ESP10 Embedded Services Processor, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license
	ASR1004-10G-FPI/K9	Cisco ASR 1004 Router FPI Bundle with 10 Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license.
	ASR1004-20G-FPI/K9	Cisco ASR 1004 Router FPI Bundle with 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license.
	ASR1006-10G-FPI/K9	Cisco ASR 1006 Router FPI Bundle with 10 Gbps ASR1000-ESP10 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-21SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license.
	ASR1006-20G-FPI/K9	Cisco ASR 1006 Router FPI Bundle with 20 Gbps ASR1000-ESP20 Embedded Services Processor, ASR1000-RP1 Route Processor, ASR1000-SIP10 Carrier Card, SASR1R1-AESK9-22SR consolidated software package, and FLASR1-FPI-RTU (NBAR+FPM) feature license.
3800	CISCO3825-WAE/K9	Cisco 3825 Secure WAN Optimization Bundle with NME-WAE-502, and IOS Advanced Security, with 128 MB compact flash memory and 256 MB RAM
	CISCO3845-WAE/K9	Cisco 3845 Secure WAN Optimization Bundle with NME-WAE-502, and IOS Advanced Security, with 128 MB compact flash memory and 256 MB RAM
2800	C2811-WAE-302/K9	Cisco 2811 Integrated Services Router, NME-WAE-302, and IOS Advanced Security
	CISCO2811-WAE/K9	Cisco 2811 Integrated Services Router, NME-WAE-502, and IOS Advanced Security
	CISCO2821-WAE/K9	Cisco 2821 Integrated Services Router, NME-WAE-502, and IOS Advanced Security
	CISCO2851-WAE/K9	Cisco 2851 Integrated Services Router, NME-WAE-502, and IOS Advanced Security with 128-MB compact flash memory
	CISCO2851-WAE/K9	Cisco 2851 Integrated Services Router, NME-WAE-502, and IOS Advanced Security with 128-MB compact flash memory

Cisco and Partner Services for the Branch

Services from Cisco and our certified partners can help you transform the branch experience and accelerate business innovation and growth in the Borderless Network. We have the depth and breadth of expertise to create a clear, replicable, optimized branch footprint across technologies. Planning and design services align technology with business goals and can increase the accuracy, speed, and efficiency of deployment. Technical services help improve operational efficiency, save money, and mitigate risk. Optimization services are designed to continuously improve performance and help your team succeed with new technologies.

Source from : Cisco

Cisco 2811 Secure 3G Bundle - Router - cellular modem - Ethernet, Fast Ethernet - Cisco IOS Advanced Security - 1U - AT&T - external

Cisco 877 Security Bundle - router ( CISCO877-SEC-K9 )

Cisco L-CSA-B10000-DTOP Bundle Cisco Security Dsktp Agent 10000 Agent LCSAB10000DTOP

Linksys WRT54G Wireless-G Broadband Router

2010-10-26T00:21:00.000+07:00

Linksys WRT54G Wireless-G Broadband Router

1. Begin setup of your Linksys Wireless Router by first plugging in the power. Give it 10 seconds or so to initialize and then plug an ethernet cable into your wall jack and into the port on the back of the router marked Internet. Next get another ethernet cable and plug one end into your laptop and the other into one of the ports labeled 1-4 on the router. Your computer is now properly connected to the router to begin its setup and configuration.

2. Next open a web browser window on the connected computer and type http://192.168.1.1 into the address bar and press enter. A window will pop up prompting you for a username and password to access the configuration page for your router. Enter admin for both the username and password.

3. You should see the Setup page shown below.

Accessing the router settings through a web browser.

4. On this screen you should change the Router Name from its default value to something unique so that your Base Station will not be confused with another. Scroll to the bottom of the page and click Save Settings then click Continue when the Settings are successful dialog is displayed.

5. Next, click on the Wireless tab at the top of the settings screen. Change the Wireless Network Name (SSID) from the default value to something unique (you can use the same name you set as your Router Name in the previous step. Then Disable the Wireless SSID Broadcast option and click Save Settings and then Continue when the Settings are successful dialog is displayed.

6. Now click on the Wireless Security subsection at the top of the page. In order to password protect your wireless network first use the Security Mode dropdown box to select WEP and then from the WEP Security dropdown box select 128 bits 26 hex digits. Choose a password between 6 and 8 characters and type it into the Passphrase box. Then click Generate. Finally click Save Settings and then Continue when the Settings are successful dialog is displayed. You may also select WPA encryption, however not all network cards support this, so check your documentation first.

7. Next click on the Wireless MAC Filter subsection at the top of the page. Then Enable the Wireless MAC Filter option and select the option to Permit only PCs listed to access the wireless network. Click on the Save Settings button at the bottom of the Filter List window and then Continue.

8. Now click on the Edit MAC Filter List button to pop up a new window (shown below) where you will enter the MAC Address, also known as Physical Address, for each computer that you will be using to connect to your wireless network. If you don't know how to get this information follow the steps here. Once you have finished, click the Save Settings button at the bottom of the Filter List window and then Continue when the Settings are successful dialog is displayed. You may now close the Mac Address Filter List window.

Creating a MAC Address Filter List will prevent unauthorized computers from using your connection.

9. Finally click on the Administration tab at the top of the page. Change the default password for accessing your wireless router setup pages by typing a new one into the Router Password field and then confirming it. This should be a different password than the one you setup for WEP encryption, but should also be atleast 6 to 8 characters in length. Click the Save Settings button at the bottom of the Filter List window and then Continue when the Settings are successful dialog is displayed.

10. If you encountered any problems during this configuration procedure, please consult the manual that was included with your router or contact the manufacturer.

11. Your Linksys Wireless Router is now secure.

Overview Cisco WAP200

2010-10-24T22:18:00.001+07:00

Something that bothered us a sense of wonder, Cisco released a product for the SOHO network (SMB). Moreover, these products are not carrying the 802.11n wireless standard, but 802.11b / g.

During this time, the concentration of the target Cisco's networking products are among the large-scale institutions. These products target market for medium-and small-scale institutions are handled by Cisco subsidiary, namely Linksys. Thus, raised questions about whether the performance of Cisco WAP200 able to compensate for similar products from other producers to be the first to play in this market niche.

Sometimes we find a product access point or wireless router 802.11n standard but using a single antenna. This is in contrast to Cisco WAP200 that uses wireless standard 802.11b / g, but using a pair of removable antennas (measuring 2 dBi). Multiple antennas are generally used to separate the transmission path between the data packets that are sent with received so it can run simultaneously (full duplex).

Another one we found on Cisco's unfamiliarity WAP200, namely the lack of facilities DHCP server (which serves to give and manage IP address for the client or other device). Thus, before it can connect to the hotspot access point, the client must set the configuration of the computer IP address manually to the IP address (the one class with an IP address WAP200 Cisco access point, ie 192.168.1.x). The value x can be filled with a number between 1 through 254, except number 245 that became standard Cisco's IP address WAP200.

However, Cisco WAP200 has many advantages over similar access points, especially in terms of additional facilities. This access point provides QoS (Quality of Service) that serves to divide and limit the bandwidth for each client. Thus, bandwidth in the network monopoly problem can be tackled.

For security reasons, Cisco WAP200 provide authentication via a RADIUS server. There are also facilities Intrusion Alarm that will alert the administrator of illegal activity (or symptoms that interfere with the process of normal function) to the access point. This is for example, cloning or counterfeiting efforts MAC address and a new client who perform illegal association in hotspots.

We tested the speed of wireless data packet transfer (bandwidth or throughput) to the Cisco WAP200. NetIQ Chariot tool we use for the test.

In the first test, we put Cisco WAP200 at a distance of about 13 meters towards computer testing in a state with almost no screen space. NetIQ Chariot report diagram shows that the maximum throughput is 21.882 Mbps, 7.694 Mbps minimum, and mean of 19.521 Mbps. These results are quite good. But when we see the response time was approximately 5 seconds, which is 4.097 Mbps. This indicates that Cisco WAP200 still not quick enough in giving feedback and forwarding data packets.

We are trying also to bring Cisco WAP200 into an insulated space. This time we reduce the distance to about 10 meters, because at a distance of 13 meters, the signal becomes very weak and difficult association to the hotspot. NetIQ Chariot reported that a decline in throughput. Maximum value is 15.829 Mbps, 6.631 Mbps minimum, mean of 12.240 Mbps. However, it turns out the average response time over 5 seconds, ie 6.535 seconds.

***

WAP200 Cisco access points capable of acting as a secure and reliable Internet connection sharing and the sharing of data in the room is not too large (a radius of less than 10 meters). This device is able to meet the needs to share data wirelessly to the small-scale institutions.

South Korean Internet Network Still the Best in the World

2010-10-24T21:57:00.001+07:00

LONDON - Based on the results of the poll conducted Cisco Systems Inc. and Oxford University, South Korea re-elected as the country with broadband Internet services in the fixed network (fixed-line) world best.

South Korea has occupied the top position for three consecutive times from the list. Download speed internet in South Korea this year would average 33.5 Mbps or up 55 percent over the previous year. Penetration of broadband in this country reached 100 percent.

While the U.S. only made it into the order of 15 major Internet networks in line with improvements in the country. According to Cisco, the penetration of broadband fixed network in the country rose from 69 percent in 2009 to 75 percent this year.

