Monday, May 6, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


Understanding Internet

Posted: 06 May 2013 03:30 AM PDT

The Internet is a computer network made up of thousands of networks worldwide. No one knows exactly how many computers are connected to the Internet. It is certain, however, that these number in the millions.  No one is in charge of the Internet. There are organizations which develop technical aspects of this network and set [...]

The post Understanding Internet appeared first on Network Educator.

Friday, May 3, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


Categories in VPN

Posted: 03 May 2013 02:58 AM PDT

There are three basic VPN categories that describe where a VPN is used.

  • Intranet
  • Extranet
  • Internet

Intranet  -  A VPN connection between same companies.  Transport mode connections within a company’s infrastructure, such as VPN between two devices (a router sending traffic to a sys log server, a PIX appliance backing up its configuration to a TFTP server, and a user on a PC using Telnet to a Catalyst 3550 switch, to name a few).  Tunnel mode connections between different locations within a company’s infrastructure, such as VPN between two offices via a private Frame Relay or ATM network

Extranet -  A VPN connection from one company to another company, such as a business partner. An example of an extranet could be a company that has outsourced its help desk functions and sets up a VPN to provide a secure connection from its corporate office to the outsourcing company.

Internet  -  An Internet VPN uses a public network as the backbone to transport VPN traffic between devices. As an example, you might use the Internet, which is a public network, to connect two sites together (L2L connection), or have telecommuters use their local ISPs to set up a VPN connection to the corporate network (remote access connections).

vpn categoriesVPN Tunnelling

Tunneling is the most significant component of VPN technology.   Tunneling is the technique of encapsulating an entire data packet in the packet of another protocol format. When a tunneled packet is routed to the destination node, it travels across the internet work through a logical path. This logical path is referred to as a tunnel.  Tunneling is analogous to sending a letter. After you write a letter, you place it in an envelope. This envelope displays the address of the recipient. When you post this letter, it is delivered to the recipient according to the address on the envelope. The recipient then needs to open the envelope to read the letter. In tunneling technology, the letter is equivalent to the original payload and the envelope represents the packet of the routable protocol in which the payload is encapsulated. The address on the envelope represents the routing information that is appended to the packet.

The post Categories in VPN appeared first on Network Educator.

Thursday, May 2, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


Site To Site VPN

Posted: 02 May 2013 03:30 AM PDT

A site-to-site VPN uses a tunnel mode connection between VPN gateways to protect traffic between two or more sites or locations.  Site-to-site connections are commonly referred to as LAN-to-LAN (L2L) connections.

site to site vpnSimple Site-to-Site Design Scenario

Above figure show an example of site to site VPN, We can deploy IPSEC tunnel between router else between concentrator. Its up to administrator who comes on these conclusion by router is lower end or higher end, who will be responsible for NAT, if pix will be responsible for NAT in this feature concentrator must support the feature IPSEC NAT- Traversal feature (IPSEC NAT-T).
 

Hub-and-Spoke Networks and Site-to-Site VPN

site to site vpn

Above figure is an example of HUB-SPOKE site to site VPN.

 

 site2site1b

Example of Corporate Extranet and Site-to-Site VPN

Site-to-site VPN deployments are also popular in corporate extranets. When an organization requires dedicated site-to-site connectivity to a peer organization or subsidiary, often, a dedicated, high-speed WAN circuit is provisioned

The post Site To Site VPN appeared first on Network Educator.

Wednesday, May 1, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


Which VPN solution should we choose ?

Posted: 01 May 2013 03:30 AM PDT

Which VPN Solution should we choose ?

 Before choosing correct VPN solution for our network, we need to ask below question to us.

  • What do I need to protect?
  • What kind of protection is required?
  • How much protection is needed?

vpn solution

First need to determine what is to be protected. Do I need to protect traffic for specific applications, such as e-mail, database access, file transfers, and others? Do I need to protect traffic for specific hosts? Do I need to protect traffic for specific network segments? If I only need to protect traffic for specific applications, I would probably first examine SSL VPN to see if there is a solution available for the particular application or applications that need to be protected. Otherwise, I would look at other VPN solution

Second, what kind of protection is necessary? Does the traffic need to be encrypted? Do I need to perform packet integrity checking? How important is it to verify a device’s identity? Once I’ve answered these questions, I can narrow in on a more specific VPN solution. For instance, if I need encryption, I can immediately rule out GRE.

vpn solutionAnd third, how much protection is needed? For example, if I require encryption to provide data confidentiality, how strong does the encryption process need to be? Can I use DES or must I use a much stronger encryption algorithm, like 3DES? For device authentication, can I use pre-shared keys or should I use digital certificates? Again, I use these questions to narrow my pick to the most appropriate VPN solution.

There are many services being offered by the ISP providers. These include Site-to-site VPN, VPN on dial up networks, VPN on broadband networks, Voice with VPN and VPN on ISDN services

The post Which VPN solution should we choose ? appeared first on Network Educator.

