APRIL 201 2 • Free • www.networkset.net r i First Arabic Magazine For Networks Samba Server Series Access Point Modes in Wireless Cisco Network £-/d cs\JoIjuu>^I ^juuuLII Windows Server Backup djLlZ)ljJL9^l cli LsTjjIiJ I cjnJLc d>JXl 1 i Bidirectional Forwarding Detection (BFD) k Troubleshooting Jl jlcIcjJ jols>I ^ compTIA d/xJdLoJ L9l9q SB QULUI aim I I nZj" ^jJI^UI (jLc* jULiJI L^jqLc ^o^UI jJ ^^Ul^ 3 K q II jIj-l^I o-j Lslq ^o^jlII J QJL^ J ** etc L^j^lj^ oULJ j-o^JI^ JjqLS — ^ ili S^lIj (jLS (5UI3 J^l jj-slII <3 iu *' 2010 toLc 1 m i ^..q (^ju (jL^ cLjIjjJI jJjq 3KqI I dJLsLuag ^ jJI l^a^JI Ll^^J L^jLII (JL^jo ^-q o 3I ojLoI (^1 ^ojJLj^/ lIjM ^ q II jh9 i • ii 0 II ^jL^jLII l-j^J-uj^I "g o jn^ni ^ojIj ^j^jjq j-j . j_jj-oJJ ^Q-Lijg ^^-jj-SlII ^oJLsdl lIjK I m> II ^.ujaI^jq (jjQ oj 1 q7o 3 j 5jx>LuJ-Q-ig 3^SL^Ij-oJLq ^><.t < vl ^Q_ujl lIijLuJ JL^ jjJLcl^ I^^^Q^ L^JuLLS (J^L^I i-6^LLJ9 OJJlI^ 3 K q II ^lC- JjJjQ ^-Ul pLqjjJ^/I ♦ c / c « ~ ,(5^jlq^ II JjLc ,l2jKmiII j-o^.1 : (l_jLqJ^I JaAa jjo) ^^LS 3KqIL SLoLa II 15JI S^^-uj^jq ^^ic ^q^o** ^05^ ♦♦ ♦♦ ♦♦ ♦♦ , 3h i/sni j (jl^^b j , Jjx.U^I roli^ ,l>^9-£ ^JLk ,cd-JI J-ojiI ^jLo , J-l^^JI J^lI^JI J-lc ,^a^q ^J>^ >Q (oIlo * ♦♦ ♦♦ * nU.^n / dUlj-LSLlI J^jQl , ^> II / - oU.^n ♦♦ ♦♦ s- s. s. s- + J-o^l jJlj-C- J-o^l ^fS^y^ c u fihino J-qj^I J^jiJI (j32jq ^Mc cjji/n i o j|^.i j-qj^I clIiju (JLq^ .1q^ o c^jl^gJI >L J J cLq-ujI (jl Q ' C> , j^_uO_LjQ jl^.i) J-QJ^I ,(J*iH Q"sl <-AjLj * q** ,(3'>-^J ^-O^l ,^^^-SL^jJI jJLk ^yoLuJ , JfLlik ♦♦ ♦♦ s- ij<)^\ o \ 4>j^-I[9 (^-J>sJI roJLsdl (3-Li j 7 ^ q 1 1 j^-^'^H ^l 3JLuj cUj^^ju (JLLqJI Ij.^ JMjL 1 1 J|gl a ju L^j^c ^^JLlI 3 n 1 1 II Sj-pJI jy < J-lqXujjq 3 K q 1 1 (jLj ^3 II ^..q^T 1 Lo^ Lj\$ ,2La jAT ^1 3 a clud ^[9! (jjq 3JjqLS 3jl6Ijjl^T 3 1 a o J^^^jQ (J^^J (jl ^^lc ^>Z3JJ^I lLU jJ ^J^SLlI -oJLsdl IT Jl aILc (J^l rO-"J^I roL^/l (JJQ Lq^J ^ 1 i^l ^ij^jjj^ ♦♦ ♦♦ ♦♦ * ( ^ 7 jj5lII aJLslII ^.6 3.i^j3Lo^ o^_u_^ 3 uj-ujJjq J_lS (jjq 3 K q II ^ i ii (J^^ (jiiL£j (j^/l ^jJ (jl Log in (j^/l (jjq L^ii ♦♦ ♦♦ ♦♦ ♦♦ Wth L_j jx. ^J^^fl 3 K q II 3 K q II ^ n ii lx^lu 3 K q II ^JLlj^ 3 * 1 1 *« «g p 1 1 jjo (jiiliuJI ^L^J jjaJJI jj^* *j ♦♦ ♦♦ ♦♦ L^^lj^ ^^-oJLsdl^ ^j-j j_s_ll ^oJLsdl 3 1 11 0 7 11 JjM^qJI 3^o«o cUll ^Lij (jl J ^^Lll^ qJI ♦♦ ♦♦ ♦♦ LjI^JLj (j^>»r>Mifi J^y* (^-1 axIj^ 3juj5lII 3jQ^fl ^ojjLj (j^J-o , lUlxi I $ 3 nKYll Z±j\S I : SK qI I (£9^J9 ^MjqI J^Sjjo KJI l\a l)^I L)Q^ ( LLLII qI /ujLlLS^I \o^j ^! qli y£iJI 3 KIqI I /5 on^ I 3 ® NetworkSet Issue 24 - April/ 2012 Samba Server Series - 5 ^L5I$4JI - 10 Windows Sewer Backup ^ ^Li^l ^lill- 17 compTIA SLoJaiJ Lni$ Troubleshooting Jl - 21 Access Point Modes in Wireless Cisco Network - 24 Bidirectional Forwarding Detection (BFD) - 32 ■-.k.aii. .M?