# data[].attributes.attachment_link.title
Wi-Fi 8 is the first wireless upgrade in years that isn’t chasing speed, and home networks need it

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.attachment_link.readable_text
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free.

OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS). It has a powerful correlation and analysis engine, integrating log analysis, file integrity checking, Windows registry monitoring, centralized policy enforcement, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, MacOS, Solaris and Windows.
Visit OSSEC project website >>

# data[].attributes.attachment_link.title
Wazuh · Open Source Host and Endpoint Security

# data[].attributes.attachment_link.description
OSSEC is an open source project started by Daniel Cid and was made public back in 2004. In 2009 Trend Micro acquired the OSSEC project keeping it open source and free. OSSEC is a scalable, multi-platform, open source Host-based Intrusion Detection System (HIDS).

# data[].attributes.body
This one free tool backs up my files to multiple cloud services at once

# data[].attributes.attachment_link.title
This one free tool backs up my files to multiple cloud services at once

# data[].attributes.attachment_link.description
This tool has the official cloud apps beat.

# data[].attributes.attachment_link.readable_text
#3 Blueprint Change: Wendell's Top 5 New Topics

You can, and should, look for Cisco's commentary that details all the updates to the blueprint. You want to look for the "CCNA 2.0 Exam Release Notes". To get there:

1. Navigate to www.cisco.com/go/certroadmap

2. Scroll down, and choose "CCNA" from the tabs for the different certification tracks.

3. Look around for the CCNA 2.0 Exam Release Notes and click.

So rather than repeat the same information, I'm going to talk about my top 5 new topics and explain why. Really, it's top 7 as you'll see. But it's a top N list. Here we go! Counting down from#5 to #1:

Favorite #5: Diagnose DNS Issues

First, the next figure shows the text of the exam topic - new for CCNA V2.0:

Figure 9: CCNA 2.0 Exam Topic: Diagnose DNS

In the V1.1 blueprint, DNS has only a minor mention, with "Explain the role of... DNS". Blueprint V2.0 goes into detail on the six primary DNS record types and the need to "Diagnose issues" with them. What does that mean? Diagnose means to determine the root cause of a problem, but does not then require you to fix the problem. With DNS, that might mean you would analyze symptoms and behavior, including command output, and decide what is wrong with the DNS configuration - without needing to configure the DNS to fix the problem.

Why a top 5 topic? It's the real world. Cisco wanted to make CCNA more relevant to hiring managers. DNS and DHCP are used pervasively, and knowing how to think through problems (diagnose) is a key skill.

Favorite #4: Troubleshoot DHCP (DHCPv4)

This next topic makes my top 5 list for the same kinds of reasons. Most client devices use DHCP (DHCPv4) to lease their IPv4 address. To be a useful networker, you need to know DHCPv4, recognize symptoms that could point to a DHCP problem, identify the problem, and fix it. Cisco gave us this exam topic for V2.0:

Figure 10: CCNA 2.0 Exam Topic: Troubleshoot DHCP

DHCP client and DHCP relay were in the V1.1 blueprint, but the exam topics asked us to configure and verify those features. The new exam topic adds DHCP server and bumps the level to troubleshooting. I chose this one as top 5 mainly because of the bump to troubleshooting. You really should be able to look at clients and tell if they have leased an address and learned other settings. And if not, you should recognize from host command output what the likely root causes are of the DHCP problem - and you should be able to fix those, if possible, on the host or the router.

The exam topic also adds "DHCP server... on IOS devices". In a production network, you're not likely to use the DHCP server feature on a router. However, it's great for learning DHCP! Learn it, lab it, configure it wrong, see the symptoms, and get a better idea of how to troubleshoot DHCP problems.

Favorite #3: Switch Access Port Config - For Various Endpoints (Edge-hosts)

My next choice in the top 5 almost got the #1 spot because it's just so different than most other CCNA exam topics. It has two lists in it, but without lettered items for either list. It just looks different and interesting. It also collects a large number of configuration topics together, while also adding some context and richness to the real-world deployment scenarios CCNAs might need to be ready for. It's just got a lot of layers.

Figure 11: CCNA 2.0 Exam Topic: Configure... Access Ports... Various Features... Various Endpoints

Consider the first list. It details technologies that you can configure on a LAN switch. It includes access VLANs, VLAN trunking, and EtherChannels (all in the V1.1 blueprint), plus Power-over-Ethernet (PoE) config, added as a new config topic for the V2.0 blueprint.

Additionally, and not in the V1.1 blueprint, the second list describes types of "edge-hosts" or endpoint devices that might connect to the access switch. Depending on the type of device, you might expect to use different settings for the features from the first list. From the wording of this exam topic, I think you need to know which endpoints typically need which features.

So, you need to be able to look at a diagram, identify a particular type of endpoint connected to a switch, determine which features should be configured, and finally configure them.

Favorite #2: Use Ansible

CCNA is full of exam topics with the "configure and verify" verbs. The expectation is that you do that using the CLI. But did you know you could also use an Infrastructure-as-Code (IAC) tool like Ansible to control and manage the device configurations as well? As it turns out, among the available tools, Ansible wins the popularity contest for use in Cisco networks. It's practical, and people use it in the real world, so Cisco bumped the performance level up to "use", so you need some skills in using Ansible for the exam.

Figure 12: CCNA 2.0 Exam Topic: Use Ansible

Cisco wants the CCNA certification to demonstrate the candidate is job-ready. Knowing at least the basics of how to use Ansible is a positive step in the right direction.

Favorite #1: Describe Network Management Approaches

Really, Wendell? If you were just reading the blueprint, would you think I would pick the exam topic that begins "Describe network management approaches..." as my #1 favorite new CCNA 2.0 exam topic? I bet you wouldn't. But here it is.

Figure 13: CCNA 2.0 Exam Topic: Describe Network Management Approaches

So, what is it? It's a describe-level topic. But it lists five different approaches to how to operate and manage a modern enterprise network. Let me define each of those approaches briefly:

1. Device-Based: CLI, from SSH - laborious, traditional, old, comfortable, not scalable.

2. Automation-Based: Automate what happens at the CLI. Python, REST APIs, data encoding (JSON).

3. Infrastructure-as-Code: Create a centralized source of truth, use config management tools (Ansible) to manage/monitor device configs

4. Cloud-Based: Config managed via a cloud-hosted web portal (with available REST API). An engineer does not do individual device management.

5. Controller-Based: Re-imagined system, interactions (GUI and API) with controller (software), which loads config into network devices.

I love this new exam topic. It raises important topics in today's networking world. But it keeps the level pretty low. It gives you a requirement to learn the big ideas of each, enough so you can answer a general interview question. But most importantly, preparing for this topic will make you pause and think. It will require you to step back, ponder many of the topics you've learned in CCNA, and categorize them based on these approaches.

We'll be locating our coverage of this topic late in the Volume 2 book, using it as a sort of capstone to the entire study process. I'm really looking forward to what co-author Jason does with this content!

# data[].attributes.attachment_link.description
Cisco Announces CCNA Version 2.0! CCNA V2.0: Plans for the Cisco Press Official Cert Guides

# data[].attributes.attachment_link.description
Prepare for the Cisco 200-301 CCNA exam with this official guide. Learn network services, security, infrastructure, connectivity, operations, management, and certification essentials.