Tuesday, April 30, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


Best practices for Network Infrastructure Management

Posted: 30 Apr 2013 05:30 AM PDT

Managing network infrastructure is a vital part of delivering IT services to the end-users. Networks play a critical part in the service delivery and at the same time as network infrastructure are becoming more complex day by day, it is essential that the processes for the Network Infrastructure exist and function efficiently.

network infrastructureIn this thesis I will create and present processes for Network Infrastructure Management for a company having thousands of users globally spread in unstructured way. The resolution is based on IT Infrastructure Library (ITIL) Change and Configuration Management best practice guidance. Integral part of this resolution is also to launch a structure to Configuration Management Database (CMDB), which holds the information and relationships of the network infrastructure. Our focus will be on network management support processes .We will not be focusing on the technology to implementing the same.

ITIL and specifically Change and Configuration Management are presented in the thesis for background information. Several other ITIL process areas go beyond the subject but they will be discussed only in brief. We can take ITIL as the basis for creating Network Infrastructure Management processes for the case study corporation, but it will only gives us some approach for the implementation. More specific approach had to be customized as per the company's requirement. When processes are in use the network staff can become an internal provider for network support and development for the end users.

After processes are acknowledged it is easier to educate IT staff for network support and network specialists who can focus more on the improvement side of network management and proactive management rather than just exclusively react on incidents. In other words they will be able to work in pro-active mode instead of reactive mode.

Thesis also discusses the challenges which comes during the implementing the new support processes. Processes describe the required procedures of people executing Network Infrastructure Management. Key problem in implementation new processes in Network Infrastructure Management is the resistance to change from local individual ways of managing the network infrastructure to global.

Author : Antti Mattila
Source : Helsinki University of Technology
 

The post Best practices for Network Infrastructure Management appeared first on Network Educator.

What is FAQ, RFC & FYI ?

Posted: 30 Apr 2013 03:30 AM PDT

FAQ stands for Frequently Asked Questions. These are periodic postings to Usenet newsgroups that contain a wealth of information related to the topic of the newsgroup. Many FAQs are quite extensive. FAQs are available by subscribing to individual Usenet newsgroups. A Web-based collection of FAQ resources has been collected by The Internet FAQ Consortium and is available at http://www.faqs.org/.

RFC stands for Request for Comments. These are documents created by and distributed to the Internet community to help define the nuts and bolts of the Internet. They contain both technical specifications and general information.

FYI stands for For Your Information. These notes are a subset of RFCs and contain information of interest to new Internet users.

Links to indexes of all three of these information resources are available on the University Libraries Web site at below url.

http://library.albany.edu/reference/faqs.html

The post What is FAQ, RFC & FYI ? appeared first on Network Educator.

Firewall Best Practices

Posted: 30 Apr 2013 02:55 AM PDT

 

  • There should physical security for the firewall.
  • Deny all the traffic and allow only those ports, protocols and services which are required. 
  • Services & software which are not specifically required should be uninstalled or disabled.
  • Limit the number of applications that run on the firewall to let firewall perform at it best. Should avoid using services which can be configured on other dedicated machines instead of firewall. 
  • Syslog Server should be implemented in separate zone (Management zone) so that logs cannot be manipulated by malicious user.
  • Log should be monitored regularly and should be kept for long period. 
  • Alrerting should be configured. 
  • Login Password should be of minimum 8 characters using a combination of alphabets, numeric & special characters such as $  &  # This should be changed frequently. 
  • Access-list should be as much specific as it can be. 
  • Should have backup configuration in soft copy on TFTP Server as well as hard copy. There should be process for restoring the configuration directly from TFTP Server. 
  • Should have the backup of ios files of firewall and and should have process for restoring the ios . 
  • Should create different security zones for additional security. 
  • Instead of configuring telnet for remote management Secure Shell or SSH should be configured. 
  • Different privilege level should be configured for different users for limited access.
  • Should be used stateful inspection should be enabled. 
  • Application proxy should be configured for added security.  
  • Should perform security tests regularly on your firewall to find out loop holes & flaws. These should be done from every interface of the firewall. 

 

The post Firewall Best Practices appeared first on Network Educator.

Thursday, April 11, 2013

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration

NetworkEducator.com - Networking Articles, Tips, Resources, Configuration


How NMS increases network security and capacity planning

Posted: 11 Apr 2013 03:30 AM PDT

This case study describes how NMS increases network Security and capacity Planning. Cisco IT is using Cisco IOS Net flow technology internally with their Cisco Global network, a leading-edge enterprise environment that is one of the largest and most complex in the world. Cisco customers can draw on Cisco IT’s real world experience in this area to help support [...]

The post How NMS increases network security and capacity planning appeared first on Network Educator.

Thursday, February 21, 2013

Networking Articles and Tips

Networking Articles and Tips


Configuring Console Security

Posted: 21 Feb 2013 04:00 AM PST

console port is used to connect a terminal directly into the router. By default, there is no security configured or implemented to the console port and even the setup utility also does not prompt to configure security for console port. Cisco routers have many different modes of operation, one of which is user mode. User [...]