CCNA Security Commands

#01 solara

As part of my study for CCNA Security I have been making a list of all the commands I need to be adept with. I thought I would share this list of commands with others who may be interested.

For simplicty the list doesn’t offer explanations and in most cases there are a variety of options that could be used with each command that are not shown. It is also not suitable for copy/paste into a router or switch. However, I think it is still a useful quick reference sheet.

#02 B Haines

You are running both RADIUS as well as TACACS+ servers in your example configuration. I was wondering what RAD/TACS you were running on those two servers? FreeRadius? And what Tac Plus? Just trying to determine what software you are using for your lab studies! Thanks!

By the way, thanks for sharing your config!

#03 solara

The previous example isn’t my config but rather just a list of commands to be familiar with and so I’m not actually running TACACS+ and RADIUS on the separate server addresses that I have shown.

I do my lab work using GNS3 with the C3745-ADVENTERPRISEK9_SNA-M IOS and currently I’m using the 90-day trial version of Cisco ACS 4.2 running on a Win2k3 VMWare box.

Just for interest I’ve attached a text file showing a basic config I’ve used for testing TACACS+. I have enabled debugs on aaa authentication and IP packets between the router and the ACS server and then attempted to logon to the router via SSH.

Cool Utility of the Week: ZipTie

Many of you know about Kiwi Software. They are one of my favorite vendors who makes very reasonably priced utilities to manage many aspects of your Cisco network. For years, I’ve been using their Kiwi CatTools product for configuration management & bulk changes…

…but now the open source community is creeping in: Welcome ZipTie! ZipTie is a project that essentially competes with Kiwi CatTools in a Freeware/Open Source version. Now, I’ve already purchased Kiwi CatTools and love it…so what makes me excited about ZipTie? The Future!!! If you take a look at the roadmap, they’ve got more and more features planned to integrate

Not to mention that Open Source projects typically move faster than corporate environments since just about anyone can write plug-ins for the system. As a matter of fact, ZipTie already has a “partner site” (www.killtest.net) dedicated to add-ons and plug-ins for different features and equipment. ZipTie currently has a quarterly release schedule, so I’m very excited to see how things progress this year.

Cisco Tips and Tricks Presentation

Just last night, I gave a presentation to the Phoenix Cisco User Group (PCUG) called Cisco Routers and Switches: Tools, Tips and Tricks You Never Knew. It was fantastic! Everyone jumped in with their own tips they found in their experience. Very cool time.

Anyhow, I thought I’d post the presentation I used in PDF format. It may give you a good flow if you’d like to do a presentation for your own, local Cisco user group in your area. Not to mention the cool tips you can grab from this :). If you have anything to add to the list, tack it on to this post! It’d be a great place to start a common thread of these things.

Click here to download the May 16th PCUG presentation in PDF format