# data[].attributes.attachment_link.readable_text
Snort is the foremost Open Source Intrusion Prevention System (IPS) in the world. Snort IPS uses a series of rules that help define malicious network activity and uses those rules to find packets that match against them and generates alerts for users.

Snort can be deployed inline to stop these packets, as well. Snort has three primary uses: As a packet sniffer like tcpdump, as a packet logger - which is useful for network traffic debugging, or it can be used as a full-blown network intrusion prevention system. Snort can be downloaded and configured for personal and business use alike.

What are my options for buying and using Snort?

Once downloaded and configured, Snort rules are distributed in two sets: The "Community Ruleset" and the "Snort Subscriber Ruleset."

The Snort Subscriber Ruleset is developed, tested, and approved by Cisco Talos. Subscribers to the Snort Subscriber Ruleset will receive the ruleset in real-time as they are released to Cisco customers. You can download the rules and deploy them in your network through the Snort.org website. The Community Ruleset is developed by the Snort community and QAed by Cisco Talos. It is freely available to all users.

For more information about Snort Subscriber Rulesets available for purchase, please visit the Snort product page.

# data[].attributes.attachment_link.title
Snort - Network Intrusion Detection & Prevention System

# data[].attributes.attachment_link.description
Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows to detect emerging threats.

# data[].attributes.attachment_link.description
Wireshark: The world's most popular network protocol analyzer

# data[].attributes.attachment_link.description
A 3D WebGL map of Hurricane Electric's backbone network, global submarine cables and global data-centers.

# data[].attributes.attachment_link.title
25 Best Intrusion Detection & Prevention Systems (IDS &IPS) In 2026

# data[].attributes.attachment_link.description
Best Intrusion Detection & Prevention Systems: 1. Snort 2. BluVector Cortex 3. Cynet 4. Check Point Quantum IPS 5. Cisco NGIPS 6. Fail2Ban

# data[].attributes.attachment_link.title
CyberScope Edge Network Vulnerability Scanner

# data[].attributes.attachment_link.description
The CyberScope offers comprehensive cybersecurity risk assessment, analysis and reporting for the site access layer in a single, powerful, portable tool.

# data[].attributes.attachment_link.title
IPCisco | Cisco Networking Academy | Network Certification | Learn

# data[].attributes.attachment_link.description
IPCisco is a Network Certification Blog for Network Protocols, Router Configurations and Cisco, Nokia , Juniper, Huawei Certifications.

# data[].attributes.attachment_link.title
517K views · 981 reactions | Repost | BD Tech Tips

# data[].attributes.attachment_link.title
TCP vs UDP — Do you know the difference? 🔹 TCP: Reliable, ordered, connection-based communication 🔹 UDP: Fast, lightweight, connectionless communication 👉 💬 Question:
Which protocol is used for DNS — TCP or UDP? Comment your answer below 👇 #CCNA #Networking #TCP #UDP #NetworkEngineer #Cisco #LearnNetworking #NetworkingWithIsrar | Networking with Israr | Facebook

# data[].attributes.attachment_link.description
TCP vs UDP — Do you know the difference? 🔹 TCP: Reliable, ordered, connection-based communication 🔹 UDP: Fast, lightweight, connectionless communication 👉 💬 Question:
Which protocol is used for…

# data[].attributes.attachment_link.title
109K views · 953 reactions | What is subnetting? #networkingwithisrar #CCNA #networking #networkengineer #Subnetting #LearnNetworking | Networking with Israr

# data[].attributes.attachment_link.description
Learn cybersecurity the easy way — analyze cyber mysteries, identify intrusions, build career relevant skills, have fun.

# data[].attributes.attachment_link.description
Consumers and retailers will be on hackers' radars this holiday season. Here are top tips from cybersecurity experts on how to stay safe this holiday season.

# data[].attributes.attachment_link.title
Install PowerShell on Windows - PowerShell

# data[].attributes.attachment_link.readable_text
Everything a pro needs, all in one suite - that's Microsoft Office 2021 Professional.

Microsoft Office 2021 Professional is the perfect choice for any professional who needs to handle data and documents. It comes with many new features that will make you more productive in every stage of development, whether it's processing paperwork or creating presentations from scratch - whatever your needs are!

The tools within this suite have been redesigned so they can be used equally by designers looking for inspiration on how best to present their work, as well as data analysts working with large sets of data for their company reports; there really isn't anything left out when using these applications.

The ribbon-based user interface provides quick access to all its available features, tools, and customizations. Users can easily customize font, layout, indentation size of type in documents as well as many other details. Make more aesthetically pleasing documents without sacrificing functionality for work-related needs like formatting emails or creating presentations.

Lifetime license for MS Word, Excel, PowerPoint, Outlook, Teams, OneNote, Publisher, & Access

One-time purchase installed on 1 Windows PC for use at home or work

Instant Delivery & Download - access your software license keys and download links instantly

Free customer service - only the best support!

IMPORTANT: This licensing type will be connected with your actual device, NOT your Microsoft account.
Office Professional 2021 includes: The product you are purchasing is NOT MICROSOFT 365. Please read the product details.
Redemption deadline: redeem your code within 7 days of purchase

Microsoft Office Word

Microsoft Office Excel

Microsoft Office PowerPoint

Microsoft Office Outlook

Microsoft Office Teams (Free version only)

Microsoft Office OneNote

Microsoft Office Publisher

Microsoft Office Access

# data[].attributes.attachment_link.title
Microsoft Office Professional 2021 for Windows: Lifetime License | StackSocial

# data[].attributes.attachment_link.description
Say hello to a lifetime of productivity! Secure all the MS Office 2021 apps with just one smart purchase from a Microsoft-verified partner.

# data[].attributes.attachment_link.title
Amazon’s Outage Root Cause, $581M Loss Potential And ‘Apology:’ 5 Key AWS Outage Takeaways

# data[].attributes.attachment_link.description
AWS outage caused by a DNS automated systems error may result in a $581 million loss for Amazon as the cloud and AI company make changes to prevent similar failures.

# data[].attributes.attachment_link.title
How to Factory Reset HP Laptop (All Methods)

# data[].attributes.attachment_link.description
Learn how to factory reset an HP laptop to restore default settings. Step-by-step guide to erase all data and reinstall Windows easily.

# data[].attributes.attachment_link.readable_text
Book Description

Mastering Enterprise Networks, is a comprehensive guide to building, defending, and attacking enterprise networks. It covers a wide range of topics, from network fundamentals to advanced security concepts. The book is well-organized and easy to follow, making it a valuable resource for both beginners and experienced network professionals.

One of the strengths of this book is its focus on hands-on learning. The book includes 50 chapters of labs that allow readers to practice the concepts they have learned. These labs are a great way to reinforce your understanding of enterprise networks while developing practical skills.

This book covers security from multiple perspectives. The book helps anyone learn a variety of security threats and countermeasures, including firewalls, intrusion detection systems, and vulnerability scanning. This information is essential for anyone who wants to protect their enterprise network from cyberattacks.

Each lab was tested by novices and experienced cyber workers. The youngest tester was only 12 years old and many labs were tested by people with no cyber experience at all. Each tester's learning experience was incorporated into each lab to reflect how n00bs learned the material so that everyone could learn from these labs.

