CCIE Quest

BIG Changes Announced !!! CCiE Security v4 Lab is now official here. For those who haven’t scheduled v3 lab yet, do it before November 18,2012 as there is a laundry list of  changes in equipment list & blueprint for lab exam. Cisco Secure ACS 5.X, Cisco Identity Service Engine ISE) 1.X, ISR G2 , new […]

Read more about CCIE Security v4 is now official »

In this tutorial, we will configure Cisco Secure ACS 5X to return a TACACS attribute defining the role a user should be placed into an IOS device using Role Based Access Control (RBAC).RBAC enables access restriction based on each user’s role and function within the organization.  This feature is very useful when you an ACSAdmin […]

Read more about ACS5.X : Configure Role Based Access Control (RBAC) using TACACS+ »

In this tutorial , I will discuss IEEE 802.1X Port-Based Access Control Using Authentication from Cisco Secure ACS 5.X using dynamic VLAN assignment.The basic idea behind the standard is to authenticate and authorize before a user can connect to the physical or logical port of a Layer 2 device in order to gain access to […]

Read more about ACS5.X : 802.1x Port Based Access Control via RADIUS attributes »

As you might know, Beginning Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been dramatically redesigned to allow for greater flexibility. Major advantage of this new approach is to use Real IP addresses instead of Mapped IP addresses for numerous different applications & features ( interface ACLs, MPF , botnet traffic filter […]

Read more about Understanding Cisco ASA Post-8.3 NAT Configuration »

Recently, Cisco dropped some “unofficial” hints on new CCIE Security v4 track in a Cisco Small Business post. Probably, the official annoucement will be made soon so, if you are planning to sit CCIE Security Lab, it’s time to get ready. Some tidbits from the relevant posts here : The Real Life of an Expert: […]

Read more about CCIE Security Version 4 Expected Soon! »

Generally, there are two forms of approaches that are used widely in networks today for User Credentials management i.e.  Username & Password based authentication and/or Certificate based authentication.First approach is easier to manage but if you choose easy passwords or your passwords are stolen, your identity can get compromised. 2nd approach requires little bit of […]

Read more about Two factor authentication for Cisco VPN Solutions »