Configuration

Popular Posts Last 30 days

Site-to-Site IPSec VPN Cisco-Juniper

Image
Site-to-Site IPSec VPN Cisco-Juniper :   Scenario! Here in this LAB we have seven routers. R1, R2 and R3 routers represents Branch Router. R1 is working here as the HQ router and R2 and R3 as the Branch Router. R1 and R2 routers are from Juniper Networks and R3 router is from Cisco Inc. R4 router is working as an internet router. Other routers (R5 to R7) are working here as an end device. Task 1.       Configure Policy-based site-to-site VPN. 2.       Consider R4’s loopback address as internet route. 3.       R5 and R6 are configured as server so these servers should be reached from Branch Office too. 4.       Both Branch i.e. R2 and R3 should get internet from HQ i.e. R1 5.       In HQ router we have three zones named SERVER, INTERNET and INTRANET. SERVER Zones belongs to R5 and R6. INTERNET Zone belongs to R4 and INTRANET Zone belongs to the i...
Read more

IT Risk Assessment

1.    About IT Risk Assessment: Risk in the context of security is the likelihood of threat source exploiting a vulnerability and corresponding business impact. IT Risk Assessment is the process of identifying and assessing risk, reducing it to an acceptable level, and ensuring it remains at that level. The ultimate purpose of IT Risk Assessment is to mitigate risk to prevent security incidents and compliance failures. IT Risk Assessment is one of the best tool/method which helps to provide Holistic Security Solution to the organization. 2.    Benefits of IT Risk Assessment: Regular IT Risk Assessment and analysis offer below mentioned benefits; 1.    Understanding  Risk Profile IT Risk Assessment help  to understand the Risk from different level such as ; a. Physical Damage (Fire, Water, Vandalism, Power Loss, and Natural Disaster); b. Human Interaction (Accidental or intentional action or inaction that can disrupt productivity); c....
Read more

BGP for Enterprise Networks

Image
Around one year ago one of our customer ( A Leading “A class” Commercial Bank of Nepal) ask us to design, configure BGP on their network. I was the responsible person to handle this project. Resources. 1. They had two routers for redundancy. One router should work as a Primary and another router should work as a Secondary for fail-over.   2. They had /23 Subnets which is provided by IANA. For Confidentiality I’m going to use 193.168.0.0/23 Subnet in this blog instead of real Subnet they are currently using .   3. They were planning to connect with two ISP for BGP upstream.   4. Because of router incapability global routing table cannot be received from ISP so we had to plan accordingly.   Scenario. 1. I had to configure one Router as a Primary and another Router as a Secondary. For that I can use Multi Exit Discriminator Attribute of BGP but I had decided to use HSRP. 2. I had to Subnet to /23 network in two different /24 network because I ...
Read more