Wednesday, September 9, 2009











June 29, 2009 I obtained my very first Cisco certification: Cisco Certified Network Associate(CCNA). I sat and passed the 48 Questions including 5labs. It took me 6 months and 28 days to complete my study since i started on 1st day of the year. I have to say that my list of study materials is what really put me in front of this exam. Also burning desire to achieved this certification..

My study materials included:
Ccna study guide by todd lammle, CCNA press book
CbT nuggets (Jeremy), Trainsignal
packet tracer 5.1

It's hard for me to do self study CCNA since i have work but i use my spare time wisely to review and practice lab exercises
I considered it as a great acheivement because i really wanted to study ccna in college (as part of elective) but due to financial problem i wasn't able to enroll it..

email sent to me by cisco:

Dear Dincy Joseph Cagayan, Congratulations on successfully completing the CCNA certification requirements. Candidates are automatically assigned a unique Cisco ID number after taking a Cisco Career Certification exam. Your Cisco ID number is CSCO11621100. This Cisco ID number will be listed on your certificate and should be referenced when registering for additional Cisco exams to prevent delay on receiving proper credit for your exam(s). To ensure you receive your CCNA certificate with the correct spelling of your name, please verify your name and address by accessing your Personal Information on the Certification Tracking System at www.cisco.com/go/certifications/login.

Iwant to start my CCNP now but other things need to prioritized first.. i need to concentrate on our Design Project(Biped Robot) which is prerequsite to finish and obtain my bachelor degree..hope all goes well

Sunday, April 12, 2009

Easy packet captures straight from the Cisco ASA firewall

Whether you are troubleshooting a difficult problem or chasing some interesting traffic, sometimes you need to pull a packet capture. Of course, you could configure and deploy a sniffer, but that is not the only solution you have at your fingertips. You can pull the packet capture directly from the Cisco ASA firewall. The Cisco ASA makes this an easy process.

There are at least two ways to configure your ASA to capture packets. If you prefer the GUI interface of the ASDM, you can use the Packet Capture Wizard tool by selecting it from the wizard menu.

However, I’ve found that if you don’t mind getting your hands dirty, so to speak, the CLI interface is the way to go. You can identify the traffic you are looking for with an ACL and then set your interface to capture based on the ACL results. Here’s an example of how easy it is to do this.

In this example, I want to capture all IP packets between a host at 192.168.80.51 and the test ASA at 192.168.81.52.

The first step is to set a quick ACL:

access-list testcap extended permit ip host 192.168.80.51 host 192.168.81.52

Then, we set up the capture using the capture command. We’ll reference our ACL (testcap) as our “interesting” traffic, and we’ll specify which interface we want to look at:

myasa# capture testcap interface inside

Admittedly, this is probably the command in its simplest form. There are many options you can configure as part of this command, including setting buffer sizes, setting a circular-buffer that overwrites itself when full, and selecting webvpn or isakmp traffic. The point is, with two quick commands, we’ve got a packet capture going! It just doesn’t get much easier than that.

A quick show capture command verifies my capture is running.

myasa# sh capture

capture testcap type raw-data interface INSIDE [Capturing - 4314 bytes]

To stop the capture, use the no form of this command.

myasa # no capture testcap

Now let’s look at the results. Here again, we have choices. We can look at the traffic via a browser directly from the ASA by opening an http link (Figure A) like the following

https://192.168.81.52/admin/capture/testcap






















While we see the traffic and much of the information, we cannot see all the detail of a regular packet capture. However, we can save this info as a libpcap file with the following command, and then open this file with Wireshark or such.

https://192.168.81.52/capture/testcap/pcap

Figure B shows this file when opened with Wireshark.