Overall, Mastering Enterprise Networks is an excellent resource for anyone who wants to learn more about enterprise networks. The book is comprehensive, well-written, and easy to follow. The hands-on labs are a great way to reinforce your understanding of the concepts, and the coverage of security is essential for anyone who wants to protect their network.

Send comments or corrections to prmaster@erau.edu

# data[].attributes.attachment_link.title
Mastering Enterprise Networks (2nd Ed) - Simple Book Publishing

# data[].attributes.attachment_link.description
Mastering Enterprise Networks - Step-by-step labs to create, attack and defend enterprise networks

# data[].attributes.attachment_link.title
Microsoft Stops 200 Million Windows Updates—Do Not Lose All Your Data

# data[].attributes.attachment_link.description
Is your PC blocked from a Windows update — here’s what you need to do now.

# data[].attributes.attachment_link.title
682K views · 14K reactions | Inside Elon Musk’s Colossus Supercomputer! | The Tesla Space

# data[].attributes.attachment_link.description
Inside Elon Musk’s Colossus Supercomputer!.

# data[].attributes.attachment_link.title
39K views · 1.2K reactions | Is Elon Musk a superhuman? Source: Startup Archive #trendingnow #viralnow #elonmusk #elon #facebookreels #facebookpost #facebookpage #usareels #elonmuskreels | Iwealthyfox

# data[].attributes.attachment_link.description
Is Elon Musk a superhuman? Source: Startup Archive #trendingnow #viralnow #elonmusk #elon #facebookreels #facebookpost #facebookpage #usareels #elonmuskreels.

# data[].attributes.attachment_link.description
With an easy-to-use HTML5 UI and a comprehensive API, Cisco Modeling Labs makes it fun to design, test, troubleshoot, and learn.

# data[].attributes.body
In 1975, a quiet, brilliant man named Steve Wozniak was working as a calculator engineer at Hewlett-Packard (HP).

Wozniak wasn’t just another employee.

He was grateful.

HP had given him his start.

Trained him. Paid his bills.

He believed in the company.

But Wozniak had a vision that was bigger than calculators.

Working late nights at HP, he built something radical.

a computer small enough and cheap enough for ordinary people to own.

It was called the Apple I. Inspired by his friend a one Steve Jobs

His dream? To put computing power in the hands of everyday people.

And because he was a loyal employee

when he had built something radical

something that could change the world

He offered it to HP the company that gave him life.

But when he pitched his ideas to HP,

they laughed.

“A toy.”

“Useless.”

“Why would the average person need a computer?”

HP executives dismissed him not once… not twice… but five times.

After the fifth rejection, his close friend, Steve Jobs, had enough.

“Let’s do it ourselves,” Jobs said.

That moment was the birth of Apple and the deàth of HP’s chance to lead a trillion-dollar industry.

So Steve Wozniak quit his job at HP to start Apple with his friend, Steve Jobs.

Before Apple, computers were for corporations and universities.

Big.

Expensive.

Complicated.

They filled rooms.

Cost tens of thousands of dollars.

Only experts could use them.

Regular people couldn’t touch them

let alone own one.

But Steve Wozniak dream.

A dream to make computers personal.

To bring them into people’s hands and homes.

Kept Him awake

By day, he worked at Hewlett-Packard (HP) as an engineer.

By night, he soldered and sketched in secret.

Building something incredible:

A compact, affordable machine called the Apple

I on a wooden board.

His friend Steve Jobs saw it and saw the future.

Jobs wasn’t the engineer.

He was the energy.

The salesman.

The believer.

He didn’t just see a circuit board.

He saw a product.

He saw possibility.

Something HP executives couldn’t see

So he made a bold pitch:

“Let’s sell it.

Let’s start a company. Let’s call it… Apple.”

Why Apple?

Because it was simple.

Jobs had spent time on a fruit farm.

And because, in his words, it sounded “fun, spirited, and not intimidating.”

So, the two of them sold what little they had

Wozniak sold his calculator,

Jobs sold his Volkswagen van, and they raised $1,300.

And got to work.

They assembled the first 50 computers made by Steve Wozniak in the Jobs family garage.

Jobs the salesman walked into a local computer store

The Byte Shop and convinced them to buy all 50…

before they were even built.

And they bought all.

That was the shift:

A passion project became a product.

A product became a company.

Apple Computer Inc. was born on April 1, 1976.

Suddenly, a hobby became a hustle.

But they weren’t done.

Wozniak built the Apple II a sleek, plastic-cased machine with color graphics, a keyboard, and expandable storage.

This wasn’t just for hobbyists anymore.

It was for schools, homes, offices, kids.

The Apple II didn’t just sell.

It exploded.

And in 1980, Apple went public at $1.2 billion.

Meanwhile, HP, the company that rejected

Wozniak five times, was still building calculators and hardware peripherals.

They didn’t just miss a product.

They missed the personal computer revolution.

They missed the trillion-dollar wave that reshaped the planet.

What can we learn from Steve Wozniak, Steve Jobs, and HP?

When you have a big idea, don’t wait for approval especially from those who cannot see the future you envision.

Steve Wozniak had a dream. Steve Jobs had the guts.

HP had the chance.

But they didn’t just reject the Apple I.

They rejected the future not once, but five times.

And where did that leave them?

Today, HP is still building hardware, printers, computers, parts with an estimated market cap of $28 billion.

Meanwhile, Apple is shaping culture, designing the future, and commanding a market cap of over $3 trillion.

All because two friends chose to believe in their dream rather than settle for permission.

Here are the lessons:

– Don’t beg for vision from the blind.

– If they reject your idea, it may not mean it’s

bad it may mean it’s too early for them.

– Visionaries don’t wait. They build.

– Sometimes, rejection is just redirection

to something greater.

– Never underestimate a garage, a dream, and two friends with conviction.

Somewhere right now, someone is being told “no.” I hope they read this story and push on..

#TechStory

#Apple

#HP

#SteveWozniak

#SteveJobs

Ifeanyi Christopher ©️

# data[].attributes.body
5 Fascinating Facts About ENIAC — The World’s First Computer (1945):

🖥️ Massive in size – ENIAC stretched 30 meters long and weighed 27 tons. It filled an entire room!

💾 No internal storage – It had no hard drive. Data was fed in using punch cards, and programming was done by physically rewiring its circuits.

⚡ Energy-hungry – It consumed a staggering 150 kilowatts of electricity—enough to power a small neighborhood.

📱 Slower than a smartphone – ENIAC could do 5,000 additions per second, while today’s smartphones handle billions. Yet, it was groundbreaking in its time.

🎉 End of an era – ENIAC was shut down in 1955, marking the close of the first true chapter in digital computing.

From punch cards to pocket-sized supercomputers… what a journey! 🚀

#TechHistory #ENIAC

~Weird Pictures and News

# data[].attributes.headline
Without This Man, Google Would Never Have Worked.

# data[].attributes.subject
Without This Man, Google Would Never Have Worked.

# data[].attributes.body
Without This Man, Google Would Never Have Worked.

His name is not on a Forbes list.

He didn’t found a trillion-dollar company.

And he never wore a turtleneck on a keynote stage.

But every time you type, search, copy, paste, or click, you are using something he created.

Without this man, Google would never have worked.

In fact, most of modern computing — as we know it — wouldn’t exist.

His name is Larry Tesler.