< r *. i , . i- 37 IPv6 4>Q .A-iA^-ll Jjl^JI OL^I^j Li>^ ^JaLk^JI - 42 SPI Firewall J*aj ^ - 47 ^llJI^I-HPa^^^Liil^^Suo^o- 49 4 ® NetworkSet Issue 24 - April/ 2012 ■ ■ : ,jJLl1' ^jiuiiijJI ■ »■■«'■ nil fjjiuil AIX?Red hat System Engineer eng.hikal13@yahoo.com Samba Server Series article 1 0^5J 6' J-^ai^l >i JA" 1 ^ (i>^^l d-L^LUI ur Lc5 ( ^ r UI l— il n n IVf II ^1 lIjLjLuJI jxJ^JLI 1 cLSLjIj LIj-o-J gJLQJU (J-lL^j^jJI q JI^j-uJI (>^-l9 ^g-J cU^LkJI Lg-jK iT^ I (J-o-£ clLlj l J_^J cLjI ^ j 9 i I ♦ j-Q j 1 ni (j^Q; II Lg-ua5Lj d oUa q II l!jLLu II o J_<& ^> j qj ^1 JjoLsllj * 0 i/s Lufc ■o- / Unuz j^iijg ^ DNS tiJLLfc Ml^i dpg 0 (J''^ I I II ^1 (Jjjj£j^jJI gjl IVl nlj JMii (>q J^iu J3%j >j DNS dJ^f ^iJU TCP/IP ^3%^ djQ> cUdii^l J^IuJI dLoibJl Jli (^l dJgfl nl J cLSLQ JjoLsLLJ^ d Q(g QJ i ^J^J J^Lli* L^J liJLL^ C>^9 'j (jLo j-kXu±j ^^5^ a .><: : MiA FILE SERVERS ^ jjLjLJJ sharing J^d^ldL^oJIoj^j iqUSIJ »«Network File system Unix ^-Lc I^JL^ pl^uj ^>j>-^^' 0,1^ jAjLllq II ; jj o j^j^^qJI JMk ojq ^jLjLjJI ^Jl J^a^JI Windows ® Platform ^1 platform _AUUo >^uJI ®j5J-Lj9 jL^ J£ ur Lc a m^il j cdljJL * ur ku dJl LL* cd^aiLjl 6^J^ NFS c o4Aj ©j^jijgJI J?->j ur Li server MIq .dLL* o> L^;^9 u" <; :' cr 1 ^ FILE SERVER^ W ^li. 1^ 1^ J_£ L7 ic AGENT \±*h l-jllLxu±Lj ^o^EjLli jiuLi ®j5J_Lj9 ^jAjLllq 200 J^lLi^ ^lx ^1 o alLdJI ^ SAMBA SERVER J^JI - 2 ♦ AND DFS cuic^ ^-6 J-oiu J^ni L^iJ Samba ai^f axgjJI ^.i o ^jAidl l^J UoA ^jLoLqJJ sharing File server .1 ur Lc ^LajLhJJ olS jLiuq J^iu ,05^ L^jI :Printer sharing .2 :Openldap directory 3 ® j^jijgJJ ^-o Active Directory Jio 3^ 00^5^ I 0 .t fl^ r J) 1 1^1 ^j-UI policies J-C-I^JLII Lu^jI^ ^ogY il nnj ^^jAjLllqJI oi^ ,-iini.^?..«Ni 0 li* J1q ^ o jI^j samba ^Jl open Ldap ^U^j Linux - SAMBA winnows rut Shared Resources Put Quit 1 11 11 □ 6 Issue 24 - April/ 2012 Samba Server Series Article 1 l ♦♦ ♦♦ ^ ♦♦ ♦ ♦ ^O^-QJ jjqU^j (Jr Lc cuuLla sharing a^jLil^j J^JI lii* ^ cUl^5dl JJUj jO^ij ^1 .lil^l l> ^5U AlLh ^yoLtiJ (jjQ ,J_£ (J-o-C dJLjJ^ cLujIjJ ^ J_i.ii ti^ samba package l^j ^1 JL^^I - 3 Ignhnii ^1 l^JljJl LL* » « Red hat™ package manager tar.gz, ^JIUI jI^Lq^/I LgJ package a±u* cr Lc ^ L^jI - 4 package oi^ J1q l-jluaLIJ^ ©Unix Solaris ^^Ij ^jJI^ tar -zxvf samba-version . tar . gz ; lb |O^H-j ^xj package ^^lc j^^^ji uo.>.ii * i a ■ ^ j n ■ , , ■ ^o^/i 0 ■ -.i^u-ui^ .^c-^.