The command line also provides options for looking at your data.

myasa# show capture testcap ?

access-list Display packets matching access list

count Display of packets in capture

decode Display decode information for each packet

detail Display more information for each packet

dump Display hex dump for each packet

packet-number Display packet in capture

trace Display extended trace information for each packet

| Output modifiers



Let’s look at the first nine packets.

myasa# show capture testcap count 9


4532 packets captured

1: 13:46:31.052746 192.168.81.52.22 > 192.16
8.80.51.2057: P 1290581619:1290581687(68) ack 941116409 win 8192

2: 13:46:31.052884 192.168.80.51.2057 > 192.168.81.52.22: . ack 1290581687 win 65207

3: 13:46:38.374583 arp who-has 192.168.80.219 tell 192.168.82.51

4: 13:46:38.521655 arp who-has 192.168.80.204 tell 192.168.82.51

5: 13:46:39.803120 192.168.81.52.443 > 192.168.80.51.3968: P 787673978:787675438(1460) ack 3043311886 win 8192

6: 13:46:39.803150 192.168.81.52.443 > 192.168.80.51.3968: P 787675438:787675589(151) ack 3043311886 win 8192

7: 13:46:39.803257 192.168.81.52.443 > 192.168.80.51.3968: P 787675589:787677049(1460) ack 3043311886 win 8192

8: 13:46:39.803272 192.168.81.52.443 > 192.168.80.51.3968: P 787677049:787677200(151) ack 3043311886 win 8192

9: 13:46:39.803287 192.168.81.52.443 > 192.168.80.51.3968: P 787677200:787677883(683) ack 3043311886 win 8192

9 packets shown

We can also look at an entire packet from the CLI.

myasa# show capture testcap detail packet-number 5 dump

4532 packets captured

5: 13:46:39.803120 0022.5597.25b9 0014.3815.89fb 0x0800 1514: 192.168.81.52.443 > 192.168.80.51.3968: P [tcp sum ok] 787673978:787675438(1460) ack 30 43311886 win 8192 (ttl 255, id 54032)

0x0000 4500 05dc d310 0000 ff06 c052 c0a8 5134 E..........R..Q4

0x0010 c0a8 5033 01bb 0f80 2ef2 f37a b565 410e ..P3.......z.eA.

0x0020 5018 2000 5488 0000 1703 0106 4654 db31 P. .T.......FT.1

0x0030 b3d4 0a5b 3295 f719 d82a 8767 6b8b dae1 ...[2....*.gk...

0x0040 0a54 0ea8 c8c4 1c61 c45c e321 452e 6ab6 .T.....a.\.!E.j.

0x0050 ba80 4e94 3801 d973 b4fe 97d4 8b2f 9e77 ..N.8..s...../.w

*Only a partial result is displayed.

So save your hardware or laptop sniffers for other parts of your network. Use your ASA to gather those snippets of network traffic that you need. But remember: in general, be kind to your ASA. When possible, create specific ACLs to refine the traffic you want to capture. Monitor your ASA while capturing packets and adjust the buffers if you need to. And, as always, refer to www.cisco.com for more detailed information.

Internet broken, North America-Asia cables damaged

Interoute, the internet networks company, reports that three of the four internet sub-cables that run from Asia to North America have been damaged, according a post just published to the Times Online’s Tech Central blog.

The cables carry more than 75 percent of traffic between the Middle East, Europe and America. Clearly, if you’re reading this, it hasn’t reached you yet — but the AP is reporting mass outages in Egypt as of an hour ago.

According to Interoute via the post:

hearing that offices have lost their entire private network connectivity. As a result, users are unable to do their daily job over the internet and are turning to their mobile phones to communicate across the globe. This is having a knock on effect on the domestic voice networks, which are getting a surge of calls needing to be routed internationally. These calls need to be routed onto international gateways that pass voice traffic in longer directions around the world to avoid the cable breaks – causing more quality issues and risk more call failures, in turn causing more calls to be placed and increasing the pressure on local voice networks.

So expect to see a slowdown on mobile phone networks in those areas as a result of companies’ attempts to continue conducting business, the post reports. It also means there may be financial havoc coming as well, since trading could be compromised.