And though you’ve likely never heard of him…

Your entire digital life runs on his ideas.

Let me take you back.

In the 1960s, computers were monstrous machines locked away in labs — built for engineers, scientists, and military research.

They were confusing. Cold. Command-line based.

If you wanted to use one, you had to memorize strange codes, wait for long responses, and operate in a system that made you feel small and stupid.

Back then, computers weren’t designed for humans.

They were designed for machines.

But Larry Tesler didn’t agree.

He believed that computing shouldn’t be difficult.

He believed that technology should work for people — not the other way around.

And so, for decades, he waged a quiet revolution.

Not with speeches or startups…

But with code.

At Xerox PARC, in the 1970s, Larry Tesler helped develop some of the most important ideas in computer history:

He championed the concept of a graphical user interface — a system where you could click, scroll, and interact with icons rather than type in commands.

He invented the cut, copy, and paste functions — giving users the power to move digital content with simple clicks.

(Yes. The same CTRL+C / CTRL+V you use every single day.)

He introduced the principle of "modeless computing" — a vision that computers should be intuitive and simple, without forcing users to think like machines.

These small-seeming ideas are the reason your smartphone is easy to use.

They are why an 8-year-old and an 80-year-old can both browse the internet without a manual.

And they laid the foundation for the modern user-friendly interface.

Now, here’s the twist…

Tesler didn’t build empires.

He didn’t sell stock or chase unicorn valuations.

He just kept building. Quietly. Brilliantly.

He worked at Apple, where he helped Steve Jobs integrate user-friendly features into the first Macintosh.

He also worked at Amazon and Yahoo!, helping shape their user experiences in the early 2000s.

But his name never went viral.

His face never became iconic.

He never tried to be famous.

And when he passed away in 2020, most of the world didn’t even notice.

But here’s what makes him unforgettable:

When you copy a sentence…

Paste a link…

Use your phone…

Search Google…

Switch between apps…

Use drag-and-drop…

You're using Tesler’s fingerprints.

Every time. Every day. Everywhere.

As I complete this article and read through again, I personally noted as follows:

Some people build things.

Others shape how the world uses them.

Larry Tesler did both — quietly.

He didn’t chase power. He chased simplicity.

He didn’t want the spotlight. He wanted usability.

And in doing so, he became the invisible architect of modern computing.

So the next time you CTRL+C or CTRL+V…

Pause.

And whisper a thank you to the man who believed technology should feel human.

#TechHeroes

#LarryTesler

#CopyPasteKing

#UnsungInnovators

#UserFirst

#DigitalLegacy

Kachi Ogbonna

# data[].attributes.attachment_link.title
DHC | History, Entertainment & News on Instagram: "In 1995, Bill Gates appeared on The Late Show with David Letterman to explain this strange new thing called “the internet.”
Most people didn’t get it. Letterman joked, “Why would I want to read baseball scores on a computer when I have the radio?”

👉 Join the community @dailyhistoryclips for iconic and famous footage that shaped our history! 🌍 

#InternetHistory #BillGates #DavidLetterman #90sTech #Throwback #Internet #HistoryClip #TechRevolution #BeforeItWasCool"

# data[].attributes.attachment_link.description
132K likes, 1,957 comments - dailyhistoryclips on July 6, 2025: "In 1995, Bill Gates appeared on The Late Show with David Letterman to explain this strange new thing called “the internet.”
Most people didn’t get it. Letterman joked, “Why would I want to read baseball scores on a computer when I have the radio?”

👉 Join the community @dailyhistoryclips for iconic and famous footage that shaped our history! 🌍 

#InternetHistory #BillGates #DavidLetterman #90sTech #Throwback #Internet #HistoryClip #TechRevolution #BeforeItWasCool". 

# data[].attributes.attachment_link.embed_code
View this post on Instagram

A post shared by DHC | History, Entertainment & News (@dailyhistoryclips)

# data[].attributes.attachment_link.title
Kolten Lindsey on Instagram: "“What is internet anyway?” 🤣 In his defense, violence@nbc is pretty funny. Lmao
.
.
.
#80s #90s #nostalgia #nostalgic #xennial #millennial #millennials #genx #classic #throwback #80skid #90skid #90skids #memory #memories #childhood #1980s #1990s #backintheday #internet #tech #news #todayshow #90smemories #90snostalgia #pc #computers #computer"

# data[].attributes.attachment_link.description
26K likes, 1,112 comments - xennial.kid on May 2, 2025: "“What is internet anyway?” 🤣 In his defense, violence@nbc is pretty funny. Lmao
.
.
.
#80s #90s #nostalgia #nostalgic #xennial #millennial #millennials #genx #classic #throwback #80skid #90skid #90skids #memory #memories #childhood #1980s #1990s #backintheday #internet #tech #news #todayshow #90smemories #90snostalgia #pc #computers #computer". 

# data[].attributes.attachment_link.embed_code
View this post on Instagram

A post shared by Kolten Lindsey (@xennial.kid)

# data[].attributes.headline
🌐 Network Devices Explained: The Core Components of Every Network 🧠🔌

# data[].attributes.subject
🌐 Network Devices Explained: The Core Components of Every Network 🧠🔌

# data[].attributes.body
Whether you're a network engineer, cybersecurity analyst, or just curious about how the internet works, understanding these devices is foundational to everything in IT infrastructure 🛠️💻

🧩 1. Router

🔁 Connects different networks (e.g. home to internet)

📡 Routes data packets to their destination

🛡️ Often includes built-in firewall/NAT features

🔁 2. Switch

🔗 Connects devices within the same network (LAN)

🚦 Operates at Layer 2 (Data Link) of the OSI model

⚙️ Smart switches support VLANs, QoS, and monitoring

🌐 3. Access Point (AP)

📶 Extends wireless connectivity within a network

🔌 Usually connects to a switch/router via Ethernet

🛜 Essential for Wi-Fi coverage in offices & public areas

🔒 4. Firewall

🚧 Monitors and controls incoming/outgoing traffic

📜 Can be hardware-based or software-based

🧱 Uses rules, policies, and signatures to block threats

🧭 5. Modem

🌍 Converts digital data into analog signals and vice versa

📡 Bridges ISP infrastructure and your home or business network

📞 Common in DSL, cable, or fiber setups

🧠 6. Load Balancer

⚖️ Distributes incoming network traffic across multiple servers

📈 Ensures availability, reliability, and performance

🛡️ Often used in high-availability or cloud deployments

🛠️ 7. Network Interface Card (NIC)

🖧 Enables devices (PCs, servers) to connect to a network

🌐 Can be wired (Ethernet) or wireless (Wi-Fi)

💼 Installed internally or externally (USB, PCIe, etc.)

💡 Each device has a specific role — but together, they form the backbone of modern digital communication.

⚠️ Disclaimer: This content is for educational use only. For professional use, always validate configurations in controlled environments.

#NetworkingBasics #NetworkDevices #CyberSecurity #ITInfrastructure #LAN #WAN #OSIModel #TechEducation #InfoSec #NetworkEngineering

# data[].attributes.attachment_link.title
IoT Evolution World Announces Winners of 2025 Industrial IoT Product of the Year Awards

# data[].attributes.attachment_link.description
The Industrial IoT Product of the Year Award honors the best, most innovative products and solutions powering the Industrial Internet of Things

# data[].attributes.attachment_link.description
Log into Facebook to start sharing and connecting with your friends, family, and people you know.