-.a README 5 I INSTALL l^Lo ^ .La, ^JlULi binaries o ^ rmnl packages ^bJI ^ package cdLJI oi^ ^ >Sj ^jL^JI jjqI^L I^ijl^Ij ^qIj ^ cuI^lj ^oL£JI ^Jl ^li^J ^JLjJLj LL^ cLlli£j source code c>& o jUc -'^i^" 05^5 L-jLu^a-Lj J^5lj ^L£JI ^ cuIjjJI cd compiling 7 Issue 24 - April/ 2012 Samba Server Series Article 1 tar.gz source code of samba, o jUc package 3J - 1 t^LUL* djui*}\ tar -zxvf samba-version . tar . gz . /configure : script inside the package make make install ♦♦ ♦ rpm source code a±u* ur L^ j^jLS 3J Lol - 2 rpm -ivh samba-version . src . rpm rpm -bb samba-version . spec rpm -ivh samba-version . arch . rpm j\r\9 \ L^LLfe cLjI lIL jJ y-Q \ 1 mi II / _Lc LljqLajJ J * i «~ i «qU£JI ♦ ♦ ♦♦ ^ ♦ ♦ ♦♦ ♦ 1 ♦ 05^; 3^9 smb.conf jjMla^l ^.It U^l ^UaUl ^ jjJj jjlAUl /etc/smb . conf /etc/samba/smb . conf oLj^ cui L^^jjJ ^jUJ configuration ouLHj ^Ul ^11 ^ \±& 9 .yh LjqL^JI c>& samba daemon o^jJLlj ^Ul JlUJI Lglox. jJ-LiLLj ^ cuio^ ^ a »'<^;J' L >i^i-dJI ^1 daemon : cU^^Lq LL09 " ^ir. J^51j Process A in J in7ntfl II9 J-uJJjQ-ll (JjJ JLqaJI IAiL JgL^I 1.09x14 iiLI.iL u^°' H j ^jlo cLaAlgLo (J9^j ** > * ♦3jQ.^7niQ II ^Igj^/I jOi^lg ^jIq^I I ^yol&JI l2lij5lLII £-^9 1 ^jl ♦♦ , c zAA\$gA\ fl^jl ^y&Log ^jI^I lxu^lj SiniihliyngjA^ ^'9^1 u-ll J^l9lil >lS2j ^Ul RF iugjjIjJI tliljLii^fl Jjq Vf I p jl^ 9^ ^Iq^II a2i£JI iiiU^xJI oAiL J£iij Electromagnetic Wave * ** (jjQ 2 ninhli9u.9 ^ili'^l Ji£ L^aalfl .liLabij^l oj^Lo .liL ajI^I ^jj .LJ9BLI1 ■^^"■■^ E -field ^jL.^ ***** ^ ^ L^Ia^I Air i^ii JjliQ^ 1*5^ J^j ^UaJ ^ Jliu Ja5lj 9 (Point-to-Multi-Point (PtMP 10 Issue 24 - April/ 2012 * --* * ■ J . ■ • " .* ' . • *a \ \ / * ■. y j % - "■*»» - ..,-*-" . - r 120 • • ■ * - ■ ■ ^I^aJI £\st£i$\ i^ajg J :: - 6 oj^ic ^jj 9J Omni-directional ^LaL^j^I ja»1q ^jI^ :2 J-Ci j I Alio (j) ^L^l^l (y> Jiidl Iaa ^Ijjua ^La^l SjasLo ^Lil^ aaSLidl JK^i^l aaI 2 Jiidl ys&u Lqjq ,2LijJ 20 - / + ^-o-o^fl LfcJbdO (jjQ^ itaiilojl (jjLjJJ OA jl^ dJoij ^iop i£J ^LijJ 360 gJ-LJ ^ LlLJo^j ***** ♦ 141 Jfiuil 9I ^jicl ^0 cULualgLoJI (JjLjjJI dUkaj JI •olj i^ll I ijgljJI cL^lidl ^Jl ;q Beamwidth Pb^li^l (^-\>*-J Jbddl I Aft ^yu cUaJq ^jIo^lJI o>ift Jjqjli cTjgljJI ^liJI JIaj ^Ulg J^jljjlljj 3 SaIqJI oAftJ Lcq i ni iOjl2JI jl^l (Jjq ♦ojaSJI (Jjq j-l^^/I tkuia ** pLslIiI IaIoJq ♦♦ J-ljujlajJ 3 SLqjlHU cUifilgjoJI AjoJjJI cL^iiJI kLu ♦ojaSJI i£ £jj &±cU*Ll\ JjLjl^I^ SlaSLidl ^l ^> JjLslj ^J^Lli pLsjIjI (j^jxg >sJ **** * * ? * .Horizontal Beamwidfh fla^l u^j r o::^~ j; r ♦♦ uJ ^ i rlUoll ViIq^II pQj 5 JC.'MI ^ ^9jq 9^ Lai (J^ n J ♦♦ ♦♦ ^ ♦♦ iftO 210 270 Horizontal 100 -In i bd T 330 210- 330 270* Vertical (Hyperlink :>i*oaJI) ^UoS "^jI^hJ ^j^aIII fla^l J^aj :6 Jl^ ^jl^JI lAJA ojaSJI (Jjq I jjlAa^ pL&jIiI ^Hglj ♦ojaJLII a f ♦ ^JjJI ill^J dJ^lgJI cUL^JjqJI |QJ>lkj (JjQ (J ^ I I N 1 1 n JjLAJ gXLJJjQ ^J-J ^lcl 12 Issue 24 - April/ 2012 T cu/nl^ll uLJl^mJI -:IjJLj Directional Antennas i jj^ jjqJ I £gJg_ll cUqaj oL^jLj gSgjo cLulLij^I ."il ViIqifl £jj" 9 j P-2412 2.4 GHz jl^^iLi ^> L>1^! 