List of top 10 countries with the best broadband:
1. South Korea
2. Hong Kong
3. Japan
4. Iceland
5. Switzerland, Luxembourg, Singapore
6. Malta
7. Netherlands
8. United Arab Emirates, Qatar
9. Sweden
10. Denmark

Contact Me

2010-10-24T20:18:00.001+07:00

Contact at christian.malmsteen@gmail.com

Privacy Policy

2010-10-24T19:28:00.000+07:00

Privacy Policy

Your Privacy
Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested.

Google Adsense and the DoubleClick DART Cookie
Google, as a third party advertisement vendor, uses cookies to serve ads on this site. The use of DART cookies by Google enables them to serve adverts to visitors that are based on their visits to this website as well as other sites on the internet.

To opt out of the DART cookies you may visit the Google ad and content network privacy policy at the following url http://www.google.com/privacy_ads.html Tracking of users through the DART cookie mechanisms are subject to Google’s own privacy policies.

Other Third Party ad servers or ad networks may also use cookies to track users activities on this website to measure advertisement effectiveness and other reasons that will be provided in their own privacy policies, learningmycisco.blogspot.com has no access or control over these cookies that may be used by third party advertisers.

Collection of Personal Information
When visiting learningmycisco.blogspot.com the IP address used to access the site will be logged along with the dates and times of access. This information is purely used to analyze trends, administer the site, track users movement and gather broad demographic information for internal use. Most importantly, any recorded IP addresses are not linked to personally identifiable information.

Links to third party Websites
We have included links on this site for your use and reference. We are not responsible for the privacy policies on these websites. You should be aware that the privacy policies of these sites may differ from our own.

Changes to this Privacy Statement
The contents of this statement may be altered at any time, at our discretion.

If you have any questions regarding the privacy policy of learningmycisco.blogspot.com then you may contact us at christian.malmsteen@gmail.com

Overview Cisco RVS4000

2010-10-20T22:11:00.000+07:00

A firewall is a bastion of the first layer in this Ethernet router, however the facility Intrusion Detection / Prevention System into second-tier defenses.

At first glance, the physical form is very similar to Cisco RVS4000 Linksys WRVS4400N wireless router we've tested in last month's issue. Cisco RVS4000 also comes with a placemat / buffer can be positioned vertically so that the stand to save the use of space. The difference, Linksys WRVS4400N using the antenna, while the Cisco-RVS4000 not. Four port LAN (local network) to RJ45 cable is behind a router entity has a transfer speed of data packets 1000 mbps gigabit ethernet alias thus supporting the use of cable CAT5E or CAT6 RJ45 type.

Cisco User-RVS4000 does not need to worry about the approach of the era of IPv6, because this cable router, including DHCP server system in it, supporting compatibility with IPv4 and IPv6 addressing system.

Although the physical form is very similar to the Linksys WRVS4400N, facilities management and security that exist in our Cisco-RVS4000 more diverse values. IP Sweep Detection There is a facility that would recognize the existence of illegal attempts to scan (scanning) client IP addresses. There are also facilities Messeger Instant Control to manage the client can communicate with anyone (and prohibit activities that potentially harm the local network, such as sending files via instant messenger). Peer to Peer Control Facility functions to manage file sharing inter-client directly. Anomaly Detection Application Facility will identify abnormalities of the application and provide direct warning.

The rest, facilities and security arrangements of networks owned by Cisco-RVS4000 equal to that of the Linksys WRVS4400N. The first facility is the ACL (access control list) to set permissions for internet access based on service type, IP address, and can be scheduled. The second facility which can also be scheduled is the Internet Access Policy. This facility is similar to the ACL, but more devoted to the HTTP protocol-based Internet service (and will filter addresses or web content based on keywords). The third facility, the Port Forwarding that include single port handling capacity and port range, allowing forwarding service requests from the Internet to a server in local network (which runs a service and listening on a specific port number). The facility is reinforced with Port Forwarding Port facilities Trigerring.

Facilities that become value-added services to Cisco RVS4000, ie a VPN (Virtual Private Network) that supports the IPsec protocol, PPTP, and L2TP. VPN facility enables clients who are on the internet join the local network securely through tunell.

Facilities virtual LANs on the Cisco-RVS4000 supports integration with RADIUS server, port mirroring, and RSTP protocols. No less interesting, facilities QoS (Quality of Service) are able to address the problem of monopoly in the local network bandwidth. How to limit bandwidth based on port number, type of service protocol and the type of application.

The results of our testing of SPI firewall (Statefull Packet Inspection) on Cisco-RVS4000 (using Shield-Up at grc.com trusted sites) show that there is no open service ports (Open). Most of the service port is in a closed status (Closed), while some of them hidden status (Stealth). In this test, we positioned the Cisco-RVS4000 as a leading gateway and use the public IP address.

We also tested the system IDS / IPS on Cisco-RVS4000 use Nessus tool which has thousands expolit simulated attacks against the security hole. Previously, we download the signature for IPS / IDS Cisco's latest on the official site and update the signature database IDS / IPS in the Cisco-RVS4000. Conversely, we also do updates to plugins and exploits in Nessus. The results indicate that there are 5 open ports, 12 low-level security gaps, as well as a high-level security holes. It turns out the security hole with such high security risks caused by the administrator login passwords into a web interface that is still in their default state (default). From reason, we recommend you change that default password with a more unique and powerful.

***

Cisco RVS4000 able to become an investment-cable network infrastructure to be reliable and ready for the era of IPv6. Support gigabit ethernet to meet the needs of a fast network. IDS system and strengthen the firewall's VPN to meet the needs of the extra network security.

Can the Cisco TelePresence World Touring with Efficient and Easy

2010-10-03T21:52:00.000+07:00

Jakarta - Indonesia Located at Cisco offices located in Jakarta, our reporters are given the opportunity to enjoy the services of Cisco TelePresence with offices in Singapore by using technologies like video streaming that offer some instant messaging, but used three big screen with HD video quality is fine and smooth .
Cisco TelePresence through the latest technology to bring more people from separate locations around the world. In Indonesia itself, precisely in the office there Jakarta Cisco TelePresence 3010 can be used to bring the experience of face-to-face virtual meetings using the power of high definition video network.
Cisco as the leader of networking for the Internet is changing the way people interact, communicate and collaborate, through TelePresence technology, although through streaming video technology you can share meeting materials, such as consultation with experts, share knowledge from teachers to students and coordination among employees from different offices locations across Indonesia as well as real world, without realizing that you do it virtually.
Due to customer needs using a highly diverse virtual video, Cisco developed the Cisco TelePresence portfolio by offering a series of widely available, among others:
Cisco TelePresence 3210Ideal for use at headquarters and regional offices. Can be used by 18 people at one location. This series is equipped with three screens, can help facilitate more people to conduct meetings and collaboration. Cisco TelePresence System 3210 is available at a price range of U.S. $ 300,000.
Cisco TelePresence 3010Equipped with three 65-inch plasma screen with a specially designed table for six people at one location, to connect with 48 different locations. Cisco TelePresence System 3010 is available at a price range of U.S. $ 250,000.
Cisco TelePresence 1300This series is designed for use in any meeting room. Equipped with one screen and three cameras, this solution accommodates six people in one location. Cisco TelePresence System 1300 is available at a price range of U.S. $ 84,000.
Cisco TelePresence 1000Suitable for meetings of four people facing each other, this series is equipped with a screen that displays high-definition video. Cisco TelePresence System 1000 is available at a price range of U.S. $ 79,000.
Cisco TelePresence 500Also known as Personal TelePresence, using 37-inch screen to be placed in the personal workspace. Cisco TelePresence System 500 is available with a price range of U.S. $ 34,000.

"With the Cisco TelePresence in Jakarta, we want to offer customers a new way for companies in doing business with efficient by saving time, effort and also cost the company to pay employees to conduct coordination meetings in certain areas, making this technology as a new lifestyle of people who have a busy job, but without having to sacrifice lives with relatives or family, "said Chandra Herawan, Senior Manager of Unified Communications Business Asia Region.

The Cisco 642-262

2010-04-24T01:21:00.000+07:00

The 642-262 IUC is an exam that is related to the implementation of the Cisco unity server certification. This would test a candidate's skills in installing and customizing the Cisco unity connection. One could get good jobs after finishing this certification! There are lots of topics that need to be focused in order to complete this exam. Some of the topics are general while there are few other specialized topics. One could follow the guidelines in the Cisco's website in order to understand better about the various topics that are to be covered in the exam. The various topics covered in the exam include Cisco unity connection platform, deployment model and also licensing, installation, phone system integration, COBRA, preparing and managing connections.
One would have to take up some training in order to complete the exam and the recommended training for the exam include Cisco unified connection. There are various courses that are listed by the Cisco learning partner and the authorized source for learning is through Cisco learning centers. Here you would be trained by authorized trainers and these trainers would have a good knowledge about the subject. You could check out the global training partner in order to locate the nearest training center. The duration of 642-262 exam is for 75 minutes and the exam is available in both English and Japanese. To know more about the exams you could consult some special sections where there would be detailed information about different types of certification like professional, associative, expert level, specialist etc. These types of certification would have different levels of information. One will find information about exam registration, policy, and exam lists etc. If you like to recertify yourselves in order to maintain current trends in the technology, you could also get more information on recertification in the website.

