Cisco

• http://www.firewall.cx/networking-topics.html

Cisco ISR 1111-8p

After a factory reset, get the initial configuration dialog

• https://community.cisco.com/t5/switching/initial-configuration-dialog-yes-no-how-do-i-get-rid-of-this/td-p/1047509

• Enable ssh console: http://www.mustbegeek.com/enable-ssh-in-cisco-ios-router/

Cisco Wireless AP C1832i

• https://finkotek.com/cisco-mobility-express-client-receives-incorrect-ip/

• https://networkengineering.stackexchange.com/questions/1824/using-radius-to-restrict-ssid-on-cisco-aironet

Radius

• Radius 3.0 with certificate per supplicant
  • https://www.ossramblings.com/RADIUS-3.X-Server-on-Ubuntu-14.04-for-WIFI-Auth
• Test eap-tls
  • http://freesoftwaremagazine.com/articles/howto_incremental_setup_freeradius_server_eap_authentications/

Other

• pdf: https://networkradius.com/doc/FreeRADIUS-Implementation-Ch6.pdf

• http://deployingradius.com/

• https://networkradius.com/doc/3.0.10/raddb/tls/tls-config_tls-common.html

• https://networkradius.com/doc/3.0.10/raddb/sites-available/tls.html

• http://lists.freeradius.org/pipermail/freeradius-users/2016-March/082736.html

• WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

• How many user/supplicant certificates are needed for WPA2 enterprise on a small network?

• EAP-TLS vs EAP-TTLS vs EAP-PEAP

• Certificates

  • DER binary format: .der = .cer : binary
  • PKCS#12 format: .p12 = .pfx : binary
  • PEM format: .pem .crt .cet .key
  • Android 8: RootCA: .cer instead of .der and User cert + key: .pfx instead of .p12

ACL firewall

• Standard ACL are applied to the traffic going through the interface not to the interface itself. Thus the traffic sent to the gateway isn't filtered. (if using outbound)

• https://www.geeksforgeeks.org/computer-network-access-lists-acl/

• https://www.youtube.com/watch?v=BwEcN_bXLkw

• https://www.youtube.com/watch?v=SfrDdkZZCzM

• ---

• https://community.cisco.com/t5/switching/inter-vlan-routing-with-acl/td-p/3412658

• https://community.cisco.com/t5/switching/deny-all-traffic-except-port-80-and-443-https-mail-domain-com/td-p/2871471

• https://networkengineering.stackexchange.com/questions/42939/why-is-my-acl-not-blocking-traffic-on-my-cisco-router-interface

• https://supportforums.adtran.com/thread/3136

• https://help.ubnt.com/hc/en-us/articles/115010927367-EdgeSwitch-Limiting-Inter-VLAN-Routing-with-Access-Lists

• https://community.cisco.com/t5/security-documents/ios-zone-based-firewall-step-by-step-basic-configuration/ta-p/3142774

• https://www.geeksforgeeks.org/computer-network-reflexive-access-list/

VLANS

• https://www.alliedtelesis.com/sites/default/files/documents/how-alliedware/overview_vlans.pdf

Proxy

• https://www.crypt.gen.nz/papers/cisco_squid_wccp/
• https://thejimmahknows.com/proxy-wccp-cisco-asa-squid-3-4/