CCNA Security

GUI

CSM

ACS: relate to security
TACTACS+: both authentication & authorisation
vty: Authentication
Debug by password not name
Authorise -> user Name
Default 状态使用一次
“FAIF” pass wrong
AAA new model 后才有 Customer list
ACL 的vty视所有为平级对话communcation
VPN: intergrity & confidential
ISR: integrity -> back to work
ISE<==>A
AnyConnect=> full VPN SSL=>VPN 802.1x ; posture checking
Full VPN SSL=> traffic protect/security policy/ASA/remote/headquart
Cloud-base MDM不一定安全
ARS：WIFI 接入点
RSA=> OTP(ONE TIME PASS) => Asymetric（最有效）：DH【RSA】DH的结果为Symmetric Key(用于Key Exchange)
3DES: Symetreic Key
AD: Authentication
CA:Certificate
NTP: perform
NAT: inside local -> same internal network -> relate to traffic ??
Site-Site VPN: IPsec
Shared secure Key: unsecure network
Sender’s private Key: Encrypt (digital symmetric)
Sender’s public Key: RSA Verify ID
revok: relate to time
SCEP: simplest client?? & CA’s ID
Protect Data: TLS/IPsec/SSL/HTTPS
IPsec=> ESP => Integrity(MD5) => Layer 3: RSA => Sending? & Receiving? VPN gateway
2048 the least size of ?
PKCS#10: request format from CA relate to “verify” “digital certificate”
Structure defined: Digital certificate => X.509V3
Prevent Sniffer: IPsec (Cannot get data even got access in the packet)
The first need: root’s public key
IKE1: Authenticate(PSK/RSA(request digital certificate/signature)
->> communication ->> encryption ->> hash ->> DH Group (site-site VPN: Group 2)
DH
Authenticate
IKE2: HMAC (Verify & integrity) (Site-site: PFS=>interface)

AH51/ESP50 VPN ???
ESA: Antispam
URL ⇒ WSA/CWS/Others
Policing/TCP SYN: ASA/IFS

Lagacy

MIE

SMIphing

PVLAN Isolate?
NAT

CoPP

AAA:command level
显示level:
Sh asleep as ?

peer remote ip 错误，encrypt 没收到

conceal inter address？

host level: IPS

Clientless?

IDP/ISP ? Monitor?

Blacklist/UrL router

tunnel mode?

Transparent mode?

one-firewall: self terminate?

CWS: s->security

Resilent 相关的?

Group policy?sales?

Radius 1812/1813? TACTAS++

datacenter?位置？ 正中/最上/最下？

Stateful firewall? inspect what? pass?

mobile hybrid? on-promise

HDLP?
IKE1: data integrity, encryption, reverse …?

Crpto Map site-site:: peer/transform set

Traffic

Steteful: record recovery? Layer 3/4/5 => reply traffic? 来回走
Initial： High -》》》 Low
Keychain: RIPV2
EIGRP: MD5

If packet transfer via private: Layer 3 ⇒ 使用正规PACKET 作掩体把此PACKET 放入，有正规的Destination address
WSA: AsyncOS
Adjacent Traffic : ip cef

Command

run-configure
boost-image
crypto-map: if-then/ transform set