Author is from SelfTestEngine which is Exam Preparation Tool for IT Certification Exams like 642-262 practice exams and 642-262 questions and answers. Visit to download Free SelfTestEngine and Demos for Self Preparation.

Article Source: http://EzineArticles.com/?expert=John_Michals

Routing Protocols - RIP V2

2010-04-24T01:19:00.000+07:00

Recently, the focus of the CCNA exam for routing (Lab or Sim) configuration is primarily on RIP and EIGRP; however, you will need to be familiar with the basics of RIP v1 and v2, IGRP, EIGRP, and OSPF. We are going to look at the operation of these protocols, as well as their configuration.
Firstly, we begin with RIP.
The Routing Information Protocol -RIP is a distance-vector protocol that uses hop count as it's metric. RIP is widely used for routing traffic in a network and the Internet. It is classified as an interior gateway protocol (IGP), which means that it performs routing within a single autonomous system.
The early RIP version 1 was the Internet's first widely used routing protocol. It was first defined in RFC 1058 in 1988. The protocol has since been standardized several times, resulting in the development and introduction of RIP version 2 defined in RFC 2453. Both versions are still in use today in small, simple networks.
As a fact; a router can learn a route to a network via two methods: Static and Dynamic.
A static route is a route that is manually configured on the router. When it comes to Packet routing, the first step a router take is to view and examine its active interfaces, the configured addresses, determine the corresponding networks, and populate its routing table with this information. A detail look at the routing table will show this as "directly connected".
Dynamic routes are routes that a router learns by running a routing protocol. Routing protocols enable a router to learn about routes from other neighboring routers running the same routing protocol. Dynamic routing protocols such as RIP, enables a network router to share networks and reachability information with other routers in the network.
RIP version 1
RIP v1 uses classful routing. It does not support variable length subnet masks (VLSM). This limitation makes it impossible to have different-sized subnets inside of the same network class. There is also no support for router authentication; this vulnerability exposes it to various attacks. RIP v1 works when there are only 16 hop counts. If there are more than 16 hops (router) between source and destination networks, it sees it as unreachable.
RIP version 2
Due to the limitations and vulnerabilies of the original RIP v1, version 2 was introduced in 1993 and last standardized in 1998.
This included the ability to carry subnet information, enabling it to support VLSM and Classless Inter-Domain Routing (CIDR), the hop count is still limited to 16 so as to maintain backward compatibility. The v2 is equipped to fully inter-operate with the earlier specification - v1 if appropriately configured to do so. For router and routing security, the v2 was enhanced to authenticate connectivity with an encrypted password for routing updates.
In summary:
Feature of RIP:

Administrative distance is 120 (RIPv1 and v2.)
v2 sends routing updates via multicast address 224.0.0.9.
RIP uses hop count as its metric.
Authentication with an encrypted password for routing updates (v2)

CCNA Certification RIP v2 lab Exam with Explanations:
http://orbitco-ccna-pastquestions.com/CCNA-RIPv2-Configuration-Simulation-Exam.php

Article Source: http://EzineArticles.com/?expert=Chika_Nwokeoma

Cisco CCNA Retraining Courses in Detail

2010-04-24T01:17:00.000+07:00

If you want Cisco training, it's most likely that the CCNA is what you'll need. Cisco training is intended for individuals who wish to understand and work with routers. Routers connect networks of computers to other computer networks over the internet or dedicated lines.
It's vital that you already know a good deal about computer networks and how they operate and function, because networks are linked to routers. If not, the chances are you'll fall behind. Why not find training that also includes the basics (maybe the CompTIA Network+, possibly with A+ as well) before you start a CCNA course. Some providers offer this as a career track.
Qualifying up to the CCNA level is more than adequate; don't be cajoled into attempting your CCNP. Once you've worked for a few years, you'll know if it's relevant for you to have this next level up. Should that be the case, you'll have the experience you need to master your CCNP - as it's a very complex course - and shouldn't be taken lightly.
Being a part of revolutionary new technology is about as exciting as it can get. You become one of a team of people defining the world to come. We've barely started to scrape the surface of how technology will influence everything we do. Computers and the Internet will massively transform the way we view and interrelate with the world as a whole over the years to come.
The regular IT professional throughout Britain can demonstrate that they receive noticeably more than his or her counterpart outside of IT. Standard IT remuneration packages are some of the best to be had nationwide. It's evident that we have a considerable national requirement for qualified IT professionals. And as growth in the industry shows little sign of contracting, it is likely there will be for the significant future.
Finding your first job in the industry can be a little easier if you're offered a Job Placement Assistance facility. However sometimes this feature is bigged up too much, as it is genuinely quite straightforward for well qualified and focused men and women to secure a job in the IT industry - because there's a great need for well trained people.
One important thing though, don't wait till you have finished your training before getting your CV updated. As soon as you start a course, mark down what you're doing and get it out there! It's possible that you won't have even qualified when you land your first junior support job; however this is not possible if interviewers don't get sight of your CV. The most reliable organisations to get you a new position are most often specialised and independent recruitment consultants. Because they get paid commission to place you, they're perhaps more focused on results.
Certainly ensure you don't spend hundreds of hours on your training and studies, then call a halt and leave it in the hands of the gods to find you a job. Stop procrastinating and start looking for yourself. Invest as much focus into finding the right position as you did to get trained.
Wouldn't it be great to know for sure that our jobs are secure and our work prospects are protected, but the growing likelihood for most jobs throughout the UK currently seems to be that the marketplace is far from secure. It's possible though to reveal security at market-level, by probing for areas in high demand, together with a lack of qualified workers.
With the Information Technology (IT) market for example, the 2006 e-Skills survey showed a skills shortage in the UK of around 26 percent. To put it another way, this clearly demonstrates that the country is only able to source 3 certified professionals for every four jobs that are available currently. This troubling truth reveals the urgent need for more properly trained computing professionals throughout the UK. In actuality, acquiring professional IT skills during the next year or two is likely the finest career choice you could ever make.
Trainees looking at this market are often very practical, and don't always take well to classrooms, and poring through books and manuals. If this is putting you off studying, go for more modern interactive training, where you can learn everything on-screen. Many studies have proved that memory is aided when we involve as many senses as possible, and we put into practice what we've been studying.
Fully interactive motion videos involving demonstration and virtual lab's will turn you off book-based study for ever more. And they're far more fun. Don't take any chances and look at a small selection of training examples before you make your decision. The minimum you should expect would be videoed instructor demonstrations and audio-visual elements backed up by interactive lab's.
Many companies provide just online versions of their training packages; sometimes you can get away with this - but, imagine the problems if internet access is lost or you get intermittent problems and speed issues. It's preferable to have actual CD or DVD ROMs which will solve that problem.

Article Source: http://EzineArticles.com/?expert=Jason_Kendall

TCP/IP Suite Error and Control Messages

2010-01-24T22:14:00.000+07:00

Introduction
There is no mechanism to ensure that the data sent through the network successfully. The data may fail to achieve objectives with a variety of reasons such as damage to the hardware, configuration errors, or incorrect routing information. To help identify mistakes, IP uses the Internet Control Message Protocol (ICMP) to give the message to the sender data transmission errors such experience.
Because IP does not have a mechanism for sending error and control messages, it uses ICMP to send and receive error and control message to the hosts in the network.
It is expected that after going through this module, you can do:
- Describes how the ICMP
- Describes the format of ICMP message
- Identify the types of ICMP error messages
- Identifying the causes of potential ICMP error messages
- Describe ICMP control messages
- Identify control messages used in network
- Define pentebab ICMP for control messages

1. ICMP
IP uses unreliable method when sending data to the network. There is no process to determine the problem when sending data to the network. If there are failures such as a router dies, or if the destination device is not connected to the network, the data can not be sent. ICMP is a component of the TCP / IP protocols that help IP to identify the errors.

1.1 Error reporting and error correction
ICMP is used to report errors that were returned to the original datagram. As described below.

Workstation 1 tries to send a datagram to Workstation 6, but the interface Fa0 / 0 on router C died. Router C uses ICMP to send a message back to the workstation 1. This message indicates that the datagram can not be sent. ICMP can not fix a troubled network, he only gave report it.
At the time the router receives a datagram workstation C 1, he knows only the IP address of origin and destination of the datagram. He did not know where the exact route which will be taken. Therefore, router C could only give information to the workstation 1 on the problems that occur and there is no ICMP messages are sent to router A and router B. ICMP reports delivery status of packages only to the original equipment. He did not send information about changes to network routers other.

1.2 ICMP Message Delivery
ICMP message datagram encapsulated into the same way to the data that is sent when the IP is used. The figure below shows the ICMP data encapsulated in IP datagram.

When ICMP message is transmitted the same way as other data transmission, then they become subject to the same transmission problems. For this reason, errors created by ICMP messages do not form their own ICMP messages. Therefore, the possibility of sending datagram error that never reported back to the sender data.

