Switchport capture: a good alternative to SPAN port
Do you remember the article “How to analyze traffic with SPAN feature“? The SPAN port is a feature that mirror traffic (on physical or virtual port) to a specific port. In general, behind this...
View ArticleIP traffic export: how to mirror traffic on a router
The Switched Port Analyzer (SPAN) feature, which is sometimes called port mirroring or port monitoring, selects network traffic, from a switched port, for analysis by a network analyzer. Unfotunately...
View ArticleHow to decode G.729
I have decided to write this tutorial (only for test purpose) to show how it is simple decode a G.729 stream using SPAN port, Wireshark, VoiceAge G.729 decoder and Audacity software. What is G.729?...
View ArticleHow to analyze traffic with SPAN feature
Usually when we admin a network, we need to know what are the protocols used more frequently, and why not, discover if someone are using improper P2P software; so we can use SPAN. The Switched Port...
View ArticleClik here to view.
Configure Umbrella virtual appliance
Cisco Umbrella is a Cloud driven Secure Internet Gateway that provides protection from Internet based threats, for users wherever they go. As a cloud-delivered service, Umbrella provides the visibility...
View ArticleClik here to view.
How to allow multi IP address from the same wireless client
Few days ago, my customer called me for a strange wifi problem. When two or more devices with static IP address are bridged behind a wifi client adapter, only one of these devices can reach the...
View ArticleClik here to view.
How to decapsule ERSPAN tunnel
Recently, I needed to send SPAN traffic to a network analyzer, but I had to resolve two problems: The network analyzer was installed on a virtual machine. I could not manage the virtual switch. For...
View ArticleClik here to view.
Cisco ISE 2.7 upgrade guide
One year ago, Cisco published the Cisco ISE 2.7 release. Now, this release is the suggested one. It is possible to upgrade directly from release 2.2, 2.3, 2.4 or 2.6 and upgrading process can be done...
View ArticleClik here to view.
Upgrade Catalyst 9000 series
In the past, upgrade a switch was very easy: upload the IOS file (a .bin file), change the bootvar and reload the switch; then Cisco introduced the tar file using the “archive download-sw” command. The...
View ArticleClik here to view.
How to build a console server with Raspberry
In the last years, one of my passions are raspberry and arduino projects. Recently, surfing the linkedin articles, I noticed one: build a console server with a raspberry. Nowadays, there are several...
View ArticleClik here to view.
Using NPS to manage Cisco devices
In a a previous article, I illustated how to configure Radius server on Cisco switch/router. In this tutorial, I explain how to install and configure a free radius server (Microsoft NPS) to control...
View ArticleClik here to view.
How to configure SNMP On FirePower Using FDM
The Cisco Firepower can be managed with two different solutions: Firepower Device Manager (FDM) Firepower Management Center (FMC) FDM lets you configure the basic features of the software that are most...
View ArticleClik here to view.
An overview to Cisco DUO
On October 1, 2018, Cisco announced the completion of its acquisition of Duo Security, a privately-held, unified access security and multi-factor authentication company headquartered in Ann Arbor. What...
View ArticleClik here to view.
12 high-severity bugs in ASA and Firepower
Few days ago, Cisco Psirt published twelve Cisco ASA and FTD vulnerabilities with “high” score. Eight of them can cause denial of service, while three can bypass authentication. Below the details of...
View ArticleClik here to view.
Cisco FMC user control with ISE-PIC
In the article “How to configure PassiveID in Cisco ISE“, I explained how PassiveID gathers information from the Microsoft Active Directory environment allowing user-to-IP mapping information with or...
View ArticleClik here to view.
802.1X Deployment Guide: Global configuration
In the previous article, I illustrated what are the dot1x and the benefits related to it. Just to remember that 802.1X authentication involves three parties: a supplicant, an authenticator, and an...
View ArticleClik here to view.
An overview to Cisco ISE-PIC
The Cisco ISE Passive Identity Connector aka Cisco ISE-PIC is a software designed to gather authentication data (user-ip mapping) from numerous sources (active directory, Syslog, SPAN, …) and...
View ArticleClik here to view.
How to configure PassiveID in Cisco ISE
Starting from ISE 2.2, PassiveID is a feature to gather user-to-IP mapping information with or without having 802.1X deployed. PassiveID gathers information from the Microsoft Active Directory...
View ArticleClik here to view.
802.1x: Introduction and general principles
IEEE 802.1X is an IEEE Standard for port-based Network Access Control to prevent unauthorized devices from gaining access to the network. It defines the encapsulation of the Extensible Authentication...
View ArticleClik here to view.
How to set up raid on Cisco ISE appliance
Recently, I have installed an ISE 2.6 cluster based by two SNS3615 appliances. After some months, the customer asked me to redundant each hard disk with RAID1. To accomplish this request, it is...
View Article
