About freivald

freivald · 08-30-2001

I have come across a situation where we need a clarification of AAA behavior. I found the following excerpt at URL - http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt1/scaaa.htmNote A FAIL response is significantly...

freivald · 08-23-2001

What is the rationale for the following guidelines from the SAFE architecture? (What are the security risks associated with them, and how does this configuration impede those risks?)no ip domain-lookupno cdp runno ip source-routeaaa authentication l...

freivald · 10-22-2001

permit 0.0.0.0 has no mask, so it permits just that: 0.0.0.0 (0.0.0.0 to 0.0.0.0 is the range)(permit 0.0.0.0 is equivalent to permit 0.0.0.0 0.0.0.0 - all bits must match to pass.)Note that you would only use 0.0.0.0 for filtering routes, not traff...

freivald · 09-13-2001

Hello, Chris.First, your access lists are not causing you a problem. You are blocking some ICMP types, but the ones you are working with, ping and traceroute, seem to be allowed. I am a little confused about your last message. It sounds like dynam...

freivald · 09-07-2001

Well my stab in the dark missed, and there is still a lot of darkness hanging over your problem. As I said before, it might certainly lighten up the issue if you provided the sterilized config.But, until then, let's see if these night-vision goggles...

freivald · 09-06-2001

Seeing your NAT configuration might be helpful. Since you presented this as a group of addresses, I am, at great risk, going to *assume* that you are using a pool of addresses with dynamic nat.If you have a ping packet coming in on the nat outside ...

freivald · 09-05-2001

Maybe it would be better to manage these issues one at a time with more specific questions. We all know that no ip domain-lookup saves us some misery when we fat-finger a command. But since it is a SAFE guideline, I would assume that having domain-...

Member Since	‎02-20-2001 02:32 PM
Date Last Visited	‎08-18-2017 03:50 AM
Posts	10

User Statistics

User Activity

Nuances of AAA - FAIL vs. ERROR

Rationale for SAFE router config guidelines

Re: a simple question about access-list

Re: NAT setup

Re: NAT setup

Re: NAT setup

Re: Rationale for SAFE router config guidelines