LDAP Configuration

Scenario:  Our aim is to configure the firewall such that all users should be authenticated through the LDAP server placed in our local network.

Step 1>

Configure the basic LAN and WAN settings on the Firewall.

Unified threat management

UTM features

To use UTM features you have to purchase the UTM license and apply it to your device

We first have to configure the basic LAN and WAN settings on the Firewall.

File blocking

1.      Go to UTMàAntivirusà click on Create New

2.      Give the name and then click OK,  then again click on Create New

Passive Interface and Stuck in Active concepts in EIGRP

Stuck in Active:

When a router lost any one route (route went down) then it will start query about that down route to the neighbor routers. And the neighbor router will send query to next and so on until they get reply about that route. During this mean time all routers went too stuck in active mode.

STUB Router is used to eliminate this stuck in active problem. Stub router won’t receive query, reply to query etc.

#router eigrp 100

#eigrp stub

NOTE:

Ø  Stub router won’t send the redistributed routes from any router to other

# eigrp stub redistribute                     (won’t work)

Enhanced Interior Gateway Routing Protocol

EIGRP (Enhanced Interior Gateway Routing Protocol) it is derived from IGRP

IGRP is a Distance vector routing protocol.

·         EIGRP is a Hybrid (or) Advance distance vector routing protocol

·         The AD value of EIGRP is

·         90     (EIGRP-INTERNAL),

·          170     (EIGRP-EXTERNAL)

·         Protocol  number is 88

·         It works on RTP (Reliable transport protocol)

·         It is fast convergence

·         It works as class full/ classless (no auto summary)

·         It works on AS number  (Autonomous system)  {in order to form neighbor ship the AS number should match}

·         Fast convergence

·         100% loop Free

Policy based routing (PBR)

Scenario: Our aim is to configure the firewall such that all the traffic from 192.168.1.52 will flow from WAN2 and the remaining will flow from WAN1.

RIP (Routing Information Protocol)

Rip is a distance vector protocol

•  How far and in which direction the route presents (no:of Hops between the source and destination)

Distance vector protocol:

The name distance vector is derived from the fact that routes are advertised as vectors of (distance, direction), where distance is defined in terms of a metric and direction is defined in terms of the next-hop router. For example, "Destination A is a distance of 5 hops away, in the direction of next-hop router X." As that statement implies, each router learns routes from its neighboring routers' perspectives and then advertises the routes from its own perspective. Because each router depends on its neighbors for information, which the neighbors in turn may have learned from their neighbors, and so on, distance vector routing is sometimes facetiously referred to as "routing by rumor."

1.      In rip max hop count is 15
2.      Rip AD value is 120
3.      It runs on UDP
4.      Protocol number 520

Dynamic Routing & Administrative Distance (AD)

Dynamic Routing is again subdivided into two types:

a)      IGP – it will exchange private network information within the AS

b)      EGP – it will exchange public network information within the AS

Exterior Gateway Protocol (EGP)                       Interior Gateway Routing Protocol (IGP)

* BGP (Border Gateway Protocol)                             * RIP (Routing Information Protocol)

* EIGRP (Enhanced Interior Gateway Routing Protocol)

* OSPF (Open Shortest Path First)

                       

Administrative Distance (AD Values):

Depends on the AD value router will prefer the Routes (Thrust worthiness)