# data[].attributes.attachment_link.readable_text
The Cisco Certified Network Associate (CCNA) 200-301 is a globally recognized certification that validates foundational networking knowledge and skills. It covers networking fundamentals, IP services, security, automation, and programmability.

Network administrators

IT professionals seeking networking expertise

Students pursuing a career in networking

Professionals preparing for advanced Cisco certifications (e.g., CCNP)

No formal Cisco certification required

Basic understanding of networking concepts

The CCNA 200-301 exam consists of a single test with the following structure:

Exam Code: 200-301 CCNA

Duration: 120 minutes

Number of Questions: 100-120

Passing Score: ~800-850 out of 1000

Question Types: Multiple-choice, drag-and-drop, simulations, and labs

Key Topics Covered:

TCP/IP & OSI models

VLANs, STP, EtherChannel

IPv4 & IPv6 addressing

Routing (Static, OSPF)

DHCP, DNS, NAT, ACLs

Wireless & security concepts

Network automation with Python & APIs

Get the CCNA 200-301 study notes and practice test from here.

Official Cisco Press Books (e.g., CCNA 200-301 Official Cert Guide)

Video Courses: CBT Nuggets, Udemy (Neil Anderson), INE

Practice Tests: Boson ExSim, Pearson Test Prep

Use Cisco Packet Tracer or GNS3 for practical experience.

Practice configuring routers, switches, VLANs, and troubleshooting.

Simulate real exam conditions with timed tests.

Review incorrect answers and weak areas.

Engage in discussions on Reddit (r/ccna), Cisco Learning Network, Discord groups.

Cisco Packet Tracer is a free network simulation tool for CCNA labs.

Simulate routers, switches, and end devices

Practice VLANs, routing, ACLs, DHCP, and more

Supports troubleshooting scenarios

1. Basic Switch Configuration

2. VLAN Setup & Inter-VLAN Routing

3. OSPF Routing Lab

4. ACL Implementation

Download: NetAcad Cisco Packet Tracer

✅ Industry Recognition: Cisco is a leader in networking. ✅ Career Growth: Higher salaries (Avg. 70K-70 K -100K for CCNA holders). ✅ Foundation for Advanced Certs: CCNP, CCIE, DevNet.

Valid for 3 years

Renew by:Passing a higher-level Cisco exam (e.g., CCNP)Earning Continuing Education (CE) credits

CCNA: If you want a Cisco-focused, deeper networking certification.

Network+: If you prefer a vendor-neutral, entry-level networking cert.

CCNA 200-301 Study Notes is a comprehensive CCNA certification guide aimed at preparing candidates for the Cisco Certified Network Associate (CCNA) 200-301 exam. It combines theory, practical CLI configuration, and multiple sets of practice questions to reinforce learning.

Includes:

Full CCNA exam blueprint coverage

Hands-on lab configuration commands

Detailed explanations of routing, switching, IPv4/IPv6, subnetting, wireless, security, and automation

4 sets of practice exams with answers

Covers every domain in Cisco's CCNA blueprint

Uses diagrams, CLI outputs, tables, and flowcharts

Includes exam-focused tips for subnetting, time management, and simulations

Practical real-world examples (e.g., ROAS, STP tuning, Layer 3 EtherChannels)

Table of Contents Summary

1. Exam Preparation

2. Network Fundamentals

3. IP Addressing & Subnetting

4. LAN Switching

5. Routing

6. WAN Technologies

7. Security & Management

8. Wireless Networking

9. Automation & Programmability

10. Practice Exams

Set 1: 50 Questions + Answers

Set 2: 30 Questions + Answers

Set 3: Scenario-Based + Answers

Set 4: Advanced Scenarios

Page count:540

Format: PDF

# data[].attributes.attachment_link.title
CCNA 200-301 Study Notes & Practice Tests

# data[].attributes.attachment_link.description
The Cisco Certified Network Associate (CCNA) 200-301 is a globally recognized certification that validates foundational networking knowledge and skills. It covers networking fundamentals, IP...

# data[].attributes.attachment_link.title
MITRE warns that funding for critical CVE program expires today

# data[].attributes.attachment_link.description
MITRE Vice President Yosry Barsoum has warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs expires today, which could lead to widespread disruption across the global cybersecurity industry.

# data[].attributes.attachment_link.title
Microsoft is offering free AI skills training for everyone - how to sign up

# data[].attributes.attachment_link.description
Microsoft’s 50-day AI Skills Fest is open to beginners and pros. Register now for free access to AI lessons and help Microsoft win a Guinness World Record (seriously).

# data[].attributes.attachment_link.title
CSAIL - MIT - The world’s first laptop launched #otd in...

# data[].attributes.attachment_link.description
The world’s first laptop launched #otd in 1983. RadioShack’s TRS-80 Model 100 weighed 3 pounds with a 20-hour battery, a word processor, and a…

# data[].attributes.headline
Cisco Certified Network Associate + Security Certificate | Montgomery College, Maryland

# data[].attributes.subject
Cisco Certified Network Associate + Security Certificate | Montgomery College, Maryland

# data[].attributes.attachment_link.title
Cisco Certified Network Associate + Security Certificate | Montgomery College, Maryland

# data[].attributes.attachment_link.description
With this certificate program, you’ll learn how to install, operate, and troubleshoot medium-sized router and switched networks including implementation and verification of connections to remote sites in a WAN.

# data[].attributes.attachment_link.title
Ansible Core Documentation — Ansible Core Documentation

# data[].attributes.headline
(568) Signal Encoding 1: Digital Signals - YouTube

# data[].attributes.subject
(568) Signal Encoding 1: Digital Signals - YouTube

# data[].attributes.attachment_link.title
netool.io - Network engineering tool in your pocket.

# data[].attributes.attachment_link.description
Have feedback, suggestion, or any thought about our network analyzer? Don't hesitate to contact us anytime, we will get back to you within 24 hours.

# data[].attributes.attachment_link.description
Sprint celebrated the launch of its WiMAX network today by firing several shots across the bow of traditional wireline Internet providers.

# data[].attributes.headline
TechRadar Pro | Expert buying advice and guides for small business | TechRadar Pro

# data[].attributes.subject
TechRadar Pro | Expert buying advice and guides for small business | TechRadar Pro

# data[].attributes.attachment_link.title
TechRadar Pro | Expert buying advice and guides for small business | TechRadar Pro

# data[].attributes.attachment_link.description
The latest Pro breaking news, comment, reviews and features from the experts at TechRadar

# data[].attributes.attachment_link.description
500 million+ members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

# data[].attributes.headline
Attend - Cisco Live 2024 Las Vegas - Cisco

# data[].attributes.subject
Attend - Cisco Live 2024 Las Vegas - Cisco

# data[].attributes.attachment_link.readable_text
Learn about Cisco Live

For 35 years, Cisco Live has delivered education and inspiration to technology innovators worldwide through large-scale events, as well as on-demand education. It is the premier destination for Cisco customers and partners to gain knowledge, build community, and create an AI strategy.

As the place where the best and the brightest minds in IT come to learn, Cisco Live will ignite creativity, deliver practical know-how, and accelerate the connections that power an Inclusive Future for all.

