About MrBeginner

MrBeginner · 10-12-2023

I want to capture host-to-host traffic on a Nexus 3k switch to verify its passage through the switch. As ethanalyzer only captures CPU-bound traffic, I prefer not to set up a SPAN session. Is it possible to achieve host-to-host traffic capture on an ...

MrBeginner · 11-30-2022

Hi,I just want to know about stacking. I am configured two switch 9200L series as stack.Active switch is priority 15 and standby is priority 13. I noticed that standby switch got some issue, so i swap with new swtich . I configured priority 11 on new...

MrBeginner · 11-26-2022

Hi,i would like to ask about ikev2 proposal encryption. If we are using we encryption in IKEv2 proposal but i will use strong encryption on IPSec, can IKE proposal compromise ? Phase 1 will compromise ?If Ike proposal is compromise, what kind of data...

MrBeginner · 11-22-2022

Hi,I confuse how to work NTP traffic. My network device need NTP from window server. the firewall is between my network device and Window server .I enable NTP server service on window.So i would like to know If i open NTP port 123 on firewall for the...

MrBeginner · 10-06-2022

Hi, I would like to ask about secondary IP to use GRE over IPsec. our current network using GRE over IPsec but we are apply the IPsec profile in Physical WAN interface. Now i want to create another IPsec tunnel for other branch. I will plan to create...

MrBeginner · 12-13-2022

Hi @MHM Cisco World If ipsec tunbel is established, there is no more ikev2 phase one traffic? Or ike SA will add in every ipsec packet ?

MrBeginner · 12-13-2022

Hi, Let me know if IKE SA is compromised,attacker will get what kind of information? How protect weakness encryption in phase 1,i knew that ipsece lvl ? What information will include Ni and Nr ?

MrBeginner · 12-02-2022

Hi,As per your comment, if we configure switch no and lower priority number in replacement, it will not override to existing switch ?

MrBeginner · 11-28-2022

Hi @MHM Cisco World ,do you mean the traffic (port 123) is ntp server to client ? do you mean we don't need to allow client to server traffic ( port 123 ) ?

MrBeginner · 11-27-2022

Hi @Karsten Iwen ,if we are using SHA 256 for key exchange , attacker will not get the information of ipsec or child_SA. And then If we are using PFS , key exchange will not use again same key .So attacker need to try again to get IKE SA after key ...

Member Since	‎11-14-2018 11:11 PM
Date Last Visited	‎11-29-2023 07:17 PM
Posts	372
Total Helpful Votes Received	260

User Statistics

User Activity

Packet capture on N3K switch

New switch take over active and override in stacking

IKEv2 Proposal

NTP Rule is bidirectional ?

Secondary IP for IPsec

Re: IKEv2 Proposal

Re: IKEv2 Proposal

Re: New switch take over active and override in stacking

Re: NTP Rule is bidirectional ?

Re: IKEv2 Proposal