1^9* 7 Jiidl .dBi 19 7 0±j ela^l JaL^I ajLIllj ^L'jdl^l oAAjjualj .^1^21 ^%aUI £ 1*^21 JaA ^ 8 J 1 ^' U-±h! ** f ****** U> j ** 1*1 ** ** ♦♦ ♦♦ ** ♦♦ ul ' ** ♦♦ ♦♦ Ul *« ** ( 13 Issue 24 - April/ 2012 Horizontal Pattern ~" so Vertical Pattern to H 170 ^L^ttl (ijLaAJI £b^2l J^clj :8 Jli ♦♦ ♦♦♦♦♦♦ nil oh nil ni/nl Vi^ll uLjIgmJI Parabolic Directional Antenna i^rLi iliLul^ pi tV....I . oa."jLi. pLriIiI JoLajl ^I^UL (dBi 14 ^^iu) cUJLc >Ljl ^ic Jj-^ " 10 " * ****** (CJjqJI ollloB ".N.^qI I JjLl^ ^iqUoII ^LuIqi&JI uXsj ^ cLlaL^j^I ojjll^ ojLjj i 1JJJI9 ^JIjlII Lfra jj i aluaj (jjlqoJjl^ 2 iJ L9LJ (1 0) ^HJI Jiidl jaJ*j ajI Jii^Mj .(dBi 24 9 dBi 19) Oi^J O^i 0^9 jl^' o*"" a* 0^9^ fla^fl J^' gj-ugl cLiglj lILLoj dBi 1 9 £jjJI 9J ^jIo^lJI jl 21 "^Jq^LUIo, i JaLoj^I jju ajjAJI cuLlilll jjq toxjjl ^lcg ♦♦ ♦♦ .dBi 24 ^j>JI 9 j ^lo^iiJ (.iiLijj 8) JjL£a (2b. jj 1 7) 3 SLaiEU (^HaJI Beamwidth f\s£&\ Jayd 14 Issue 24 - April/ 2012 RFL-MANT19 (Horizontal) 1*0 130 -00 ^0 0 +0 AO 120 1*0 RFL -MANT24 (Honzonlal) -30 100 120 40 0 *0 40 120 i» RFL -MAN T 1 9 (Vertical ) | 10 ■11 160 "20 -00 40 0 40 00 120 100 RFL MANT24 Vertical JO ■1*0 IB 40 40 0 40 00 120 100i Acmuti (OMNI) dBi 24 9 19dBi oj^ juj RFL-MANT jljla ^ 0^9^ £1*^1 :10 J^Ij 6 (TXfftl mq Li52_o CU\J_ci £j6 ■ ■ clJLoLuj q ; kw'i - £udIq jLuijJI \'\ ^Mi A_loj^ ' i "il i'i cLoJliio cLuiLcl (T> 16 ® NetworkSet Issue 24 - April/ 2012 YEMEN linn Windows Server Backup ♦♦ ** I uQjIj W2k8 (^»^9 >QjA nl J5J-LJ9 (JjO OAJ,^ II Ojl J-L^^f I Windows _ll 33^ 2l6L^L ^^^IjLo j^oU W2k8 R2 liJ ur Lc jjL5 lILLsi^j (jl J^l 0^ Server backup Add oj-LO cLoLial Jjj jla (j-t L^iiiLbLj |03-Q-j Ljjl^ j3J-i-j9.il l$J JojLi a^^l J^c (j--^" -^ O-^ ♦♦ Windows Server backup 3 jJ^ J-jj lull I ^-1^1 I ^LllLJ (J-QXr (J^QQ II (JJQ • iSs^ ^LjLlj * (System State Data) ^U^ill (JjJjJI lIIjULlj 0JX.L0 Lkajl^ j "j;-- 1 11 ljIjIjxJ ^ I <~ . (Ntds.dit) _ll La ^1 c non authoritative data _IL _-y~ L»£ Domain ControllerJI ^Jj j>L^j jjULj ur Lc Replication jjLLjJJ LqjIx ^ Additional Domain Controller <>o JlioJI J:; - SlSjo^oJI ^LjLJJ 3jL*1^I 6^^' 6^ • jjLjLj 4 authoritative data J£ ^ix J^slLxs c>£ servers ^jl^iJJ ^JqLlLJ J^5lj ur U jjI^j^I^ ***'J J a J LgJ (J^SLJ "' ..i^j^j! n ,"1 nl K 0IJL4JI oj^q Lo£ 3 . server 2008 jjq ^Iji ^5 R2 _ll ^ L$J server NTBACKUP _ll ."server 2008 -II ^ l^il^j 2003 _JI (^JjJa 0^ Objects _U ojk7.nl J^su tQ^su Lqj-Lc jjq J5iLi l^jLi Windows Server backup j^s^s Object _IJ oal^k Lla ^H) 3 attributes _IJ (>q Windows Server backup _ll cr Lc J^lj LqjIx ■ flMtllfT 17 Issue 24 - April/ 2012 * - u ■ ■ ^^^^^^^^^ ^i:Kli:.,xVivn RikIlii Yuan