# data[].attributes.attachment_link.description
Experience the education, inspiration, and fun of Cisco Live in Las Vegas or from anywhere in the world. Choose to attend in person or watch the broadcast online.

# data[].attributes.body
IP addresses, a string of numbers and dots, act as unique identifiers for the devices and domains on the internet, allowing them to communicate with each other and send information back and forth.

# data[].attributes.headline
ANSI TIA 606-B Cable Labeling Standards | Creative Safety Supply

# data[].attributes.subject
ANSI TIA 606-B Cable Labeling Standards | Creative Safety Supply

# data[].attributes.attachment_link.readable_text
The ANSI TIA 606-B Cable Labeling Standards are a set of voluntary guidelines that are used in labeling and recording data about the wires used for computer systems. This includes most types of IT environments including telephone companies, internet service providers, data centers, and more.

The standards themselves are entirely optional, but a growing percentage of businesses use them because they are a proven way to keep things organized, and improve the organization of any data center, computer closet, or other IT area.

The standards that are used here are designed to make it easy to implement, and useful for anyone who is working with the cabling in the future. There are a number of underlying principles that were used for creating the 606-B standards, including the following:

Consistent - Any company that uses these standards needs to make sure they are followed throughout all areas of a building, and all buildings within the company. Consistency helps to ensure that everyone who works on the cabling will be able to understand the labels at all times.

Identify Physical Locations - The labels need to identify what physical location they are going to. Depending on the facility, this should include information about the room, floor, and building involved.

Easy to Read - Labels need to be printed on high quality label stock, and with a good printer, to help ensure the text on them is easy to read.

Durable - The print stock used should be made to last long periods of time. The cables often last for many years, and the labels should last just as long. This applies both to the physical label, and the print on it, which should not fade.

Universal Agreement - All departments and team members throughout a company need to agree to follow these standards or it will only create additional confusion.

Pervasive - All cables should be labeled at both ends to ensure anyone who comes in to the facility will be able to get the information they need able these wires.

In order to be in compliance with the 606-B standards, labels must meet all of the following requirements.

Permanent - The labels should be permanently placed onto the cables.

Identified at Both Ends - Both ends of the cables need to be labeled.

Termination Points Identified - The termination points need to be identified on the labels.

Legible - Labels need to be legible, which typically means they should be printed off rather than hand written.

Match with Records - Information on the labels should be recorded into records. This allows technicians to get additional information as it is needed.

Labels on these types of wires have to be fairly small, which can limit the amount of information that is able to fit. To help convey additional information, these standards encourage (though don't require) following wire color coding standards. Each color of wire will be used for a different thing, so that people can immediately recognize the purpose of a given wire. The following are the standard colors used:

Orange - Orange wires should be used to go to the demarcation point, also known as the central office termination point.

Green - Green cables are used for network connections that are on the customer's side of the demarcation point.

White - White is used for the first level backbone, including main cross-connects to a telecom room within the building.

Grey - This is for a second-level backbone, including cables that go between two telecom rooms, or between an intermediate location and a telecom room in a separate building.

Brown - Backbone cables that go between buildings will use brown cables.

Blue - Used for termination in horizontal cabling on the closet end.

Purple - Purple cables should be used for standard equipment including things like individual PCs, printers, and others.

Yellow - Any auxiliary circuits including security systems will use yellow cables.

Red - Telephone system termination cables use red cables.

Other colors can be used as well as long as they are agreed upon by all the different groups within a facility. In most cases, the above colors will be all that is needed, but since every environment is unique, the standards allow for this type of thing.

Using labels on these types of cables is very important, but if records aren't kept about the cables, it is going to be ineffective. Records are typically kept in a database that can be accessed by all relevant teams.

In many cases, the labels on the cables can have a QR code, which can then be scanned to pull up all the additional information from the records database. Even when this type of solution is not used, the records should be kept up to date at all times so that it can be referenced as needed.

When deciding whether or not to follow these optional standards, it is important to be aware of all the different benefits that it will bring. Anytime a company implements any set of standards, it will come at a slight cost in terms of planning and implementation. To justify these issues, there are many benefits that are provided by these standards, such as the following:

Easy Understanding - Having standards throughout all facilities within a company will allow everyone who works on these cables to know exactly what they are doing no matter where they work.

Faster Troubleshooting - Being able to identify information about cables quickly makes it faster and easier to troubleshoot issues.

Outage Avoidance - Having clearly labeled cables will help prevent accidental outages that are caused by someone working on or moving the wrong cables.

Planned Upgrades - As equipment is upgraded in a facility, having a clearly labeled set of wires will make it easier to plan things out and ensure there aren't any issues.

Training - When an entire facility has the same set of standards, it is much easier to train new employees on how things are done. A facility can create one consistent training program that can be used for all employees (or even vendors) who will be working on these systems.

Creating custom labels for your network and other related cables is surprisingly easy, when facilities have the right equipment. The best option is to use an industrial label printer, which can create high-quality, easy to read, labels for any situation. These printers can use label stock of any size or color to help ensure the labels convey the exact information needed.

Resources

# data[].attributes.attachment_link.title
ANSI TIA 606-B Cable Labeling Standards | Creative Safety Supply

# data[].attributes.attachment_link.description
ANSI TIA 606-B Cable Labeling Standards is essential to understand and follow when labeling your wires. Learn more about labeling cables here.

# data[].attributes.headline
TIA-606-C: Cable Labeling Standards - What's New? | BradyID.com

# data[].attributes.subject
TIA-606-C: Cable Labeling Standards - What's New? | BradyID.com

# data[].attributes.attachment_link.title
TIA-606-C: Cable Labeling Standards - What’s New? | BradyID.com

# data[].attributes.attachment_link.description
Learn more about the latest updates to the Telecommunications Industry Association voluntary TIA-606-C standard.

# data[].attributes.attachment_link.description
By clicking Continue, you agree to LinkedIn's User Agreement, Privacy Policy, and Cookie Policy.

# data[].attributes.headline
Webopedia - Tech & Crypto Knowledge Base

# data[].attributes.subject
Webopedia - Tech & Crypto Knowledge Base

# data[].attributes.attachment_link.title
Entire Networking Explained in 100 Terms | CompTIA Network+

# data[].attributes.headline
Famous DDoS attacks | Biggest DDoS attacks | Cloudflare

# data[].attributes.subject
Famous DDoS attacks | Biggest DDoS attacks | Cloudflare

# data[].attributes.attachment_link.title
Famous DDoS attacks | Biggest DDoS attacks

# data[].attributes.attachment_link.description
A DDoS attack attempts to overwhelm a targeted server. Learn about some of the biggest DDoS attacks ever, along with famous DDoS attacks from the past.

# data[].attributes.headline
Configure SSH on Routers and Switches - Cisco

# data[].attributes.subject
Configure SSH on Routers and Switches - Cisco

# data[].attributes.attachment_link.readable_text
Introduction

This document describes how to configure and debug Secure Shell (SSH) on Cisco routers or switches that run Cisco IOS ® Software.

Prerequisites

Requirements

The Cisco IOS image used must be a k9(crypto) image in order to support SSH. For example, c3750e-universalk9-tar.122-35.SE5.tar is a k9 (crypto) image.

Components Used

The information in this document is based on Cisco IOS 3600 Software (C3640-IK9S-M), Release 12.2(2)T1.