1.3 Network unreachable
Communication in the network depends on several conditions encountered. First, the TCP / IP must be configured for devices that send and receive data. Including the installation of TCP / IP and configuring IP address and subnet mask. The default gateway must be configured if the datagram out local networks. Second, the device must be placed to pass the original datagram from the device and the network to the destination device. Router must also have TCP / IP is configured on the interface-interface and must use a specific routing protocols.
If the condition is not found, then network communication can not be done. Device datagram sender address to the IP address that does not exist or the destination device is not connected to the network. Router can also be a point of interface error if the connection dropped out or if the router does not have useful information to find the destination network. If the destination network is not accessible, it is called the network unreachable.
The following figure shows the router that receives packets that can not be sent. Packages undeliverable due to not knowing the path to the destination. Therefore, the router sends an ICMP host unreachable message to the origin.

To be continued...

Cisco Celebrates 25 Years of Technology Innovation and Corporate Social Responsibility

2010-01-04T21:30:00.000+07:00

San Jose, Calif. December 10, 2009 – Cisco today marks its 25th anniversary with a call to community service. Chairman and CEO John Chambers challenged every Cisco employee to volunteer four hours of service in his or her local community. The networking leader's goal is an aggregate contribution of 200,000 employee volunteer hours, which equates to approximately 25 years worth of service to the global community.

"I can think of no better way to mark Cisco's 25th year than focusing even more of our employees' talents and energy on community service," Chambers said. "Helping people connect and collaborate is not just core to our business—it is core to our values."

Cisco was founded on December 10, 1984 by husband and wife Len Bosack and Sandy Lerner, two former Stanford University computer scientists whose efforts to enable email between computers on different networks led to the invention of the first multiprotocol router. This seminal breakthrough played a major role in fueling the growth of the Internet.

Cisco has played a crucial role in enabling the profound change that the Internet has had on the world in the last 25 years. Built on a robust network infrastructure, the Internet has transformed business, driven economic development and productivity and brought people together around the world.

Chambers continued, "In the coming quarter century, the role of the network will become even more important in driving growth, innovation, and productivity in industries such as healthcare, education and energy. Looking ahead, Cisco is positioned to lead the evolution of the network to enable a 'connected future' which is increasingly collaborative, video-driven, personalized, and mobile."

Twenty-five years, more than 7,000 patents, and nearly 1 million employee volunteer hours later, Cisco today is the worldwide leader in networking technologies that are changing how the world works, lives, plays and learns. The company's commitment to innovation, customers and giving back has been key to Cisco's success over the years—and it will drive the company's ongoing mission to shape the future of the Internet by creating unprecedented value and opportunity for customers, employees, investors and ecosystem partners.

Highlights / Facts:

A quarter of a century ago there were just 1,000 "hosts" on the Internet, today there are more than 1.7 billion Internet users worldwide.
In 1984, there were 1,000 Internet devices; today there are over a 1 billion.
Cisco has grown from two employees with one product in 1984 to more than 63,000 people today in 200 offices worldwide with 50 product lines.
Cisco has been on the forefront of information technology for 25 years and posted fiscal year 2009 revenue of $36.1 billion.
Cisco's innovation is demonstrated in the company's more than 7,000 patents issued worldwide to Cisco inventors and 9,000 patent applications currently pending.
Cisco employees have logged nearly 1 million hours of volunteer service since 2001.
As a global corporate citizen, Cisco, in the last 10 years, has contributed over $1 billion to education, social inclusion and economic development initiatives globally.

Tags / Keywords:

Cisco, innovation, router, community service, CSR, corporate social responsibility, philanthropy, volunteer service

Additional Resources:

RSS Feed for Cisco: http://newsroom.cisco.com/dlls/rss.html

About Cisco Systems

Cisco, (NASDAQ: CSCO), the worldwide leader in networking that transforms how people connect, communicate and collaborate, this year celebrates 25 years of technology innovation, operational excellence and corporate social responsibility. Information about Cisco can be found at http://www.cisco.com. For ongoing news, please go to http://newsroom.cisco.com.
# # #
Cisco, the Cisco logo, and Cisco Systems are registered trademarks or trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

Installing OpenBSD 4.0

2009-12-30T11:22:00.000+07:00

This section will walk you through the entire OpenBSD installation process, from start to finish.

Installation Methods

There are three ways to install OpenBSD: over a network, by bootstrapping from an existing OpenBSD system, or through installation media (CD or floppy disk). Not all methods are supported by every architecture, but both x86 and AMD64 support all three installation procedures.

By far the quickest, easiest, and most comprehensive method for modern computers is to use the official OpenBSD installation CDs. These are available for U.S. $50 (plus shipping) directly from the OpenBSD Project's web site: http://www.openbsd.org/orders.html.

If you need to install OpenBSD right away and have a working broadband Internet connection, you can perform an FTP installation by using a minimal install floppy disk or CD, then retrieving the installation files from one of many OpenBSD mirror sites. The mirror list is at this address: http://www.openbsd.org/ftp.html#ftp.

If you choose a mirror site that is close to you, the download will take less time than if you choose one that is far away. It's a good idea to write down two or three mirror addresses just in case one happens to be down when you need it; you may have to type these in during installation. In addition to installation, you will also need an FTP mirror address for some other important things later, so it's a good idea to have them written down so that you don't have to look them up again.

The directory on the server that has the ISO files for the i386 minimal install CD and floppies is pub/OpenBSD/4.0/i386/, and the AMD64 ISO can be found at pub/OpenBSD/4.0/amd64/.

There are three floppy image files, of which you need only one if you are installing from the floppy drive:

floppy40.fs: This image is generally suitable for PCs that have a PCI or ISA network card; have an IDE, SATA or simple SCSI disk; and include support for some PCMCIA cards.
floppyB40.fs: This image is more suited to servers. It contains drivers for many kinds of RAID controllers, and some of the less common SCSI adapters. However, support for many standard SCSI adapters and many EISA and ISA network chips is not present.
floppyC40.fs: This image is designed for laptop computers, and supports a wide range of CardBus and PCMCIA devices.

And three CD imagesagain, you need only the one that applies to you:

cdrom40.fs: This is essentially a conglomerate of all three of the above floppy images. It can be used to make either a bootable 2.88M floppy or a CD.
cd40.iso: This is the CD ISO file that you are most likely to use. It has the widest selection of drivers.
cdemu40.iso: This CD image uses "floppy emulation" booting by using the cdrom40.fs image. This is only for use in special situations when the cd40.iso file won't work (usually on older systems).

Download the image appropriate to your situation (this will very likely be the cd40.iso file), then follow the instructions below.

Burning a CD from an ISO file

You have probably created a CD or DVD from an ISO file before. If so, follow your usual procedure. If you haven't created a CD from an ISO file in the past, then the instructions for doing so are dependent on your current operating system. Skip down to the subsection below that applies to your situation.

Microsoft Windows

You should already have some kind of CD/DVD writing program like Nero or Easy CD Creator on your computer. Navigate the program's menus until you find the option for creating a CD from an ISO image. Select the cd40.iso image in the ensuing file dialog, and then choose to burn the CD image to the disc.

If you do not have any such program, you can download one for free at either of these addresses:

http://isorecorder.alexfeinman.com/isorecorder.htm

http://www.cdburnerxp.se/download.php

After the CD writing program is downloaded and installed, run it. For example, using CDBurnerXP, you'd insert a blank disc, then click on the Start New Data Disc Compilation button. After that, go to the File menu and select Write Disk From ISO File. Choose the cd40.iso file from the ensuing file dialogue, then click Write Disc.

Unix, GNU, and BSD Systems

You can use the cdrecord command-line utility or the Qt-based K3b program to make ISOs into CDs. K3b should be pretty self-explanatory. Here's a quick cdrecord example (remember to change it for your specific system):

cdrecord -eject speed=24 dev=0,1,0 cd40.iso

Mac OS X

Start the Disk Utility from the Applications menu, then drag-and-drop the cd40.iso file to its sidebar. Click the file in the Disk Utility sidebar to select it; then go to the menu, select the Image submenu, and click on Burn.

Creating a Diskette from an FS file

Refer to the section below that coressponds with the operating system you're using.

From Unix-like Operating Systems

Most BSD, GNU and Unix systems can format and check a disk by using the fdformat utility. Its usage is simple:

fdformat /dev/rfd0c

where the /dev/rfd0c represents your floppy disk's device node. This is only an example and may not apply to your specific operating system, so change the above command appropriately. If you see all Vs in the resulting format routine, the disk is safe to write to.

To commit your floppy image to disk, use the dd command as such:

dd if=floppy40.fs of=/dev/rfd0c bs=32k

Again, you must modify the above command to fit your situation.

From Microsoft Windows

The first thing you'll need is a program that can write floppy images to disks. Windows does not natively include such a utility, but the OpenBSD Project has a few of them available for you to use on Windows. The one that should work best for current Windows systems (2000, XP, Vista) is ntrw. You can download it from the directory / pub/OpenBSD/4.0/tools/ on the same OpenBSD mirror that you downloaded the floppy ISO from.

Once downloaded, start the Command Prompt utility and run the program in it with the following syntax:

ntrw floppy40.fs a:

Installing over PXE

If you can't use a CD or diskette, and your network infrastructure supports booting over a network connection via the Preboot eXecution Environment (PXE), you can install OpenBSD over it. PXE gurus probably just need to know the name of the file from the OpenBSD FTP server that the operating system boots from. That file is pxeboot, and the installation kernel is bsd.rd, so these two files need to be in the appropriate directory on your FTP server. PXE booting can be very tricky because it involves other machines and services, so that's as far as the OpenBSD Crash Course goes on this subject. If you need more detailed PXE boot instructions, the OpenBSD Project has them here: http://www.openbsd.org/faq/faq6.html#PXE.

