<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IP Stuff</title>
	<atom:link href="http://www.ipstuff.net/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.ipstuff.net</link>
	<description>Blog of the Network Administrator</description>
	<lastBuildDate>Wed, 03 Mar 2010 11:36:06 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>IPSec over GRE Tunnel in CISCO Routers</title>
		<link>http://www.ipstuff.net/?p=118</link>
		<comments>http://www.ipstuff.net/?p=118#comments</comments>
		<pubDate>Wed, 03 Mar 2010 11:36:06 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[VPN]]></category>
		<category><![CDATA[crypto]]></category>
		<category><![CDATA[GRE Tunnel]]></category>
		<category><![CDATA[IPSec]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=118</guid>
		<description><![CDATA[







One of the typical tasks it transforming routers table between two routers through public routers (for example via internet). So all data moving through public space has to be encrypted.  And one of the best solution it use IPSec for encryption. However one of the disadvantage of IPSec it is working only with unicast traffic. [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=118</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using Dynamic ARP Inspection in DHCP Environment</title>
		<link>http://www.ipstuff.net/?p=111</link>
		<comments>http://www.ipstuff.net/?p=111#comments</comments>
		<pubDate>Wed, 30 Dec 2009 09:32:22 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security Layer 2]]></category>
		<category><![CDATA[arp]]></category>
		<category><![CDATA[DHCP Snooping]]></category>
		<category><![CDATA[Dynamic ARP inspection]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=111</guid>
		<description><![CDATA[This is switch function intended for defense from attack with using ARP protocol. For instance, ARP-spoofing, which allow intercept traffic between hosts, that  located in one broadcast domain.
Dynamic ARP Inspection control only ARP packets and can’t directly influence on user’s traffic or other protocols.
For proper work Dynamic ARP Inspection, it is necessary to specify [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=111</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Some words about Lightweight Access Point Protocol or LWAPP</title>
		<link>http://www.ipstuff.net/?p=67</link>
		<comments>http://www.ipstuff.net/?p=67#comments</comments>
		<pubDate>Wed, 23 Dec 2009 09:48:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Wireless]]></category>
		<category><![CDATA[LWAPP]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=67</guid>
		<description><![CDATA[LWAPP is the name of a protocol that can control multiple Wi-Fi wireless access points at once. This can reduce the amount of time spent on configuring, monitoring or troubleshooting a large network. The system will also allow network administrators to closely analyze the network.
LWAPP was proposed by Airespace, as a standard protocol to provide [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=67</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configure ACS for Dynamic VLAN  Assignment</title>
		<link>http://www.ipstuff.net/?p=55</link>
		<comments>http://www.ipstuff.net/?p=55#comments</comments>
		<pubDate>Tue, 22 Dec 2009 06:42:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[VLAN]]></category>
		<category><![CDATA[ACS]]></category>
		<category><![CDATA[VLAN Assignment]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=55</guid>
		<description><![CDATA[For VLAN assignment we have to configure two ACS components group (properties of group and group mapping) and authorization.
In the navigation bar, click External      User Databases. Then, click Database Group Mappings.

Click the external user      database name for which you want to configure a group mapping.
In [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=55</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configure ACS for authentication Windows Users</title>
		<link>http://www.ipstuff.net/?p=51</link>
		<comments>http://www.ipstuff.net/?p=51#comments</comments>
		<pubDate>Tue, 22 Dec 2009 06:28:46 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[ACS]]></category>
		<category><![CDATA[Windows users]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=51</guid>
		<description><![CDATA[
In the navigation bar, click External      User Databases. Then, click Unknown User Policy.  
In order to allow unknown user      authentication, enable the Unknown User Policy:    a)  Select the Check the       following external user databases option.      b) Select the Windows [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=51</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configure ACS for authentication internal Users</title>
		<link>http://www.ipstuff.net/?p=45</link>
		<comments>http://www.ipstuff.net/?p=45#comments</comments>
		<pubDate>Tue, 22 Dec 2009 06:18:17 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[ACS]]></category>
		<category><![CDATA[internal users]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=45</guid>
		<description><![CDATA[From the ACS GUI, complete these steps:

In the navigation bar, click External      User Databases.
On the External User Databases      page, click Database Configuration. The ACS displays a list of all possible external user database types.
Click      Windows Database.     If no Windows database [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=45</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Install Cisco Secure ACS on the Windows Server</title>
		<link>http://www.ipstuff.net/?p=44</link>
		<comments>http://www.ipstuff.net/?p=44#comments</comments>
		<pubDate>Mon, 21 Dec 2009 13:19:26 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[ACS]]></category>
		<category><![CDATA[AD]]></category>

		<guid isPermaLink="false">http://www.ipstuff.net/?p=44</guid>
		<description><![CDATA[In this posts I want to briefly  tell how configurate ACS to work with Active Directory.

Install ACS on the server according instruction for the install. Do not forget during installing choose option “Also check the Windows User Database”. This server has to be include into AD.
Create user in AD, for example csadmin. On this step [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=44</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using 802.1x in Wired Windows Environment with IAS.</title>
		<link>http://www.ipstuff.net/?p=20</link>
		<comments>http://www.ipstuff.net/?p=20#comments</comments>
		<pubDate>Wed, 16 Dec 2009 08:35:17 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[802.1x]]></category>
		<category><![CDATA[Authentication]]></category>
		<category><![CDATA[EAP]]></category>
		<category><![CDATA[IAS]]></category>
		<category><![CDATA[md5]]></category>
		<category><![CDATA[PEAP]]></category>

		<guid isPermaLink="false">http://ipstuff.wordpress.com/?p=20</guid>
		<description><![CDATA[Using 802.1x protocol required RADIUS server (we choose Windows IAS), switches which support 802.1x (we use Cisco 2950) and client which support 802.1x and (our case it Windows XP SP3).
Configuring the IAS service.
Service IAS is build in system Windows server RADIUS and realizes data transmission functions between the switches and service AD. When the client [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=20</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Some commands for checking IPSec tunnels</title>
		<link>http://www.ipstuff.net/?p=16</link>
		<comments>http://www.ipstuff.net/?p=16#comments</comments>
		<pubDate>Tue, 15 Dec 2009 17:07:22 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[VPN]]></category>
		<category><![CDATA[Site-to-Site]]></category>

		<guid isPermaLink="false">http://ipstuff.wordpress.com/?p=14</guid>
		<description><![CDATA[After establishing an IPSec tunnel, you can verify and view the tunnel’s parameters by issuing the show crypto engine connections active which shows a summary crypto engine connections and show crypto session which shows the status for each active crypto session.

Also we can use show crypto isakmp sa, which shows all existing IKE Phase 1 [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=16</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configuring Site-to-Site VPN</title>
		<link>http://www.ipstuff.net/?p=6</link>
		<comments>http://www.ipstuff.net/?p=6#comments</comments>
		<pubDate>Mon, 14 Dec 2009 05:31:20 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[VPN]]></category>

		<guid isPermaLink="false">http://ipstuff.wordpress.com/?p=6</guid>
		<description><![CDATA[The CLI configuring involves five primary steps:
Step 1 &#8211; Deﬁne what parameters will be used for the IKE Phase 1 tunnel (that is, the ISAKMP tunnel). This set of parameters is called an ISAKMP policy. These parameters concern authentication (pre-share or using certification), protocol of hashing, protocol encryption, DH group and lifetime.
Step 2 &#8211; Deﬁne [...]]]></description>
		<wfw:commentRss>http://www.ipstuff.net/?feed=rss2&amp;p=6</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
