ZBF and the default security zone
A customer had a hardware failure the other day and I went and replaced the router. It was an ISR4231 and was running Zone Based ...
Category Archives: Security
Cisco Web Security (CWS)
Cisco Web Security (formerly ScanSafe) is a cloud based Web Filtering solution. It works pretty well and integrates with Anyconnect so ...
AAA with Cisco Network Assistant
I’m not a huge fan of CNA or GUI’s in general, however I have a couple of customers that use it. I recently configured a ...
Secure the control plane with QoS
I was playing around with different ways to secure a device that does not support Control Plane Protection yet. I thought QoS might be ...
public / internet facing ACL
Here’s the ACL I apply to public facing interfaces. You should check my blog post on Cisco’s Support Forum for the latest ...
Public interface ACL
ip access-list extended inbound remark Allow BGP permit tcp host [BGP Neighbor] eq bgp host [Local BGP Interface] permit tcp host ...
Configure IPS on an IOS router
configure terminallogging console debugcrypto key pubkey-chain rsanamed-key realm-cisco.pub signaturekey-string30820122 300D0609 ...
Configure SSH on a router
Router(config)#hostname RouterOneRouterOne(config)#ip domain-name mydomain.comRouterOne(config)#crypto key generate rsaThe name for the ...
Viewing VPN Keys
It’s well known that to recover VPN passwords for L2L tunnels you can copy the config to a TFTP server and view the configuration ...