Booting From The Installation Disc

Most computers default to some slight variation of the following boot order: network, floppy disk, optical drive (CD), and then hard drive. If no boot files are found on any of those devices, you get an error message on the screen; most people will never see it unless they have a serious hard drive problem. There is a chance, though, that your computer will try to boot from the hard drive before any other devices. That's fine for normal, everyday operation, but it's no good for installing operating systems. In order to boot from your OpenBSD installation disc or disk, you will have to set your BIOS to boot from the drive that contains the installation media. If the BIOS looks to your hard drive for boot information first, it's likely that the CD or diskette will not be seen at all. You can test this by inserting the OpenBSD installation media in the appropriate drive shortly after the computer starts. If it boots from the diskette or CD and you see a bunch of lines of blue-highlighted text after a short delay, then you're all setgo ahead and skip down to the installation walkthrough.

Modifying The Boot Order

When they first power on, nearly all computers will tell you what key to press to enter the BIOS setup (if your computer offers a boot selection menu, such as F12 on some Dells and Option on Macs, you can use that to select the CD-ROM without having to poke around in BIOS setup). If you cannot see this screen, then press the following keys a few times when the computer beeps just after it is powered on: DEL (delete), F1, and F2. (If the machine is made by Compaq, the key to press may be F10 instead.) Once you get to the blue or black BIOS setup (sometimes called CMOS setup) screen, look for a Boot or an Advanced CMOS Setup section, and modify the boot order so that the CD-ROM or floppy drive is first, and the hard drive second. This is usually done by selecting drives from a drop-down list or by pressing the + and - keys to move a selection up or down in the list. When you've done that, save and exit setup, and the computer will restart with the new settings.

If you were successful, you should see a brief OpenBSD boot screen, followed by a few screens of blue-highlighted text that show the boot process. If the CD or disk fails to boot, you may not have adjusted the BIOS properly, or the installation media you made may be damaged or improperly burned (if this is the case, try burning it at a lower speed than you did the first time).

You should now continue on to the next section, which explains the exact installation process.

Installation Walkthrough

The OpenBSD Project provides decent installation instructions. You can find them in the liner notes in the CD set, or a more comprehensive instruction manual at this address: http://www.openbsd.org/faq/faq4.html.

Even though it's already been done twice, for the sake of completeness, this guide includes its own unique step-by step installation instructions below. If you are upgrading from OpenBSD 3.9, skip down to the section on upgrading.

Initial installation settings

When the installation media finishes booting, you'll be asked whether you would like to install, upgrade, or go straight to the command-line shell. Type i and press Enter.

Next you'll be asked to choose a terminal type. The default is vt220and that's fine, but it is forever in black and white. Type in pcvt25 and press Enterthat's a good color terminal that should work well with any modern computer.

If you live in the United States or Canada, type us at the keyboard layout (kbd(8) mapping) screen. If you use a Dvorak keyboard or a keyboard in a different country, press l (lowercase L) to see a list of keyboard types, then type in the appropriate one and press Enter.

Type in yes when you're asked if you'd like to proceed with the installation.

Slices, Partitions, and Filesystem

All BSD systems have a common method of dividing up hard disks, even though the partition types and filesystem formats differ among all of the BSD derivatives.

First you must assign a certain area of the disk for your operating system. This area is called a slice. You may then divide the slice up into a number of partitions, on which you will put filesystems. This differs from DOS, Windows, and GNU/Linux in that they do not deal with slicesjust partitions. If you do not have enough free, unpartitioned space on your existing hard drive, you may want to consider installing a second drive specifically for it. You can also install a removable or hot-swappable hard drive bay and switch hard disks as needed. You can also use a partition resizing tool such as gparted to create free space on your hard drive. Such utilities can be installed on most Unix-like operating systems, and many live CDs (such as the Ubuntu Linux installation disc, and the Knoppix and Kanotix live software distributions) have them readily available.

Now that you know what's about to happen, let's get back to the installation.

If you only have one hard drive in the system, press Enter when you're asked which hard disk you'd like to install to. If you have multiple hard drives and only want to install to one of them, OpenBSD should print out a list of device nodes that relate to hard drives. Generally this is wd0, wd1, etc., labeled according to their order of connection. Type in the device node of the disk you wish to install to and press Enter. The default is wd0.

Now you'll be asked if you'd like to use the entire disk for OpenBSD. If you want to try to get fancy with the slicing of your OpenBSD disk, that's fine, but it's only going to make things more difficult from here on. It is strongly recommended that you type Y and press Enter. This will erase everything on your hard drive.

Next you'll create partitions for your slice. You need a minimum of two: a root partition and a swap partition, but if you are designing the system for maximum security, you'll want to create partitions for the following directories:

/
/tmp
/var
/usr
/home

If you're taking this route, you will have to think ahead to what will be in these directories. /tmp can easily be 1 GB, as can /, but /var may end up needing a lot of space if you're going to be hosting a Web or email server. /usr can be anywhere from 6 GB to twice that, depending on how many programs you're going to install. /home may not need much space at all if there won't be any user accounts, but if you're building a desktop system, /home should be big enough to accommodate user files (email, documents, pictures, movies, music, etc.).

The reason why separate partitions are more secure and reliable is because the installation utility will automatically assign different levels of permissions to each partition if you use the ones prescribed above. Secondly, one particular service, if compromised or misconfigured, can't fill up the entire disk with garbage very easily if it has influence over only one partition. Lastly, if a filesystem becomes corrupt for some reason, only a small portion of your system will be lost.

If you get lost in the partition command line, type ? and press Enter to see a list of commands. Unfortunately the list is a little too long for most PC screens, and you miss the commands at the top. The full list of commands is:

a creates a partition
b sets OpenBSD disk boundaries
? prints the list of commands
c changes a partition size
D sets the disk label to the default
d deletes a partition
e edits the drive parameters
g sets the method of determining disk geometry
M shows the entire OpenBSD manpage for disklabel
m modifies an existing partition
n sets the mount point for a partition
p prints the disk label
q saves changes and quits the partition editor
r recalculates the amount of free space
s saves the disk label to a file
u undoes the most recent change
w writes the label to the disk
X toggles expert mode
x exits without saving changes
z zeroes out the partition table

So let's get on with partition creation by pressing a. The first question you'll be asked is which partition you're creating. Start with partition A by typing a and pressing Enter. When asked for an offset, press Enter to accept the default. The next variable is size; this will be your root partition, so give it the space you've decided it needs (use G as an abbreviation for gigabytes).

If you were totally confused by partitions earlier and figured you'd just wing it, make the root partition the entire size of the disk minus 2 GB, and then press Enter. If you do this, you won't be bothering with other partitions such as /var and /home (they will all live in the root).

The next question is filesystem type. You can accept the default (4.2BSD). Next you'll be asked for the mount point; that will be / so type a slash and press Enter to create the partition.

Press a again to create a swap partition. Partition B is reserved for swapspace, so choose that. Size it accordingly (or if you're winging it, give over your remaining 2 GB to this partition).

If you were winging it, you've just used up all your disk space, which is fine. But if not, repeat this process with further partitions, starting with the letter d (c is reserved), sizing them according to your plan and giving them the proper mount points. When you're done, press w to write the label to the disk, and then press q and then Enter to save and quit the partition utility.

After the partition table's been written, if you chose to use several partitions, you'll be asked to verify each partition's mount point. If you decided to use one big partition, the installation utility will likely move on to network configuration. For the mount points, just press Enter for each one. When you find that you are starting over at the beginning again, type done and press Enter.

Next you'll be asked if you're sure you want to proceed. Type y and press Enter.

Network Configuration

Once the disk has been sliced, partitioned, and formatted, you'll be asked to set the hostname. This is the machine's namename it whatever you wish.

Next you'll be asked if you'd like to configure the network. Type y and press Enter.

If OpenBSD recognizes your network devices, it'll list them by module name. (Note that Intel Centrino (IPW) wireless chips in laptop computers may be recognized, but will not work until a binary firmware blob is manually loaded from the command line after installation is complete.) Most people will probably have only one network device here, but if you have several, choose the one that will be your primary Internet connection and press Enter.

After that, you'll be given the chance to change the media options for your network device. Most people will not have to change anything here, so press Enter.

If this network device has a static IPv4 address, type it in now and press Enter. If it is assigned an IP address from a DHCP server (if it's connecting to a router or directly to a broadband Internet connection like a cable or DSL modem, then it's likely those devices will assign you a dynamic IP address through DHCP as well), type in dhcp and press Enter.

If you put in a static IP address, you'll be asked for a netmask (subnet mask) at this point. Type it in and press Enter.

Next, you'll be asked for your IPv6 address. If you are on an IPv6 network instead of IPv4, enter your static IP address here. Most people will just press Enter for the none default. If this machine will function as an IPv6 router, choose rtsol here.

If you have another network interface to initialize, this process will repeat for that device. Note that the installer will crash if you try to use DHCP with more than one network interface; you can change this manually later (by editing the /etc/hostname file for each network interface) if necessary.

