Sequeira A. IPexpert's Network Security Operation and Troubleshooting

IPexpert, 2017. — 80 p.This book breaks specific Cisco network security technologies down on a chapter-by-chapter basis for a
complete and thorough review of this broad set of topics. Each chapter begins with a review of the
selected technology. Following this, the text provides an intense examination of the operation of the
protocols, including key aspects of troubleshooting for the specific technology. After this, the chapter
presents some of the most common issues that can result with a particular technology, and most
importantly, details the simple troubleshooting tools and steps that succeed for remediation.
Each chapter concludes with sample troubleshooting scenarios that provide a full walkthrough of a welldesigned
approach for troubleshooting each major issue. The text provides reference guides for the
most popular and powerful show and debug commands for a specific technology.
Some chapters also contain sample Trouble Tickets on specific technologies. Readers may download
initial configurations for these sample Trouble Tickets, or install them in a simple Graphical User
Interface (GUI) on www.proctorlabs.com. These sample Trouble Tickets allow students to build
confidence and expertise by actually troubleshooting issues in the network security domain presented in
the chapter.Chapter 1: Introduction
Chapter 2: AAA and Security Server Protocols
- Local Privilege Authorization
- AAA Server Authentication and Accounting with TACACS+
- AAA Server Authentication and Accounting with RADIUS
Chapter 3: Access Lists
- Standard ACLs
- Extended ACLs
- Time-Based ACLs
- IPv6 ACLs
Chapter 4: Routing Protocol Security
- RIP v2 Authentication
- EIGRP Authentication
- OSPF Authentication
- BGP Authentication
Chapter 5: Catalyst Security
- Storm Control
- Port Security
- 802.1X
- VLAN Access Maps
- DHCP Snooping
- Dynamic Arp Inspection
- IP Source Guard
- Private VLANs
Chapter 6: Cisco IOS and Zone-Based Firewalls
- Basic Zone-Based Firewall
- Deep Packet Inspection
Chapter 7: NAT
- Static NAT
- Dynamic NAT
- Static PAT
- Policy-Based NAT
Chapter 8: Other Security Features
- TCP Intercept
- Fragment Attacks
- Antispoofing with ACLs
- uRPF
- Telnet
- SSH
- IOS IPS