CCIE SEC Security Technologies
Packet Filtering
Content Filtering
URL Filtering
Authentication Technologies
Authorization technologies
Proxy Authentication
Public Key Infrastructure (PKI)
IPSec VPN
SSL VPN
Network Intrusion Prevention Systems
Host Intrusion Prevention Systems
Event Correlation
Adaptive Threat Defense (ATD)
Network Admission Control (NAC)
802.1x
Configuring IEEE 802.1x Port-Based Authentication [Cisco IOS Software Releases 12.4 T]
dot1x port-control auto
Auto: Enables dot1x, port begins in an unauthorized state. only EAPOL (eap over LAN) frames pass thru port
Force Authorize: Disables dot1x, allow all traffic thru
Fore UnAuthorize: Disables Access to LAN, user canNOT authenticate
Can't enable dot1x on TRUNK, EtherChannel, "Secure" or SPAN ports
Users without supplicant get GUEST VLAN
Restricted VLAN is for users WITH supplicant that FAIL authentication
Endpoint Security
Network Address Translation
CCIE SEC Security Technologies
Added: 2008-12-15 09:44:37
From: (Joined 2008-12-15 05:32:23)
247 views |0 downloads
CCIE SEC Security Technologies