SSH was introduced into these Cisco IOS platforms and images:

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information.

SSH v2 Network Diagram

Test Authentication

Authentication Test without SSH

First test the authentication without SSH to make sure that authentication works with the router Carter before you add SSH. Authentication can be with a local username and password or with an authentication, authorization, and accounting (AAA) server that runs TACACS+ or RADIUS. (Authentication through the line password is not possible with SSH.) This example shows local authentication, which lets you Telnet into the router with username cisco and password cisco.

Note: Throughout this document, vty is used to indicate Virtual Terminal Type.

!--- The aaa new-model command causes the local username and password on the router to be used in the absence of other AAA statements. aaa new-model username cisco password 0 cisco line vty 0 4 transport input telnet !--- Instead of aaa new-model, you can use the login local command.

Authentication Test with SSH

In order to test authentication with SSH, you have to add to the previous statements in order to enable SSH on Carter, and test SSH from the PC and UNIX stations.

ip domain-name rtp.cisco.com !--- Generate an SSH key to be used with SSH. crypto key generate rsa ip ssh time-out 60 ip ssh authentication-retries 2

At this point, the show crypto key mypubkey rsa command must show the generated key. After you add the SSH configuration, test your ability to access the router from the PC and UNIX station.

Optional Configuration Sets

Prevent Non-SSH Connections

If you want to prevent non-SSH connections, add the transport input ssh command under the lines to limit the router to SSH connections only. Straight (non-ssh) Telnets are refused.

line vty 0 4 !--- Prevent non-SSH Telnets. transport input ssh

Test to ensure that non-SSH users cannot Telnet to the router Carter.

Set Up an IOS Router or Switch as SSH Client

There are four steps required to enable SSH support on a Cisco IOS router:

1. Configure the hostname command.

2. Configure the DNS domain.

3. Generate the SSH key.

4. Enable SSH transport support for the vty.

If you want to have one device act as an SSH client to the other, you can add SSH to a second device called Reed. This puts these devices in a client-server arrangement, where Carter acts as the server, and Reed acts as the client. The Cisco IOS SSH client configuration on Reed is the same as required for the SSH server configuration on Carter.

!--- Step 1: Configure the hostname if you have not previously done so. hostname carter !--- The aaa new-model command causes the local username and password on the router to be used in the absence of other AAA statements. aaa new-model username cisco password 0 cisco !--- Step 2: Configure the DNS domain of the router. ip domain-name rtp.cisco.com !--- Step 3: Generate an SSH key to be used with SSH. crypto key generate rsa ip ssh time-out 60 ip ssh authentication-retries 2 !--- Step 4: By default the vty transport is Telnet. In this case, Telnet is disabled and only SSH is supported. line vty 0 4 transport input ssh !--- Instead of aaa new-model, you can use the login local command.

Issue this command to SSH from the Cisco IOS SSH client (Reed) to the Cisco IOS SSH server (Carter) to test this:

ssh -v 2 -c aes256-cbc -m hmac-sha1-160 -l cisco 10.31.1.99

Setup an IOS Router as an SSH Server that Performs RSA-based User Authentication

Complete these steps to configure the SSH server to perform RSA-based authentication.

1. Specify the Host name.

Router(config)#hostname <host name>

2. Define a default domain name.

Router(config)#ip domain-name <Domain Name>

3. Generate RSA key pairs.

Router(config)#crypto key generate rsa

4. Configure SSH-RSA keys for user and server authentication.

Router(config)#ip ssh pubkey-chain

5. Configure the SSH username.

Router(conf-ssh-pubkey)#username <user name>

6. Specify the RSA public key of the remote peer.

Router(conf-ssh-pubkey-user)#key-string

7. Specify the SSH key type and version. (This step is optional.)

Router(conf-ssh-pubkey-data)#key-hash ssh-rsa <key ID>

8. Exit the current mode and return to privileged EXEC mode.

Router(conf-ssh-pubkey-data)#end

Add SSH Terminal-Line Access

If you need outbound SSH terminal-line authentication, you can configure and test SSH for outbound reverse Telnets through Carter, which acts as a comm server to Philly.

ip ssh port 2001 rotary 1 line 1 16 no exec rotary 1 transport input ssh exec-timeout 0 0 modem InOut stopbits 1

If Philly is attached to the Carter Port 2, then you can configure SSH to Philly through Carter from Reed with this command:

ssh -v 2 -c aes256-cbc -m hmac-shal-160 -p 2002 10.31.1.99

You can use this command from Solaris:

ssh -c 3des -p 2002 -x -v 10.13.1.99

Restrict SSH Access to a Subnet

You need to limit SSH connectivity to a specific subnetwork where all other SSH attempts from IPs outside the subnetwork are dropped.

You can use these steps to do the same:

1. Define an access-list that permits the traffic from that specific subnetwork.

2. Restrict access to the VTY line interface with an access-class.

This is an example configuration. In this example, only SSH access to the 10.10.10.0 255.255.255.0 subnet is permitted, any other is denied access.

Router(config)#access-list 23 permit 10.10.10.0 0.0.0.255 Router(config)#line vty 5 15 Router(config-line)#transport input ssh Router(config-line)#access-class 23 in Router(config-line)#exit

Note: The same procedure to lock down the SSH access is also used for switch platforms.

Configure the SSH Version 2

carter(config)#ip ssh version 2

Variations on Banner Command Output

The banner command output varies between the Telnet and different versions of SSH connections. This table illustrates how different banner command options work with various types of connections.

Note: SSH version 1 is no longer recommended.

Unable to Display the Login Banner

SSH version 2 supports the log in banner. When it initiates the SSH session with the Cisco router, the log in banner is displayed if the SSH client sends the username. For example, when the Secure Shell ssh client is used, the log in banner is displayed. When the PuTTY ssh client is used, the log in banner is not displayed. This is because SSH sends the username by default and PuTTY does not send the username by default.

The SSH client needs the username to initiate the connection to the SSH enabled device. The Connect button is not enabled if you do not enter the host name and username. This screen image shows that the log in banner is displayed when SSH connects to the router. The banner then prompts for a password.

The PuTTY client does not require the username to initiate the SSH connection to the router. This screen image shows that the PuTTY client connects to the router and prompts for the username and password. It does not display the log in banner.

This screen shot shows that the log in banner is displayed when PuTTY is configured to send the username to the router.