The Times Online adds that it’s a bit unusual to have this situation:

Major sub-sea cables break once a year. So companies have developed a fall-back plan. If one sub-sea cable is out, traffic is re-routed onto a second cable. In theory, a dual break, where both cables go out at once, is incredibly rare. Prior to January this year, it had not happened before.

The Bloomberg wire also has a story about the situation. Earlier this year, cable problems were reported between Africa and the Middle East.

UPDATED 5PM: The cause hasn’t yet been determined, but Interoute’s director of wholesale products, Jonathan Wright, said in a telephone interview with Bloomberg that it sometimes happens because of a ship’s anchor.

ALSO: Site Fibresystems.org has stats on the effect of nearby countries:

* Saudi Arabia: 55% out of service
* Djibouti: 71% out of service
* Egypt: 52% out of service
* United Arab Emirates: 68% out of service
* India: 82% out of service
* Lebanon: 16% out of service
* Malaysia: 42% out of service
* Maldives: 100% out of service
* Pakistan: 51% out of service
* Qatar: 73% out of service
* Syria: 36% out of service
* Taiwan: 39% out of service
* Yemen: 38% out of service
* Zambia: 62% out of service

The site also noted that “most of the B to B traffic between Europe and Asia is rerouted through the USA” and that “traffic from Europe to Algeria and Tunisia is not affected, but traffic from Europe to the Near East and Asia is interrupted to a greater or lesser extent,” as evidenced by the list above.

The site reports that the cut is located in the Mediterranean between Sicily and Tunisia, on sections linking Sicily to Egypt.

Sunday, March 8, 2009

10 tech skills you should develop during the next five years

If you want a job where you can train in a particular skill set and then never have to learn anything new, IT isn’t the field for you. But if you like to be constantly learning new things and developing new skills, you’re in the right business. In the late 80s, NetWare and IPX/SPX administration were the skills to have. Today, it’s all about TCP/IP and the Internet.

Let’s take a look at some of the skills you should be thinking about developing to keep on top of things in the tech world in the next five years.

#1: Voice over IP

Many companies and consumers are already using VoIP for telephone services due to cost and convenience factors. According to a SearchVoIP.com article in June 2007, sales of pure IP PBX systems for the first quarter of 2007 increased 76% over the first quarter of the previous year.

More and more companies are expected to go to VoIP, to either supplement or replace their traditional phone lines. And because VoIP runs on the TCP/IP network, IT administrators will in many cases be expected to take responsibility for VoIP implementation and ongoing administration.

#2: Unified communications


Along with the growing popularity of VoIP, the concept of unified communications — the convergence of different communications technologies, such as e-mail, voicemail, text messaging, and fax — looks to be the wave of the future. Users will expect to have access to all their communications from a single interface, such as their Inbox, and from a variety of devices: PCs, laptops, smart phones/PDAs, traditional phones, etc.

Convergence makes networks more complex, and IT administrators will need to develop skills for managing converged networks to compete in tomorrow’s job market.

#3: Hybrid networks

The day of the all-Windows or all-UNIX network is already past, and networks are likely to grow more, rather than less hybridized in the future. As new versions of Linux, such as Ubuntu, become friendlier for end users, we’re likely to see some organizations deploying it on the desktop for certain users. However, it’s likely that other users will continue to use Windows because of application requirements and/or personal preferences, and there may very well be Macintosh users in the mix as well, especially in graphics environments.

IT pros will no longer be able to get by with expertise in only one platform; you’ll need to be able to support and troubleshoot different operating systems.

#4: Wireless technology


Wireless networking is still in its infancy in the enterprise. Companies are (often grudgingly) establishing wireless LANs for the use of employees and visitors because it’s the most convenient way for portable computers to connect to the network, but many organizations are still wary of wireless (rightly so), particularly its security implications.