pwfam J bain? i J i mm 1 "■"-.all L-.T. J Sara 1,1' ■ r. D Server Manager Jl <>o S^J^JJ ^JLOJ L&JJLJ ^O^-OJ Windows Server Jl Storage Jl j^^s SuJliJI oliLUI LU Jg i^« - backup u '„'-»■ - 1 - - -.J- - i - J ui in Mm ■« i YoL"Uri pgifim * a-^i bixjap n odvdJi J rrjir bmz J JJ -3a>fc ■_L_ I w 4BUMU Domain Jl ^L^^Laj login JjoLc lJjI cya ±£h$ jliaJ i^^io^l) a^Jl ^ ^l a^LaJI c>*9 * Admin o j^uaJI ^.i U£ Backup once Ac Hnii* ^ft Backup Once.., R«ov*r... ♦ Replication Jl j^Ia ^ ^ ^i^fl DCs Jl cL^LkJI GUI Jl ^ Uh"^ I i (J-O-C- JJL^JLllU Jl <3j>la o^- ^1 Windows Server backup Jl ^illl L^jlg . Wbadmin.exe Jl ^I^JL^L CLI Capture J-osu Jinnio oo-J ^^JoLi^l ♦♦ ^ ♦♦ ♦♦ * Boot ^M^l JjUlLq ^ c$5l^! (5^' ^' • Files SySVOl Jl lALq ^^lc (55i^j (5»iil rO-uxoJI (JjJjJI lIjULlJ O J_cLq ^J_C j (^jJI ^Qnlfi II • Ntds.dit Logs Jl ljLqIo L7 ic- tSQ'^ .1 5I c Network Drives ^Jj ^JaLi^l ♦♦ DVDs and CDs ^1 c Basic Volumes L^jI^ 3u^ jLk « ^j^l^loJI pL^^fl L^jI 5 . backups full volume (jjv^hTmj ^ Backup Operators Jl Slc^q^o ^.i ♦♦ *« ojq ^ Domain Admin Group _ll ~\.~r.\ l^jI^ . ^^jjldl Ij^ (J-O-Cr 1^)5? 1 1 klTnl j Full System JZZ p"^*" SukLi^l a^mi J^x -: Backup ^1 ^pLLbJJJ cLd^l i7^> 1 SAxllj J-qx. (j^qq II ^jjo ^jjJaJI ^ d^jjJ^ Ci'^ Sd-L5LQ dJ^AJi (JfcJjJa c CLI Jl 3 \ GUI Jl OJ 1 1 O I I I LlqJ^J J-SLJ « GUI Jl cLEjjJ^ ^Q.^Tnl j nlj l^JLjij ojo A^iui^ Windows Server backup Sj^u-JI Lc^ ^ J^iiJ Server Manager Jl (>q Si^I^JI ^jloj L^jju ^o^-S-j Windows Server Jl Storage Jl jLi^^ SlJIUI oliLUI LU ^^iai^j backup OJJ j^AJI ujrJJ o-^goll 18 Issue 24 - April/ 2012 'W>:*f r^Vfc- ridy-l? | Qjjj HtECVTLEBH Q ' R^wii_DI>pKi|-u Custom d jLlkl Ait L^jI Bare Metal Recovery ^Ul jLpJl jliaj cLj^lhpll lIjULuJI J_£ ^nlj I I JUKI'S J-O^LJ (^U^9 . Full System Jl£ piuni s^kiml j^d (Full Server (Recommended Li>Lkl I .v rt* fw> . <■ r rum rhti«4iwp rki|> r;oririLji-,b14cH-i J J J J jLlLLL L^jI a£ Local Drive Jl jLi£.L ,ii^5 Ijl jLLkj (jj »^"-'" ^/ lILjI l_j_ujLLqJI L y^y^l\ • ♦♦ Next l^o-^l ^ali ^LiiiL^ (L^Liuo cLlo jiUI Custom jLllj o^JI iy> ^Lii J^^/ .ii^j ..uf..,i Add Items ^ Uo.^n^ ^ ♦ ♦ 1 1 ♦♦ f » . ♦♦♦♦♦ ♦♦ ♦♦ ♦ ♦ I A ♦♦♦ I ♦♦ 19 Issue 24 - April/ 2012 Repair Your Computer ^ ,h?,;vi J^?!! C ♦♦ System Recovery Options Jl siiLi ^.i t ♦♦ System jLpJI jLllj Choose A Recovery Tool U£ Image Recovery rpT*^ WidM Ton-pel Ldd!IM 1 r i iVctvYIJSLlHM J^^al o jliiil Format and Repartition jUi^L ^ Option ^JJj .liu Finish ^ Next ^Ic J^.^al ^ <, Disks ♦ Yes ur Lc ,h9»^lj ^lUb ^03^ Server pjliJI 2lLqL£ ^b. >l^I 3lJL^ ^ Lo^i^g SJLc^ (OXj (jl J^l Ji^J S^Lc-! J^ri 6' ^r^hi „ oajajJI 2Lkjjjj II L ^_Lc dlo-sJI^ ojLslLj^I JSI \*2 Setter GJ LoAix^ ni j II jo^ (jjo I Jajl 3^ cLlLc SLl^Lul^^I >> II fclLJ-C l— l^JLQ Oj^-u^JI Lq^ 3 ^ uJ 1 II (J-O-C rOJuJ ♦♦ WiimIow* Servw Lhitkup ▲ to £^illl SuJLc^ IaJ Backup ^i^ ,Uo.