If you have a domain name and DNS server for this machine, now's the time to put them in. If you chose DHCP earlier, then just leave the default entries as they are and press Enter. The nameservers are written to the /etc/resolv.conf file, and are overwritten every time a new host is dynamically configured. Next you'll be asked if you'd like to use the nameserver right now. Press Enter to accept the default yes.

The default route setting is next. If you are setting up OpenBSD as a network router and want to set the default route now (presumably you've already set up your interfaces accordingly), you certainly may. Most people will want to leave this as is and press Enter.

Next you'll be asked if you'd like to configure the hosts file with the ed editor. Unless you already know how to use ed, say no here and remember to do it later if necessary. When asked if you'd like to do any manual network configuration, your answer should probably be no unless you are using this machine as a network appliance of some kind and require unusual settings. All of these things can be changed later through the various network config files in the /etc directory if necessary.

When prompted, type in your root password and press Enter, and then do it once more to ensure that you typed it properly.

Package sets

Now it's time to install package sets. Skip down to the section below that applies to your situation.

From The Official CD

If you are installing from the official OpenBSD CD set, the package installation will be a breeze: just type cd here and press Enter. Assuming you only have one optical drive in your computer, press Enter again to accept the default, or type the device node of the particular CD drive that you're using for the installation and press Enter. Press Enter a third time to accept the default package set location.

Now skip down to the subsection on choosing package sets.

Over FTP/HTTP

If you're installing from a floppy or minimal install CD, type in ftp here (or http if that's the server type of the mirror you chose earlier) and press Enter. You'll then be asked for the FTP or HTTP proxy server (if you don't have one, use none). You'll then be asked for the mirror address and the directory on that mirror that the OpenBSD package sets are in. Type in the mirror address that you wrote down earlier, and leave the directory at its default, which should be automatically detected as pub/OpenBSD/4.0/i386 or pub/OpenBSD/4.0/amd64, depending on which architecture you're installing on.

You may be asked if you'd like to view a list of known FTP mirrors. You should already have one or two written down, so this procedure is not necessary. If you forgot to write down an FTP mirror address, or if the one you wrote down doesn't work, here are some that should:

ftp://ftp5.usa.openbsd.org/

ftp://rt.fm/

ftp://ftp.kd85.com/

Now continue to the subsection on choosing package sets.

Choosing Package Sets

The default package set list will be shown to you. This includes more than the bare minimum installation, which would be the following:

bsd
bsd.rd
base40
etc40

These minimum package sets will get you a working, networked operating system and absolutely not one thing more, but unless this is what you want (perhaps if you're designing some types of network appliance, for instance), at very least you should leave the default package selections as they are but add what you need. (You can probably do without the games if hard drive space is a concern, but they won't pose a security risk, so there's no harm in leaving them in.)

If you are on a multi-CPU, multi-core, or Hyper-Threaded machine, select the bsd.mp package for installation; that's the multiprocessor-aware kernel, and you'll need it to use both CPUs or cores.

If you are using this as a desktop system, just type all and press Enter to select all packages, including the X server. To select a package, type its name in and press Enter. To deselect a package, do the same thing with a - in front of the package name (to "subtract" it from the list).

Type done and press Enter when you're done, and then press Enter to begin copying the selected files to your machine. This process will take anywhere from a few minutes to more than an hour, depending on how many package sets you selected and where they are coming from.

Once all of the package sets you selected are installed, you'll be asked for the location of other package sets. Type done here and press Enter.

The Final Few Steps

The next question asks if you'd like to start the OpenSSH daemon when the system boots. If you don't need remote access and are planning to do all your work through this machine itself (or a serial terminal connected to it), type no and press Enter. Otherwise, if you need to be able to log into the machine over the network, press Enter to select the default yes.

Now you'll be asked if you want to start the OpenNTPD network time protocol daemon at boot time. The default is no, but it'll help keep accurate time on your machine if you choose yes here, so unless you have a good reason not to enable OpenNTPD, type yes and press Enter.

Next you'll be asked if you intend to run the X Window System (X.org). If you say yes here, a system-level setting for the AGP aperture will be adjusted according to your detected hardware. This makes it more efficient to display graphics, but it could be a theoretical security risk (attacks via the graphics processor). All things considered, it's not much of a security concern, but if you aren't going to run X.org on this machine (or if you have a graphics adapter that uses a proprietary bus or a non-AGP interface such as PCI or PCI Express), there is absolutely no sense in turning it on. The default here is no, so if you want to enable it, type yes and press Enter.

The following option ("Change the default console to com0?") is for serial terminalsyou don't want to change this unless you will be primarily administering this machine over a serial terminal. The default is no.

Finally, you'll be asked to set the local time zone. Type a ? (question mark) and press Enter to see the list. When you've identified the name of your time zone, type it in and press Enter. (Many of the time zones are shown as a list of prefixesfor example, US/. Type the prefix associated with your location, press Enter, and you'll be prompted for the subtime zone.)

The installer will then finish, and you'll be directed to use the halt command. Do so, and when the system is halted, eject the CD or floppy you booted from, then press Enter to reboot into OpenBSD.

Now skip down to the section on post-install configuration.

Understanding OpenBSD 4.0

2009-12-30T11:14:00.000+07:00

This section will briefly introduce you to OpenBSD and its capabilities and ideal uses.

What is OpenBSD?

OpenBSD is a Unix-like computer operating system that is widely regarded for its excellent documentation and its fanatical focus on security. In October of 1995, Theo de Raadt forked the NetBSD code and formed OpenBSD with the goal of making a free (in the context of rights, not price), highly functional operating system that concentrated on security while remaining as portable as possible. NetBSD was originally based on the last release of the academic replacement for AT&T Unix known as the Berkeley Software Distribution (4.4BSD-Lite), so OpenBSD's heritage reaches back considerably further than many other operating systems in development today.

OpenBSD is designed to be secure by default. The simplest way to explain this concept is to say that everything that could potentially be a security risk is turned off or disabled until you turn on or enable it. That means that while you may have the Apache web server installed, it is not going to start until you either run its daemon from the command line or manually add httpd (the service name that corresponds to Apache) to the system startup script. OpenSSH services will also be unavailable unless specifically enabled. Because it is secure by default, you may have to do more initial configuration with OpenBSD than with most other Unix-like operating systems, and that is why this guide existsto show you how to get an OpenBSD machine up and running quickly.

What is OpenBSD good for?

OpenBSD is frequently employed as a web, email, and FTP server, though it can just as easily run BIND to do DNS name resolution, OpenLDAP to form a directory server, and the PostgreSQL and MySQL databases, among a few others. Many people also use OpenBSD in a network appliance machine as a firewall, router, and wireless access point.

You can also make a suitable desktop operating system out of OpenBSD if you wish. The X.org server is provided on the installation media, and relatively recent editions of KDE, GNOME, Xfce, Fluxbox, Enlightenment (e16), IceWM, and other window managers are available through the Ports system (a collection of optional software that is common to all operating systems in the BSD family). A respectable selection of desktop software is also available, including Firefox, the GIMP, LyX, Evolution, G-Rip, XMMS, and many more. There is an OpenOffice.org port, but it is nonfunctional in OpenBSD 4.0.

One thing you won't get with OpenBSD is hardware 3-D acceleration for graphics cards, so while you can get a highly usable 24-bit color display in X.org with nearly any video card, you won't be able to play 3-D-accelerated games like Unreal Tournament or Tux Racer. The issue here is not X.org drivers but kernel drivers; Nvidia, AMD, and Intel refuse to make OpenBSD drivers or supply sufficient hardware documentation for OpenBSD programmers to make their own.

There are more than 3,700 programs available for OpenBSD, but through a procedure that you'll learn about in a later chapter, you can also run Linux, FreeBSD, SCO Unix, System V Release 4, HP-UX, and BSD/OS binary programs in OpenBSD with little or no performance loss.

Supported Architectures And Hardware

OpenBSD works with a diverse array of hardware on 16 different computing platforms, but for the sake of brevity, this guide will cover only the most popular and common CPU architectures: i386 (otherwise known as x86 or IA32) and AMD64 (also known as x86-64 or EM64T). Ideally you should have at least 10 GB of hard drive space (though you can get away with much less if you're building a network appliance) and at least 128 MB of RAM (but the more, the better).

The BSD operating systems have an unwarranted reputation for poor peripheral hardware support. In reality, OpenBSD natively supports more network and RAID devices than any other operating system. That means two things: first, the days of hunting for and installing third-party drivers are over; second, if a device isn't recognized out of the box by OpenBSD, there is nothing you can do to OpenBSD to get it to work. What you won't get, though, is support for chiefly desktop hardware such as high-end sound cards (though many ordinary sound cards will work), some kinds of scanners, and other things that are generally unnecessary in a server, network appliance, workstation, or work-oriented desktop machine. In other words, OpenBSD is not quite as suited to home desktop use as FreeBSD or GNU/Linux.

What about laptop systems? Most Pentium 3, Celeron, Pentium M (Centrino), Pentium 4 M, Pentium 4, Celeron M, early Turion, and some Core Duo (Centrino Duo) notebook computers have been reported to work wonderfully with OpenBSDsoftmodems and exotic hardware (like fingerprint readers, webcams, and certain Wi-Fi cards) aside. Native ACPI and wireless networking support in OpenBSD is frequently superior to that of even some the fanciest desktop GNU/Linux distributions.

