Tag Archives: IOS

TACACS+, Linux, and Cisco Command Accounting

I recently finished configuring our medium sized corporate network devices to authenticate via Radius against windows Network Policy Server. Never being satisfied I wanted to take it a step further and account for administrative actions taken on our routers and switches. Basically, I want a record of every command typed into the network devices. Its like a key logger of sorts for your Cisco devices… I know Cisco and other vendors offer some commercial TACACS+ servers but all were outside of the budget for this project. Continue reading

Posted in Linux | Tagged , , , , | 5 Comments

Cisco Switch SPAN Port Filtering

If you have a bit of familiarity Cisco switches you may have configured a SPAN port or a monitor session in the past. A basic span port is very useful in capturing packets or passively monitoring and is a requirement for some web filtering services such as Websense. Today, I want to focus on the SPAN session from a packet capturing standpoint.

If we mirror a switch port that sees a high volume of traffic simply mirroring all of that traffic to our packet capturing port could be too much for our capture system to consume. Fortunately, there is a way to do this through access control lists on the switch itself. Continue reading

Posted in Networking | Tagged , , , , , | 4 Comments

Disable Domain Lookup on Typos

Don’t you hate when you type a command incorrectly and your Cisco IOS device seems to take forever to time out and give you back control? There is a way around this without fully disabling domain lockups! Continue reading

Posted in Networking | Tagged , , , , | Leave a comment

Routing Protocol Basics

I wanted to take the opportunity to post some core basics for those of you just getting started with Cisco and routing protocols.  The table below shows the protocol, the type of routing protocal and the default administrative distance of that protocol.

Posted in Networking | Tagged , , , | Leave a comment