1,236 reputation
28
bio website
location
age
visits member for 2 years, 8 months
seen Oct 3 '13 at 16:25

Network and security engineer


Sep
24
awarded  Autobiographer
Jan
30
awarded  Yearling
Jan
30
awarded  Yearling
Sep
14
comment Ping with explicit next-hop selection (aka Monitoring multiple default gateways)
That sounds like a great plan. Good luck!
Sep
14
revised Ping with explicit next-hop selection (aka Monitoring multiple default gateways)
added 35 characters in body
Sep
14
answered Ping with explicit next-hop selection (aka Monitoring multiple default gateways)
Sep
12
answered 10GbE sfp+ cross over cable required? Is there such a thing?
Sep
10
comment Trunking between Cisco 1800 router and Cisco Catalyst 2960 switch
can you post the output of "show vlan" on both devices? Did you go into the vlan database and set state to active on vlan 20?
Aug
23
comment Can our firewall detect traffic sniffing inside the network?
The ASA does not have any builtin function to combat active sniffing, aka ARP spoofing and passive sniffing is not reliably detectable. You may want to read up on ARP security on your switches.
Aug
16
comment ASA 5505 Unable to launch device manager
You probably have a corrupted asdm file. Try checking the md5sum and if it's correct re-upload it to the asa.
Aug
13
answered Configure the management interface on a Cisco ASA to allow access from an existing management LAN
Aug
10
comment Configure the management interface on a Cisco ASA to allow access from an existing management LAN
The sysadmins and the ASA management interface sit on the 172.31.255.0/24 network? Are you sure the management interface is getting an IP? Can you ping your SysAdmin workstation from the ASA?
Aug
10
awarded  Organizer
Aug
10
revised SSH login to Cisco switch using Rancid times out
edited tags
Aug
8
comment multiple physical interfaces with IPs on the same subnet
if you want to bond these interfaces you're going to have to actually bond them.
Aug
1
comment One device for routing/firewall/ISP balancing/gateway
FYI the ASA does not run BGP.
Jul
19
comment Windows 8 - no internet connetction to some hosts while VPN is active
Try enabling split tunneling
Jul
19
comment Cheap way to detect client round trip times for http
Good points. You could capture just the tcp-ack flags and catch the syn-ack and ack packets.
Jul
18
comment Cheap way to detect client round trip times for http
if you're running tcpdump on the server, only capture the packets with the syn bit set and snap to 56-68 bytes. tcpdump -s 56 'tcp[tcpflags] & tcp-syn !=0'
Jul
10
revised Is there Muticast routing support on a Cisco 3750?
deleted 12 characters in body