Debug and Show Commands

Before you issue the debug commands described here, refer to Important Information on Debug Commands. Certain show commands are supported by the Output Interpreter Tool (registered to customers only), which allows you to view an analysis of show command output.

carter#show ssh Connection Version Encryption State Username 0 2.0 DES Session started cisco

carter#show ip ssh SSH Enabled - version 2.0 Authentication timeout: 120 secs; Authentication retries: 3

Sample Debug Output

Router Debug

00:23:20: SSH0: starting SSH control process 00:23:20: SSH0: sent protocol version id SSH-2.0-Cisco-1.25 00:23:20: SSH0: protocol version id is - SSH-2.0-1.2.26 00:23:20: SSH0: SSH_SMSG_PUBLIC_KEY msg 00:23:21: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03 00:23:21: SSH: RSA decrypt started 00:23:21: SSH: RSA decrypt finished 00:23:21: SSH: RSA decrypt started 00:23:21: SSH: RSA decrypt finished 00:23:21: SSH0: sending encryption confirmation 00:23:21: SSH0: keys exchanged and encryption on 00:23:21: SSH0: SSH_CMSG_USER message received 00:23:21: SSH0: authentication request for userid cisco 00:23:21: SSH0: SSH_SMSG_FAILURE message sent 00:23:23: SSH0: SSH_CMSG_AUTH_PASSWORD message received 00:23:23: SSH0: authentication successful for cisco 00:23:23: SSH0: requesting TTY 00:23:23: SSH0: setting TTY - requested: length 24, width 80; set: length 24, width 80 00:23:23: SSH0: invalid request - 0x22 00:23:23: SSH0: SSH_CMSG_EXEC_SHELL message received 00:23:23: SSH0: starting shell for vty

Server Debug

Note: This is Solaris machine output.

rtp-evergreen.rtp.cisco.com#ssh -c 3des -l cisco -v 10.31.1.99 rtp-evergreen#/opt/CISssh/bin/ssh -c 3des -l cisco -v 10.13.1.99 SSH Version 1.2.26 [sparc-sun-solaris2.5.1], protocol version 1.5. Compiled with RSAREF. rtp-evergreen: Reading configuration data /opt/CISssh/etc/ssh_config rtp-evergreen: ssh_connect: getuid 0 geteuid 0 anon 0 rtp-evergreen: Allocated local port 1023. rtp-evergreen: Connecting to 10.13.1.99 port 22. rtp-evergreen: Connection established. rtp-evergreen: Remote protocol version 2.0, remote software version Cisco-1.25 rtp-evergreen: Waiting for server public key. rtp-evergreen: Received server public key (768 bits) and host key (512 bits). rtp-evergreen: Host '10.13.1.99' is known and matches the host key. rtp-evergreen: Initializing random; seed file //.ssh/random_seed rtp-evergreen: Encryption type: 3des rtp-evergreen: Sent encrypted session key. rtp-evergreen: Installing crc compensation attack detector. rtp-evergreen: Received encrypted confirmation. rtp-evergreen: Doing password authentication. cisco@10.13.1.99's password: rtp-evergreen: Requesting pty. rtp-evergreen: Failed to get local xauth data. rtp-evergreen: Requesting X11 forwarding with authentication spoofing. Warning: Remote host denied X11 forwarding, perhaps xauth program could not be run on the server side. rtp-evergreen: Requesting shell. rtp-evergreen: Entering interactive session.

Incorrect Configurations

These sections have sample debug output from several incorrect configurations.

SSH from an SSH Client not Compiled with Data Encryption Standard (DES)

Bad Password

Router Debug

00:26:51: SSH0: starting SSH control process 00:26:51: SSH0: sent protocol version id SSH-2.0-Cisco-1.25 00:26:52: SSH0: protocol version id is - SSH-2.0-1.2.26 00:26:52: SSH0: SSH_SMSG_PUBLIC_KEY msg 00:26:52: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03 00:26:52: SSH: RSA decrypt started 00:26:52: SSH: RSA decrypt finished 00:26:52: SSH: RSA decrypt started 00:26:52: SSH: RSA decrypt finished 00:26:52: SSH0: sending encryption confirmation 00:26:52: SSH0: keys exchanged and encryption on 00:26:52: SSH0: SSH_CMSG_USER message received 00:26:52: SSH0: authentication request for userid cisco 00:26:52: SSH0: SSH_SMSG_FAILURE message sent 00:26:54: SSH0: SSH_CMSG_AUTH_PASSWORD message received 00:26:54: SSH0: password authentication failed for cisco 00:26:54: SSH0: SSH_SMSG_FAILURE message sent 00:26:54: SSH0: authentication failed for cisco (code=7) 00:26:54: SSH0: Session disconnected - error 0x07

SSH Client Sends Unsupported (Blowfish) Cipher

Router Debug

00:39:26: SSH0: starting SSH control process 00:39:26: SSH0: sent protocol version id SSH-2.0-Cisco-1.25 00:39:26: SSH0: protocol version id is - SSH-2.0-W1.0 00:39:26: SSH0: SSH_SMSG_PUBLIC_KEY msg 00:39:26: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03 00:39:26: SSH0: Session disconnected - error 0x20

Get "%SSH-3-PRIVATEKEY: Unable to Retrieve RSA Private Key for" Error

A change in the domain name or host name can trigger this error message. Use these workarounds:

crypto key zeroize rsa label key_name crypto key generate rsa label key_name modulus key_size

Tips

If your SSH configuration commands are rejected as illegal commands, you have not successfully generated a RSA key pair for your router. Ensure you have specified a host name and domain. Then use the crypto key generate rsa command to generate a RSA key pairs and enable the SSH server.

When you configure RSA key pairs, you can get these error messages:

1. No hostname specified.
You must use the hostname global configuration command to configure a host name for the router.

2. No domain specified.
You must use the ip domain-name global configuration command to configure a host domain for the router.

The number of allowable SSH connections is limited to the maximum number of vty configured for the router. Each SSH connection uses a vty resource.

SSH uses either local security or the security protocol configured through AAA on your router for user authentication. When you configure AAA, you must ensure that the console is not run under AAA. Apply a keyword in the global configuration mode to disable AAA on the console.

No SSH server connections running:

carter#show ssh %No SSHv2 server connections running.

This output suggests that the SSH server is disabled or not enabled properly. If you have already configured SSH, it is recommended that you reconfigure the SSH server in the device. Complete these steps in order to reconfigure the SSH server on the device.

Delete the RSA key pairs. After the RSA key pairs are deleted, the SSH server is automatically disabled.

carter(config)#crypto key zeroize rsa

Note: It is important to generate key pairs with at least 768 as bit size when you enable SSH v2.

Caution: This command cannot be undone after you save your configuration. Also, after RSA keys are deleted, you cannot use certificates or the CA or participate in certificate exchanges with other IP Security (IPSec) peers unless you regenerate the RSA keys to reconfigure CA interoperability, get the CA certificate, and request your own certificate again.

2. Reconfigure the hostname and domain name of the device.

carter(config)#hostname hostname carter(config)#ip domain-name domainname

3. Generate RSA key pairs for your router. This automatically enables SSH.

carter(config)#crypto key generate rsa

Note: Refer to crypto key generate rsa - Cisco IOS Security Command Reference, Release 12.3 for more information on the usage of this command.

Note: You can receive the SSH2 0: Unexpected mesg type received error message due to a packet received that is not understandable by the router. Increase the key length while you generate rsa keys for ssh in order to resolve this issue.

4. Configure the SSH server.

5. To enable and configure a Cisco router/switch for the SSH server, you must configure SSH parameters. If you do not configure SSH parameters, the default values are used.

ip ssh {[timeout seconds] | [authentication-retries integer]}
carter(config)# ip ssh

Related Information

# data[].attributes.attachment_link.description
This document describes how to configure and debug Secure Shell (SSH) on Cisco routers or switches that run Cisco IOS® Software.

# data[].attributes.attachment_link.title
McDonald's stores in Japan, Australia and Hong Kong hit by major IT failure | CNN Business

# data[].attributes.attachment_link.description
McDonald's has been hit by a system failure in Japan, Australia and Hong Kong, with many stores forced to close and online ordering suspended.