Questions tagged [security]

A general purpose tag to mark discussions of general security topics including firewalls, ACLs, AAA and numerous others related to keeping the network safe from unauthorized access.

Filter by
Sorted by
Tagged with
1
vote
2answers
74 views

Partitioning servers from the rest of the network

I'm an undergraduate looking for ways to experiment with network security techniques on my residential local area network, so much of this is going to be very new to me. Forgive me in advance for ...
1
vote
3answers
2k views

Unknown Unicast Flooding

I'm focusing currently on the "Unknown Unicast Flooding", and the proposed solutions from Cisco. I really need deep information about: Cisco Blocking Unknown Unicast Flooding (UUFB) Unknown Unicast ...
1
vote
2answers
615 views

Cisco Small Business SG300-10P and Ubiquiti Wireless APs, is is possible to enable IP Source Guard?

Problem: We have our Ubiquiti wireless APs hooked up to an SG300-10P. The user's MAC can roam from AP to AP without asking DHCP for an address. We want to have IP Source Guard enabled as a best ...
2
votes
2answers
67 views

private-vlan pimary vlan port not set to promiscuous?

What is the behavior of a port in a private-vlan pimary vlan that isn't set to promiscuous?
1
vote
2answers
128 views

Firewalling of individual ethernet ports in an organization

Is there any easy-to-manage way to firewall off individual Ethernet ports from each other on a wired network switch in a large organization, so that devices cannot see each other or anything else on ...
1
vote
0answers
60 views

Cyberoam Internet Issue

I have a security problem on my network, sometimes some computers are disconecting from internet, when i visualised log files of my cyberoam , i found in top domains some adresses not recognised like ...
1
vote
4answers
138 views

Small network security Issue [closed]

I have a router and switch in my institute. The switch is connected 15 PCs in a lab. With little effort, how can i block social sites, video buffering and torrentz.eu downloading? Please suggest a ...
1
vote
1answer
928 views

Cyberoam : Issue Web Filter Policy

I am a beginner, I want to Block a Specific Website in cyberoam I have followed this tutorial : Block a Specific Website to block a Specific Website in cyberoam. the first URL has been blocked ...
1
vote
2answers
1k views

Strange Nmap Scan Results

Sometimes I receive some odd, or inconsistent port scan results. Consider the two following excerpts, copied from my command shell: user@host:~$ nmap 10.1.1.0/24 Starting Nmap 6.47 ( http://nmap.org ...
1
vote
0answers
118 views

preventing network sniffing and eavesdropping using ping

We are using ping on the connection between aserver and the client pc, to check if there is an interruption, probably caused by sniffing or eavesdropping devices. During the ping, it will run a code ...
3
votes
1answer
59 views

How to secure data transmission over a non-secure Wi-Fi

I connect to a organization's non-secure Wi-Fi provided to guests. it is said that my data transmissions are not private and could be intercepted by others. What can I do to secure my data ...
0
votes
1answer
68 views

Is it possible to auto update router firewall filter?

Developer here, not a sysadmin. After reading over my firewall logs and seeing (assuming bot inititied) DROP entries, I'd like to script something to auto-update my firewall settings to deny their ...
1
vote
2answers
367 views

How can I access switch port protected by 802.1X thats in a seperate collision domain seperated by a T1 bridge

I want to be able to remotely access an Ethernet switch-port protected by 802.1x. The switch I want to access is at a distant site, but I have a T1 circuit that goes from that site to my office. I ...
3
votes
1answer
145 views

How to manage ACL in a routed network

I have a full mesh core network running OSPF. I use OSPF down to the "L3 Agg switches". Now I want to restrict traffic between some of the networks at our site, but how is this done when there is ...
1
vote
0answers
69 views

How to proceed for research on Network security? [closed]

It may out of scope but I have to research on Network security. I have worked on Signal Processing in Time-Frequency down during Post Graduation research and have few publication. Now my interest ...
3
votes
1answer
908 views

CCP Running issue

I already have installed CCP. but when I run it, it gives this message: Cisco configuration professional requires adobe flash player 10 or above I have Adobe Flash Player 18, and I reset the browser ...
32
votes
8answers
8k views

How can I stop an intruder plugging into an Ethernet wall socket getting access to the network?

