IOS-XE FlexVPN Overview
FlexVPN is a framework to configure IPSec VPNs on Cisco IOS devices; it was created to simplify the deployment of VPN solutions of all type (Site-to-Site, Remote Access etc). It…
IOS-XE Securing Management Plane
This post provides an overview of securing the management plane on Cisco routers/switches. Secure Passwords Create local passwords using a Type 8 or 9 password, by using secret keyword, which…
Securing IOS-XE Routing Protocols
Securing the routing information prevents an attacker from introducing false routing information into the network, which could be used as part of a Denial of Service (DoS) or Man-in-the-Middle (MiTM)…
Prevent BGP transit AS
By default, BGP advertises all prefixes to External BGP neighbours. When a router is dual homed to two or more ISP using BGP, the local router could become as transit…
BGP Path Selection
BGP uses several attributes or metrics for the path selection process, this post discusses the BGP attributes used on Cisco IOS-XE routers/switches for path selection and provides configurations examples of…
FTD NAT Reflection
NAT Reflection on the FTD or ASA is a technique to allow communication of internal devices to access a server(s) located in either internal network or a DMZ, but by…