But wireless isn’t going away, and the future promises faster and more secure wireless technologies. You’ll need to know about 802.11n, a new standard now in development and estimated to be released in late 2008, which will provide for a typical throughput of 74 Mbps with a theoretical maximum data rate of 248 Mbps and a longer range than current 802.11a/b/g standards (about 70 meters, or approximately 230 feet).

#5: Remote user support



The trend is toward more employees working off-site: executives taking their laptops on the road, telecommuters working from home at least a few days per week, personnel in the field connecting back to the LAN, and so forth. The IT staff will need to be able to support these remote users while maintaining the security of the internal network.

It will be important to learn skills relating to different VPN technologies (including SSL VPN) and technologies for health monitoring and quarantining of remote clients to prevent those that don’t meet minimal criteria (antivirus installed and updated, firewall enabled, etc.) from connecting to the LAN and putting the rest of the network at risk.

#6: Mobile user support


Cell phones, Blackberries, and other ultra-portable devices are becoming ubiquitous and will likely grow more sophisticated in the future. Employees will expect to get their corporate e-mail on their phones and in some cases (such as Windows Mobile devices), to use terminal services client software to connect these small devices to the company LAN.

IT staff members will need to develop a plethora of skills to support mobile users, including expertise in configuration of mail servers and knowledge of security implications of the devices.


#7: Software as a service


Web 2.0, the next generation of the Internet, is all about SaaS, or Software as a Service. SaaS involves delivering applications over the Web, rather than installing those applications on individual users’ machines. Some IT pundits have warned that SaaS will do away with IT administrators’ jobs entirely, but the more likely scenario is that the job description will change to one with less focus on deployment and maintenance of applications and more emphasis on broader-based planning, convergence, etc.

If SaaS takes off, the job market may also shift so that more jobs are concentrated in the application provider sector rather than in companies’ in-house IT departments. In that situation, IT pros who have the skills relating to service provision and multi-tenant architecture will have a head start when it comes to getting and staying employed.

#8: Virtualization


Virtualization has been around for a while, but now, with Microsoft heavily investing in the technology with its Windows hypervisor (Viridian), which will run on Windows Server 2008, VMWare offering VMWare Server for free, and Red Hat and SuSE planning to include Xen hypervisor technology in the next versions of their server products, we can expect the concept of virtual machines to go to a whole new level in the next few years.

Managing a VM-based network environment is a skill that will be not just handy, but essential, as more and more companies look to virtualization to consolidate servers and save on hardware costs.

#9: IPv6


Widespread adoption of the next generation of the Internet Protocol (IPv6) hasn’t come about as quickly as originally predicted, in large part because technologies such as NAT prevented the depletion of available IP addresses from happening as soon as anticipated.

However, with the number of hosts on the Internet growing steadily, the larger address space will eventually be critical to further expansion. IPv6 also offers better security with IPsec, a part of the basic protocol suite. Perhaps the inevitability of the transition is best indicated by the fact that Windows Vista, Windows Server 2008, Mac OS X 10.3, and the latest versions of other operating systems have IPv6 enabled by default.

With an entirely different address notation, called CIDR, and addresses written in hexadecimal instead of the familiar four octets of decimal numbers used by IPv4, there will be a learning curve for IT administrators. The time to tune up your IPv6 skills is now, before the transition becomes mandatory.

#10: Security

Smart IT pros have been developing their security skills for the last several years, but the future will bring new security challenges and new security mechanisms. Technologies such as VoIP and mobile computing bring new security issues and challenges. Authentication methods are evolving from a password-based model to multifactor models, and biometrics are likely to become more important in the future.

As threats become more sophisticated, shifting from teenage hackers defacing Web sites “just for fun” to well financed corporate espionage agents and cyberterrorists bent on bringing down the country’s vital infrastructure by attacking the networks that run it, security skills must keep up.

In addition to proactive measures, IT pros will need to know more about computer forensics and be able to track what is happening and has happened on their networks