^; pl£j)f ^LbJ ^ Close J^^l ^ c ^Li^fl ♦♦ ^ Ul 1 V^^fl ^jjjJJI cLlLqX- I 1 ^ J3 C . 1 (j ill O 1 1 . flK (J-CvSLII J Q?nl ) ♦ L5>Li p^ij^ 3lU5JI l-i^LLJI ^^Jl^ Sll^jLuJI 2lsJJI jliiJ oJ-oLj c Next J^g^b-j ^oj ^lljUlqJI >*j Lo M Lol ,Lfrio JoAqI iljLijJaj (Jjj (jl j^Qici II (JjQ 9 (JjtliUI 9 j-lrU I dJjLS ililgh^ ■ ~ ^/J^B- -^fl ^9^' 9 * +COmpTIA A SjLjiiIi jL^LoL 2L^Lii ^yJii ^IghMI ojjL ^Ul 3jlLq5lII ililghMI jj (Jjq 9 1 £ul2LII ^ju^j c ^n^7ll 4 jLlL^I cLL^jjq c 1 1 1 ni H t S Kmiq II ~« ^Ixag > flK 9 SKntflll (JX lIjLqQ ls?fl II PQ^l .agiij QQh\ II O Jjfc ♦♦ (jx lILI j XjU^v II oAiL ^.o ilijl JQ9AJ : |QJ^jLllq II JI9A1J • lJqIiiiII (jx 9 3 Kino II (jx gij ^jJI jQA^LaaJI JI^ij jLlji ^Jx L^jIj^I joj iljI^JLij dJ ^Jx J^jjlLII • cdlgjjj jdj ^ajlIEj JI9-UJ jqLqI (J^j Ll^ 9 jjq 1 10^ II ^Jx Ij-kgjQ iliJ^ JJL^J (J I lIILLl JjL » jOA^XuJjall lAi^g » SS SKnioll j9^J^ ^Jl ^j| (jjJI 9^ jjqho< II jjgjjL^ 9I jjg jjl^j (J9^J (J I (J^sqq II (JjQ j 1^711 SKnlQ II ^Jx JJX lILuI^ nil (J I t 1^ I LLL9 ^jIj 9I y\y\ \c\<\ I 1 n nril ^yli lIILLl J^L jJoIj ^jl - j_aj-Q 9 ^ pin II cuL^jq j±c i^Ai 9I (j^BLj [jJL 9I JjojLuI o » 4— IQi^fc II I JjL J Mi (JJQ-Q 4^19^ L^lc ^LLLJ 9 9I (JMjoaj j 9 LJI <9i>^ 0-° (J9^j Jx ^j^pJI SKA.II^I^.^II -1 ( Identify the problem ) ( ^ila^l Jlg-LjJI ) ♦ JjolajQ II - jj-u±LI Zuj&j - 2 Establish a theory of probable cause -) ( Question the obvious ♦ 1 1 1 1 1 1 1 1 j ij^U ^udoUl iLlL^I - 3 ( Test the theory to determine the cause) ♦ J^JI Jjiuj 9 SKnioll JjJ Jjqx c\h\ g^ag - 4 Establish a plan of action to resolve the) ( problem and implement the solution jjuI jj l!jjj^9 I jI 9 joLL^UI Lxullbg JjqL^ j (J I illi^jQJ ililgh^ /%^.v>qI cux Jjcl5Lj (jjJI (jKjqJI 9 lILLqx ^<>^«^ (JJJ^ ^Jx Ogl^ Jji ^JjijJ JO9BI l^9xJ 9 LojLuj 21 ® NetworkSet Issue 24 - April/ 2012 JL^j^/l J9L1 SKA^II J^j ^jb jl o^U -" .oJ I jig J^J 4iiL>Jaj g^^J ( supervisor) Jj^IiaJL ♦♦♦♦ 2 L^jIlq II LoAicg ojj^jq ogh\ II oAA ^5jj ^Jg^/I q jlaUI (^Jl ^ LqAjX liJJj JLLq ImlmnllQ )QX^/I ihnl l^f )lVll LiOLAJ J-LL5LJ JLlQ lAiL 9 J^fliCI II (JjQ-0 lILI J (JjQ jl£l A&5LO JjQ^/I (jLl^^/I J (j9^j 9I JL^JI ^ij gJoB Sac £^Lal (J9^j 3Kniflll JiSl^^l (JjQ ^JL5LO JASLJ ShlljjQ 9 SjLjLIlLQ dKnIQ II gjuci^ ^lc LlajloxLI Jjqx cU^ii 5^9^ lIijI 109HI0 L^AnVi 1 jogiij Sh^ II ^3 * jogHj (jl A5Lj 9 ojJi^^l ij_^9 IjI 9 joUolll Jull^9 JjqL^ jjq ^a^UI V[j HftiUfl LLC djJLOQ ujIaj hinii II ♦♦ ♦ ' LLlU ♦ ♦ Lo ( 2 jol jLu lJUa JiL ogh^ II oAA SLa^Iagl (jl AjjI gjQ jgjQ^/l ihni il ^Jl jJojI LajI J >^^l ^Jl >^^l (y* atL^UI di^JjoJI OAiL ^0 