If you have a mass-produced workstation or server, chances are good that everything you need to workvideo, sound, network, drive controller, PCI/AGP controllerwill be fully supported. If you have a home-built system that is more than a year old, it's probably going to be okay, too. If you just built a top-of-the-line Intel Core 2 Duo system with the latest, fanciest 802.11g wireless card, a $400 PCI Express video card, and you expect to set up a RAID-5 array with the built-in SATA fake-RAID controller on your just-released Abit motherboard...well, you're probably going to have at least a moderate amount of trouble with any operating system, but OpenBSD 4.0 probably won't work very well for you. The more your target computer resembles the latter scenario, the less pleased you'll be with OpenBSD at this time.

If you aren't sure if a critical piece of hardware will work with OpenBSD 4.0, your first stop should be the hardware compatibility list for your processor architecture:

For i386 (x86): http://www.openbsd.org/i386.html#hardware
For AMD64 (x86-64): http://www.openbsd.org/amd64.html#hardware

Once you have an idea of what hardware support is like for your computer, it's time to begin the installation process. If you're upgrading from OpenBSD 3.9, skip the following section and go directly to "Upgrading from OpenBSD 3.9."

IP addresses And Subnetting - An Overview

2009-12-26T11:58:00.000+07:00

IP addresses And Subnetting - An Overview

The following gives an introduction to IP addresses and subnetting on local area networks. If you want to find out about the advantages of using private network IP addresses on you local area network, or what subnetting can do for you, the explanation is here. You can also find the recipe for how you calculate a subnet mask, a network address and broadcast address.

However, the course also offers a fast track to getting the advantages of subnetting on local area networks without having to do all the calculations yourself.

IP addresses
Each computer on a TCP/IP based network (including the Internet) has a unique, numeric address called an IP address (IP stands for Internet Protocol), enabling data packages to be addressed to this specific recipient.

What is an IP address?
An IP address consists of four so-called octets separated by dots. The octet is a binary number of eight digits, which equals the decimal numbers from 0 to 255. To make IP addresses more easy to read and write, they are often expressed as four decimal numbers, each separated by a dot. This format is called "dotted-decimal notation".

An IP address in its binary and dotted-decimal notation

In a local area network based on TCP/IP, an IP address must be assigned to each host (computer or device) in the network. The IP address must be unique to each host. (If two hosts were given the same address, the data to these hosts would be picked up randomly by one of them – be it the intended receiver or not – causing network irregularities.)

In addition, a device that serves as router to another network, contains two or more network adaptors and belongs to two or more networks. In this case, each adaptor must be assigned a unique IP address on each network.

Part of an IP address designates the network, while another part designates the individual host. The network number field is also referred to as the ‘network prefix’.

Exactly where the network part ends and the host part begins is calculated by routers, using a so-called subnet mask as a deciphering key.
All hosts on a given network share the same network number, but each of them must have a unique host number:
The network portion of an IP address is inherited down through a network hierarchy, as illustrated below.

Subnetting

What is Subnetting?

A subnet is a segment of a network. Subnetting is a technique that allows a network administrator to divide one physical network into smaller logical networks and, thus, control the flow of traffic for security or efficiency reasons.

Dividing a network into several subnets can serve a number of purposes: to reduce network traffic by decreasing the number of broadcasts (if used in combination with a switch), to exceed the limitations in a local area network, for instance the maximum number of allowed hosts, or to enable employees to be able to dial in to the network from home, without opening the entire network up to unwanted visits from the Internet.

Subnets are created by using a so-called subnet mask to divide a single Class A, B, or C network number into smaller pieces, thus allowing an organisation to add subnets without having to obtain a new network number through an Internet service provider. Subnets can again be subnetted into sub-subnets.

Subnets were originally invented to help solve the lack of IP addresses on the Internet.

Please note: There is a fast track to getting the advantages of subnetting on local area networks without having to go through the process of calculating a subnet mask, etc.

How does Subnetting Work?
An IP address consists of a network portion and a host portion. A subnet is created by borrowing bits from the part of the IP address which normally designates the host and using them to designate one or more smaller, secondary networks (subnets) within the original network. The network prefix and subnet number in combination are called the extended network prefix (in every day talk often, somewhat confusingly, referred to as the network number!).

Subnet Mask
A 32-bit subnet mask is used as a deciphering key to determine how an IP address is to be divided into extended network prefix and host part. It is used by routers and network devices to determine where traffic should be routed to.
Like IP addresses, subnet masks consist of four numbers of 8 bits, separated by dots. They are usually written in the corresponding decimal notation.
The typical subnet masks used for Class A, B and C addresses are as follows:

All the 0’s in the subnet mask specify that this part in a corresponding IP address is the host portion, while the 1’s indicate that the corresponding bits in the IP address constitute the network portion.
The three subnet masks above set the change from network to host portion at the end of a whole octet – Class A after one octet, Class B after two octets, and Class C after three. However, a subnet masks does not have to follow the address classes, but can specifiy a host portion that is not a whole octet.
The subnet mask 255.255.255.240 (11111111.11111111.11111111.11110000) for instance, marks the breaking point four bits into the last octet.

The purpose of having subnet masks defining networks is that the technical devices that the network is build from will be able to determine if traffic should be routed out of the network or kept within it. Using a mask saves the routers from having to handle the entire 32-bit address, because they can simply look at the bits selected by the mask (and thus not worry about the host portion of the address).
Internet routers use only the network number of the destination address to route traffic to a subnetted environment. Subnetting, thus, also has the advantage that it keeps the size of the routing tables on the Internet down because Internet routers only need to know the one common network address for all the individual computers and devices on the different subnets. The route from the Internet to any subnet of a network is the same, no matter which subnet the destination host is on, namely that of the mother network. From there, the local network router(s) divides the communication out into individual subnets and to the individual hosts on these subnets.

Subnetting keeps the size of the routing tables on the Internet down, as the Internet routers only use the network number of a subnetted environment to route traffic to any of the subnets

A router within a subnetted environment uses the extended network prefix to route traffic between the individual subnets. The extended network prefix is composed of the network prefix and the subnet number.

Calculating a Network Number Using a Subnet Mask
The network number is the part of the IP address that all hosts on a network share. Network numbers are entered in routing tables and used by routers to direct traffic between networks. The network number, or extended network prefix, of an IP address is found by using the subnet mask to mask off the host portion of the IP address.
An example:
You choose the IP address 192.168.1.1 and the subnet mask 255.255.255.0. The above IP address and subnet mask written in their binary notation looks as follows:

Every bit in the IP address is compared to the corresponding bit in the subnet mask: a ‘1’ in the subnet mask indicates that the corresponding bit in the IP address is part of the network portion, while a ‘0’ in the subnet mask illustrates that the corresponding bit in the IP address is part of the host portion.
In the above example, the host portion is thus all the bits in the first three octets, which in decimal numbers is written 192.168.1.0.
Subnet masks written in binary notation always consist of a continuous string of 1’s followed by a continuous string of 0’s, e.g.

As a consequence, the host range that a subnet mask defines will always be either 2 (2¹– corresponding to a situation where only the last bit defines hosts), 4(2²– corresponding to a situation where the last two bits define hosts), 8 (2³), 16(2⁴), 32(2⁵), 64(2⁶), 128(2⁷) or 256(2⁸).
In reality, 2 must be subtracted from all the numbers of hosts above to get the actual number of IP addresses available to use for hosts, because two addresses, namely the address which has all-0’s in the host bits (this network) and the address which has all 1’s in the host bits (broadcast), can not be assigned to hosts. As a consequence, it is not possible to make a network that consists of fewer than four IP addresses (2 hosts + the broadcast and network addresses).
In the above example, based on the IP address 192.168.1.1 and the subnet mask 255.255.255.0, the network address (all host bits set to 0) was 192.168.1.0. The broadcast address for this network would be 192.168.1.255 as illustrated below.

Calculating a Broadcast Address Using a Subnet Mask
The broadcast address is the address where all the bits in the host portion are set to 1. The broadcast address is used when you want to communicate data to all the hosts on a network. Here follows an example of how it can be calculated:
In our example above, the last 8 bits were hosts. As a consequence, the broadcast address for the network 192.168.1.0 with the subnet mask 255.255.255.0 is 11000000.10101000.00000001.111111111 (host bits set to 1) or in decimal notation: 192.168.1.255

Note: If you know the IP address segment your network consists off, the lowest IP address is the network number, while the highest IP address is the broadcast address.

Prefix Length Notaion (CIDR Notation)
For the sake of convenience, prefix length notations (CIDR notation, Classless Inter-Domain Routing notation) is often used instead of writing the subnet mask. This means that the IP address above (192.168.1.1) with the subnet mask 255.255.255.0 can also be expressed as 192.168.1.1/24. The /24 indicates the network prefix length, which is equal to the number of continuous one-bits in the subnet mask.

Calculating a Subnet Mask
When subnetting a network, you first need to determine two things:

how many subnets do you need to create?
how many host addresses do you need on each net (you should always add some extra host addresses to be used for future growth).

Once you have determined the required number of subnets and hosts, the next step is to calculate a corresponding subnet mask, which will support the desired network structure.
In the following you will find two examples of how the subnetting of a Class C network can be planned and the required subnet mask calculated.