Is MAC address filtering the most suitable option to prevent someone connecting their own device to the network by plugging into Ethernet wall sockets? What if they unplug a device and clone its MAC?
0
votes
1answer
564 views

browsing via remote access to my PC with TeamViewer. Can sites track my original IP?

I have a PC connected to the internet with IP#1. I remotely access it to connect to websites from my other PC IP#2 via teamviewer. obviously sites can see IP#1 but is it possible for them to track the ...
1
vote
0answers
76 views

How to make NMAP command steady and the fastest possible?

I want to make an IP scan using NMAP, but the operating time varies for some reason. The command can be executed in 2 seconds, and if I launch it again just after, it can take 30 seconds. This is the ...
2
votes
3answers
5k views

How to secure WiFi with user name and password?

We have internet access in both LAN and WLAN in our offices which is only used to internet access. How do we enable a password based authentication in this infrastructure so that authenticated user ...
2
votes
5answers
355 views

New to Cisco IOS, how can I improve the security of this configuration?

I'm pretty new to IOS and I've been building up a configuration file in Packet Tracer. I still have NAT to setup, as I have to account for a couple of streamers. So, what should I do to configure the ...
2
votes
1answer
573 views

Do I need to setup NAT or ACL configurations for my DMZ setup?

I'm trying to setup a network configuration in my company like the one in the picture below. A web server publicly accessible in the DMZ but insulated from the internal LAN. For the firewall I'm ...
2
votes
1answer
74 views

IPsec tunnel with IPv6 and security gateways

Silvia Hagen wrote in one of her books (ISBN:9783952294222, page 463) the following (free translation from german): Tunneling, an essential element of IPsec [...], is problematic for existing ...
1
vote
1answer
122 views

Opinion on techinique to solve arp poisoning [closed]

I have been researching about prevention of ARP spoofing in an individual's device (smart phone or laptop) in a public network. If we save the MAC address of the default gateway at the time of ...
4
votes
3answers
612 views

How can I know about if there is a smurf attack on my network?

I have been having network issues. The users report to me problems with the internet, but actually the problem is on my network. I have a sonicwall firewall and the device logs indicate posible tcp ...
15
votes
1answer
62k views

What are the benefits and cons of IGMP snooping?

Our new router is asking if we want IGMP snooping enabled. Not being familiar with this, I looked to the internet and got the following wiki description: IGMP snooping is the process of listening ...
3
votes
1answer
83 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
2
votes
2answers
2k views

How can I find which natted private IP address is communicating on Cisco ASA 5508

Normally we are facing abnormal traffic targeting specific servers. My question is How can I know which private IP address is targeted since we are using Dynamic NAT on Cisco ASA 5508 Firewall? ...
3
votes
2answers
69 views

How are computer networks protected against continous DHCPREQUEST requests?

A DHCP client can send continous DHCPREQUEST requests with a changing MAC address. In a small network it could teoretically cause problems, when a dynamic IP addresses pool is small. How are ...
1
vote
0answers
41 views

Securing WLAN using one time authentication [closed]

We have a wireless SSID for Managers which I need to secure using one time authentication. Currently we are using MAC filtering but it is insecure. So I am wondering if there is a certificate based ...
1
vote
1answer
481 views

Multiple DHCP Offers - Which is selected? [closed]

I have created a testing scenario in VMWare for a man in the middle attack using DHCP spoofing. It's for a college project. Windows 8 machine bridged to host adapter Kali linux bridged to host ...
3
votes
1answer
194 views

dmz and ip-phone on medium network

Hi I'm trying to sketch a computer network. The network include about 50 computers for employees, 20 computers for tech office, a few network printers, a wifi area and every employee has an ipPhone. ...
2
votes
1answer
2k views

Is a brute force UDP hole punch possible if both external IPs, and both internal ports are known to each client?