JO9-O-J SKnl^ll J^IJ LLcLO (J I A5LJ ' J I LjU lAiL 9 AJlLlJ J^mM JjQJLJ jL^JI (JjQ a^LUL illijjlj^/l ^lc Jg^jJI 9 (jLijI 9I ojjq J iy nil ojLcI Jjqx 1 £j| ^jqIj-lII ^Io 9 ^Jf 9 Ja5li ^ 3L219JI 01^ IjI £jLmJI JLldl ^ J I***)" 1 jogB-J ^Ljj^JLj J^gjQ jjlc cul LLl ^u^lgJI 01 o* ^LG 3L219JI JiLiil IjU iLj&ZJIj jLsi^JI ^LlJLlJI ogh^ II Jn7i1 liJJj ASLj 9 g^UI Ial ^ ^ 9 22 Issue 24 - April/ 2012 t 3 L^jIlq II J i ^ nil ogh^ II oAiL |c!j c l!jLjLlj oJxLq lIiaj (jj-kl ogh^ o7wir> II ^ JLll£LJ 9 ^Ij^JI OA* ^Jl £9^1 ^l5LQ ^Ul LLoiaJLQ (J^( ^yCLJL&LH (JjQ_jl jlifrjQ II gjQ J Lo lAifc 9 ^lc Lfriiilaj ^Ul JqK II gjuci^ lAo^ ^ ^jl o^U?..^ \^ SgJoiJI JllULg aiJIlAJI J^LlIdl IjI J-lclq ^jIlj clLq gi^j^, Igjg^j q ^g^l ^>q 3KA.il tfjgJ^JI ( j J Q SKiilfl II gJjQ 9A l_JJ9^ 9^ lAifc 9 JJ-£I ^lc 1 nngTi^f^/ lILjI lILI J ^isLi 9 J in?nifl II dKniall oAifc ^ ^ IjLJ LlLoiu jLjl ihnn dKniflll Lift 9 l jOJ&jQ J±C jqI jOAjQ j .o.» jol JJLt£ ' -LJ-LAiJ I Jjfc l^9^j ^Ul cLuLHgJI jjulaUl lUijL^ Lo LI £*Iagl ri ^y^9 ojjl^^I ogh^ II oJll ^Igjjj L^j J-Q.5LJ ^Ul S^jjldl ^jLc aaLsu ogh^ II olll 9 JMii ^>Q ^9jHJ^I 9 I ^j^JI J^nllll ^IZ 23 QjNetworkSet D v_> in i o II j^U yic ■" ■■■ Access points > all APs > Details > 24 ® NetworkSet Issue 24 - April/ 2012 Access Point Mode in Wireless Cisco Network LJg-J ^j.i..i Details General Inventory | Advanced General AP Name Location Ethernet MAC Address Base Radio MAC Status AP Mode Operational Status Port Number Primary Controller Name Secondary Controller Name Tertiary Controller Name 1252*1 IUWNE Module 5 0Q:ld:45:91:37rl0 00;17:df;al:82:b0 Enable local H-REAP monitor Rogue Detector Sniffer Bridge ^-o $ Modes J-c^c- ^Lua^l Lgxo-uj-j jl^j^fl $ tf> 3 U£ 3LJHJI UI 60 ojjq Lg-dl u cr UI SLLSJI ^Jl Sujti 13 Site cLlLqX- >q , ^ 7 m 1 » lIJJjJ 3 jLlqI^jI 3 jLuji ^oIj survey Received Signal 3jLij)fl jJa£* ^ Strength Indicator RSSI Signal to Noise Ratio l^i s>%AJJ SNR 3 QOOOOO 7 1/ WLC OOCOCC OOOOQO Local Mode AP 25 ® NetworkSet Issue 24 - April/ 2012 Access Point Mode in Wireless Cisco Network AP on Channel 1 802.1 1 b/g 0 XX > 13s Bflins 13s &Dms 13s eOms 13s 6Cms 13s 60ms 13s 60ms 13s [7] |~2~| 3 1 4 [7] [~5 I 1 | ^ l ^ ^ " ' " Round trip = 180 seconds if noise measurement parameter set to 180 AP on Channel 36 802.11a 1De 60fns 10» GOms 10* 60rm IDs 60nns 1Q$ 60ms 10* 60m$ 10s 36 40 52 36 56 36 60 36 64 36 149] \Z Round trip = 180 seconds if noise measurement parameter set to 160 j LgJl j 7 o j I $ dJLLS ^.i jUaju^/Lj lIiIj^-j ■■ jLaj^l 5 a£ j^-," 5 l ^" -"i" s^^/l Wireless Intrusion Detection *lL jo^^^i L±ljJ 3 S^^Ql ojj* jI^tkii >j>£j *Ua£.L ^L^j ^5iLJ System IDS a^jjl£j ,^ Site survey 3 Troubleshooting J^lj L^J ^.