Example A:
Imagine that you are setting up a network on the network number 192.168.1.0/24. You need a local area network which is going to connect a number of workstations, servers and others devices, totalling more than 80. To allow some slack, you set the number of required hosts to be 90. Now, the calculation of the subnet mask can begin. The calculation is best understood if the numbers are looked at in their binary form (see example below).
The first step is to determine the lowest number of bits required to identify 90 hosts. Since IP addresses of hosts can only be created along binary boundaries, the number of hosts must be created in blocks of powers of two – 2 (2¹), 4 (2²), 8 (2³), 16 (2⁴) and so on. In other words, we must first determine what the lowest power is that we can lift 2 to and get a number equal to or greater than 90. Since 2⁷equals 128 and 2⁶ equals 64, we need 7 bits to designate 90 hosts. This means that the host portion of the IP address must be the last 7 bits. An IP address consists of 32 bits all in all. The network portion must thus consist of 32-7=25 bits. As every ‘1’ in a subnet mask indicates that the corresponding bit in the IP address belongs to the network portion and every ‘0’ indicates that the corresponding bit in the IP address is part of the host portion, the corresponding subnet mask must consist of a series of 25 1’s, followed by 7 0’s (as illustrated below). Written in decimal notation, the subnet mask is 255.255.255.128.
The number of subnets that can be created using this subnet mask is calculated as follows: The original network prefix was 24 bit long (192.168.1.0/24), and the extended network prefix (network prefix + subnet prefix) masked off by the subnet mask is 25 bits long. As a consequence, one bit is available to designate subnets. In other words, it is possible to create 2 (2¹) subnets of this given size using this subnet mask, should we wish to do so.

Example B:
Now pretend that through an estimation of the number of subnets and hosts that the subnet you are setting up will have to support, you have come to the conclusion that you need to define ten subnets. The largest subnet is required to support 10 hosts. You have again chosen to create the subnet on the network number 192.168.1.0/24. Now, the calculation of the subnet mask can begin.
The first step is to determine the number of bits required to define the ten subnets. Since a network address can be subnetted only along binary boundaries, subnets must be created in blocks of powers of two 2 – 2, 4, 8, 16 and so on. Thus, it is impossible to define an IP address block so that it contains exactly ten subnets. In this case, the network administrator must define a block of 16 (2⁴) and have six unused subnet addresses for future growth.
Since we need to raise 2 to the power of four (2⁴) to get 16, four bits are required to designate the sixteen subnets in the block. In this example, you are subnetting a Class C network (/24) so it will need four more bits (/28) as the extended network prefix. A 28-bit extended network prefix can be expressed in dotted-decimal notation as 255.255.255.240. This is illustrated below:

A 28-bit extended network prefix leaves 4 bits to define host addresses on each subnet. This means that each subnet with a 28-bit prefix represents a continuous block of 2⁴(16) individual IP addresses. However, since the all-0’s (‘this network’) and the all-1’s host addresses (‘broadcast’) must not be allocated, there are 14 (2⁴-2) assignable host addresses on each subnet. We needed a maximum of 10 hosts on each subnet, so the result is satisfactory.

Defining Subnet Numbers
In example B above, with the ten subnets, the subnets will be numbered 0 through to 9. The 4-bit binary representation of the decimal values 0 though 9 are: 0 (0000), 1 (0001), 2 (0010), 3 (0011), 4 (0100), 5 (0101), 6 (0110), 7 (0111), 8 (1000), 9 (1001), 10 (1010).
To find the subnet number of each subnet, place the binary representation of the subnet number, e.g. 0001, into the bits in the base network address that is used to designate the subnet (see illustration below). For example, to define subnet number 8, the network administrator places the binary representation of 8 (1000) into the 4-bits in the base network address that are used to designate the subnet.
The ten subnet numbers for the example are given below. The italicised portion of each address identifies the extended network prefix, while the bold digits identify the 4 bits representing the bits in the address that are used to designate the subnet:

An easy way to ensure that the subnets are calculated correctly is to ensure that they are all multiples of the subnet number 1 address. In this case, all subnets are multiples of 16.

The Fast Track To The Advantages of Subnetting
There is a fast track to getting the advantages of subnetting on local area networks without having to go through the process of calculating a subnet mask, etc. The fast track involves using a standard class subnet mask in combination with addresses from the IP address blocks set aside for private networks. For instance by using 192.168.0.0 to designate your local network 1, 192.168.1.0 to designate your local area network 2 and 192.168.2.0 to designate your local area network 3. The standard subnet mask to use on networks with up to 254 hosts is 255.255.255.0.
The three blocks of IP addresses which have been reserved for private networks and the corresponding standard subnet masks are:

If you do not want to use this method, a list of precalculated subnet masks together with the number of hosts available on the networks they create can be found below for easy reference.

List of Subnet Masks
The list below can be used as a fast track when subnetting. It describes the relationship between the number of host IP addresses required and the corresponding subnet mask. The example above, for instance, required subnets with 10 host addresses on each. The nearest number that is equal to or greater than 10 is 16. The subnet mask corresponding to 16 hosts is listed in the table below. It is 255.255.255.240.

Source : http://www.dialogic.com
http://www.cisco.com

Cisco 3631 Router Configuration Example

2009-12-19T11:32:00.000+07:00

Following is an example of the configuration on the Cisco 3631 router equipped with the following
modules:
• IMA-8T1 in
• NM-4A/S
• WIC-2A/S
• WIC-1DSU-56k4
Building configuration...
00:45:06: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 3095 bytes
!
! Last configuration change at 12:12:59 PDT Tue Dec 4 2001
! NVRAM config last updated at 12:12:26 PDT Tue Dec 4 2001
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cisco3631
!
enable secret 5 $1$6UL.$w0aJJ5oZmIv1zRDl1RMvo/
!
username USER password 7 01030717481C091D25
memory-size iomem 10
clock timezone PDT -8
ip subnet-zero
no ip domain-lookup
!
x29 profile linemode 2:1 3:2 15:1
x25 routing
!
chat-script test "" "ATDT\T" TIMEOUT 120 CONNECT \c
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description FAST ETHERNET INTERFACE
ip address x.x.x.x x.x.x.x
duplex auto
speed auto
!
interface Serial0/0
description WIC-1DSU-56k4
ip address x.x.x.x x.x.x.x
encapsulation ppp
!
interface Serial0/1
description WIC-2A/S
physical-layer async
no ip address
encapsulation ppp
dialer in-band
dialer rotary-group 3
dialer-group 1
async mode dedicated
no fair-queue
!
interface Serial0/2
description WIC-2A/S
physical-layer async
no ip address
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer in-band
dialer rotary-group 3
dialer-group 1
async default routing
async mode dedicated
no fair-queue
!
interface Serial1/0
description NM-4A/S
no ip address
encapsulation x25
x25 htc 8
!
interface Serial1/1
description NM-4A/S
no ip address
encapsulation x25 dce
x25 ips 256
x25 ops 256
clockrate 9600
!
interface Serial1/2
no ip address
shutdown
!
interface Serial1/3
no ip address
shutdown
!
interface ATM2/0
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/1
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/2
description ATM T1
ip address x.x.x.x x.x.x.x
no ip route-cache
no ip mroute-cache
no atm ilmi-keepalive
pvc atm71 0/71
protocol clns 47.0004.004d.0056.0000.0c00.0003.00 broadcast
protocol ip 12.0.0.2 broadcast
encapsulation aal5snap
!
scrambling-payload
impedance 120-ohm
!
interface ATM2/3
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/4
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/5
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/6
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/7
no ip address
shutdown
no atm ilmi-keepalive
no scrambling-payload
!
interface ATM2/IMA0
description ATM-IMA GROUP
ip address x.x.x.x x.x.x.x
no ip route-cache
no ip mroute-cache
no atm ilmi-keepalive
pvc atm71 0/71
protocol clns 47.0004.004d.0056.0000.0c00.0002.00 broadcast
protocol ip 12.0.0.1 broadcast
encapsulation aal5snap
!
interface Dialer3
ip address x.x.x.9 x.x.x.x
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer in-band
dialer idle-timeout 500
dialer map ip x.x.x.10 name USER modem-script test broadcast
9,5551122
dialer map ip x.x.x.10 name USER modem-script test broadcast
9,5551123
dialer hold-queue 15
dialer load-threshold 5 either
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap
ppp multilink
group-range 4 5
!
router ospf 1
redistribute connected subnets
network X.X.X.X 0.0.0.X area 3
!
!
ip classless
no ip http server
ip pim bidir-enable
!
!
!
!
!
!
!
!
!
!
!
!
snmp-server view cutdown internet included
snmp-server view cutdown at excluded
snmp-server community public view cutdown RO
snmp-server community private view cutdown RW
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
line con 0
line 3
modem InOut
transport input all
autohangup
stopbits 1
rxspeed 115200
txspeed 115200
flowcontrol hardware
line 5
modem InOut
transport input all
autohangup
stopbits 1
rxspeed 115200
txspeed 115200
flowcontrol hardware
line 6
line aux 0
password 7 08314D5D1A0E0A0516
login
modem InOut
transport input all
line vty 0 4
password 7 00141215174C04140B
login
!
end

*Get tutorials also Firewall Security Cisco Router here