Sequeira A. IPexpert's Network Security Operation and Troubleshooting

IPexpert, 2017. — 80 p.This book breaks specific Cisco network security technologies down on a chapter-by-chapter basis for a complete and thorough review of this broad set of topics. Each chapter begins with a review of the selected technology. Following this, the text provides an intense examination of the operation of the protocols, including key aspects of troubleshooting for the specific technology. After this, the chapter presents some of the most common issues that can result with a particular technology, and most importantly, details the simple troubleshooting tools and steps that succeed for remediation.Each chapter concludes with sample troubleshooting scenarios that provide a full walkthrough of a well-designed approach for troubleshooting each major issue. The text provides reference guides for the most popular and powerful show and debugs commands for a specific technology.Some chapters also contain sample Trouble Tickets on specific technologies. Readers may download initial configurations for these sample Trouble Tickets, or install them in a simple Graphical User Interface (GUI) on www.proctorlabs.com. These sample Trouble Tickets allow students to build confidence and expertise by actually troubleshooting issues in the network security domain presented in the chapter.AAA and Security Server Protocols.
Local Privilege Authorization.
AAA Server Authentication and Accounting with TACACS+.
AAA Server Authentication and Accounting with RADIUS.
Access Lists.
Standard ACLs.
Extended ACLs.
Time-Based ACLs.
IPv6 ACLs.
Routing Protocol Security.
RIP v2 Authentication.
EIGRP Authentication.
OSPF Authentication.
BGP Authentication.
Catalyst Security.
Storm Control.
Port Security.802.1X.
VLAN Access Maps.
DHCP Snooping.
Dynamic Arp Inspection.
IP Source Guard.
Private VLANs.
Cisco IOS and Zone-Based Firewalls.
Basic Zone-Based Firewall.
Deep Packet Inspection.
NAT.
Static NAT.
Dynamic NAT.
Static PAT.
Policy-Based NAT.
Other Security Features.
TCP Intercept.
Fragment Attacks.
Antispoofing with ACLs.
uRPF.
Telnet.
SSH.
IOS IPS.