So I was just reading about hole punch techniques for UDP and TCP. I read that TCP hole punch can easily be accomplished if a UDP connection has already been established. So here is my theoretical ...
2
votes
1answer
331 views

How to sandbox internal IPs on the same subnet with one to one NAT

I am curious as to what technologies are employed to accomplish this with vendors that provide this service. What kind of LAN subnet restrictions can be imposed so that 2 hosts on the same internal ...
6
votes
1answer
3k views

How to view default authentication method for different lines(cty, vty, aux, tty) in IOS?

For example if I enable AAA(aaa new-model) in IOS router with default configuration and try to log in over console line(cty), then there is no authentication. However, if I try to log in over telnet(...
4
votes
2answers
2k views

Can you only allow local login when TACACS is unavailable on a Juniper?

I'm pretty sure you can do this in the Cisco world, but haven't found a way to do this on a Juniper device. Is there a way to restrict local accounts from being accessed if the router has access to ...
4
votes
1answer
871 views

IPv6 BGP peering via link-local addresses

I'm planning to run BGP with my upstream provider and advertise our global IPv6 prefixes. I'd like to use only link-local addresses between the ISP's router and my border router to make the border ...
6
votes
4answers
11k views

Toggle Switch for an Ethernet Cable

Is it possible to place a switch in one of the four/five wires of an Ethernet cable that will disable it? For my hardware project I would like the user to be able to disable the internet connection ...
4
votes
1answer
23k views

How should I diagnose why my Cisco ASA denies traffic?

I have a Cisco ASA, which is denying traffic from 172.16.1.5 to 4.2.2.2 on tcp/9000 How can I diagnose why this is happening from the Cisco ASA CLI?
2
votes
1answer
47 views

Phone signaling encryption

If we encrypt the signaling between the phones and call manager but not the voice packets, can the call still be intercepted, reassembled and listened to?
1
vote
1answer
61 views

In case of an intrusion does changing my private ip/lan ip helps?

In case of an intrusion does changing my private ip/lan ip helps ?
2
votes
1answer
884 views

OSPF with Multiple VLANs

In a Level 3 network with multiple, isolated (i.e. firewalled) VLANs, how does OSPF interact with the VLANs? Specifically: Is it standard to use multiple OSPF instances, i.e. one per VLAN? If the ...
1
vote
0answers
353 views

wpa-aes EAP-peap authentication problem

I'm trying to connect ubiquity NanoStation M2 as Station/Router mode to a hotspot that I believe has WPA/AES security and EAP-PEAP for auth. I have tested the username and password from my laptop and ...
3
votes
1answer
178 views

Does violation restrict still apply within same switch but different port

If I have a educational lab that's commonly used for multiple computers for teaching networking. I'm worried that if they remove the computer to put it in the classroom networking gear and come back ...
16
votes
5answers
22k views

Do I need to set the enable secret on Cisco device?

I'm setting up a Cisco 2901 router. I have a login password on the console line, and the vty lines are configured to only accept ssh connections with public key authentication. The auxiliary line is ...
3
votes
1answer
362 views

Per-user network authentication without mac-filtering

I am aware of MAC address filtering available on most wifi access points, but mac filtering doesn't establish a user identity, it only controls access on a device by device basis. One user may have ...
3
votes
1answer
2k views

How to verify Firewall Session Table or Stateful database entries on Cisco ZBF configured Boxes?

How to verify Firewall Session Table or Stateful database entries on Cisco Zone Based Firewall configured Boxes? what's the command to show the content/records of that table? is there any command like ...
7
votes
1answer
5k views

Configuring a password policy on Cisco IOS or NX-OS

I was wondering if it's possible at all to configure a password policy which enforces password complexity for locally defined accounts. I know it's possible for TACACS+ and RADIUS, but I need to know ...
0
votes
1answer
843 views

How does ingress filtering protect against legitimate spoof packets?

I am learning about Ingress Filtering where unauthorised packets are filtered out from entering the network. To get a better understanding of it , I found an article which said: the system ...
3
votes
1answer
1k views

Cisco ASA 8.2(5) same security routing issue

I have an ASA 5510 running 8.2(5) with the following configuration and I am having problems routing traffic between sub-interfaces at the same security level. Although not shown there are ACL's for ...