^Jl ,09^ 802. 11 b/g 1.1s 1.1s 1.1s 1 is i.is 1.1s 1.1s 1.1s 1.1s 1.1* 1.1s H H A 6 8 9 10 11 ll^o interferences ^ S ^ ; ill 1 1 cLj^j J I jJ I din II rQfl Q lIlLj^-j **«<^f I S^gj^l (j-^Lol jjlj Round trip = 11 seconds * number of channels 802 11a 1.1s 1.1s 1.1s 11s 1,1s 1.1s 1.1s 1.1s 1.1s 1.1s 1.1s Its 1.1s 40 44 48 6] 60 64 149 153 157 161 ~ Round trip = 1.1 seconds * number of channels Cisco Wireless jl^ ^Ia^jl^I pjs,-*. ^i^p Location Appliance Cr° J^ri O 1 ^' 6-° J 3 ^-? ♦♦ 5 J^Liuq ajj^jlI Monitor Mode 5^3^ 26 ® NetworkSet Issue 24 - April/ 2012 Access Point Mode in Wireless Cisco Network jL^L li^ jnvi gjj^i^j lILLU 5 SUgj J£J country code y ^ ♦♦ Config advanced 802.1 1 b monitor channel-list all ♦♦ Config advanced 802.1 1 b monitor channel-list US ^.i Dynamic Channel Assignment DCA 2lo 5> slc>JJ 5ujj >LII ^jI^JJUI ur Lc c aid ^- ^" 9 .ji^sii 11 ^6^1 ^^J^Hi 802.1 1b/g Config advanced 802.1 1b monitor channel-list DCA AP Sniffer Mode 4 Channel 36 ^ Analyzer Workstation AP Local Mode Collected Data Collected Controller ^oljjJI ^ $ Wireshark Airmagent OmniPeak ^jI >i ^l^j jjo J-asu ^^Jl I1a 9 jjULJI jjq ^ p ^■■■n l±IU 3 capture data od^J^JI ^jLjLj o^i ^.i ^^.%^?..t^n AP Mode Operational Status Port Number Primary Controller Nome Secondary Controller Nome Sniffer fvl H-R6AP monitor Rogue Detector Sniffer Channel Assignment Sniff 0 Channel | Server IP Address 172.29.129.134 27 ® NetworkSet Issue 24 - April/ 2012 Access Point Mode in Wireless Cisco Network p3 ft l ill sniffer mode ^ "<\^ ^j-UI MAC (J^kjJL lIlLj^j (j-»j-uj-S^f I I j^J ^Lq mi II *o jjlj tli Ljg-j ..*<^fl £. J£j ^/ 0L0 WAN 2lo^ ,cUa£jl ^5^1 Alt <*jLo li^J 3 ^j HnK MJ authentication UV..t 1 H-REAP £-^9 lIlLj^j A ^jjl ♦♦ Connected ^1 Stand alone L7 *^9 J^JI ♦♦ -Controller based Hybrid remote edge access ^1 H-Reap j^JI jJgyfKll ^oIjjLLujI ajj-j LqaIc duoljjLiujI ^o7 1 point ^ lIUSj "' (j-aiia i J ^j.i ..io JoSJ l^iU WAN a^uij jjijiiUL a.£. JajjJI 3lcj^ J£j y (jl 5 I Round-trip delay M SujxS ^ 5 DTIM : Delivery Traffic Indication Message 5 broadcast JjLu j JL*j jl ••■'jj ■ 0 .....iil 3 beacon .IjI jLiil JjIj^j u ..... dl oIa ^ 3 Protocole PPTP Standalone ^Lc J^si z^^^yA) o±$] j^Iaj p' ^" -' 5 l^ii jl >5 jLaJL jI jjIj^j J^^Ij jJ^jiiUI ^^Bj ±i^p Local authentication ^ Backup Raduis server ^ ^ in HREAP jjUIS 5 pLq^j^L 3u>jL5 JL^j jl jjlj jj-L^j a ....*oJI AP Bridge Mode ** ft ft ** ** LOCAL cLil^ j.». ^.i ^^Jl li^ ^ 0 1 240 ^ 1 1 30AG ^ 1 500 ^ j^L^j a ,mi^l 33^1 ^^Jl 1^ ^i^ij 30 Issue 24 - April/ 2012 WO. 21 BtHlrtwOTl MO. 23 : fsu -. NetWorkSet First Arabic Magazine For Networks Lli 'j 'II ^ " JjJjjijiJI (jgjjnlj Real Time Transport Protocol j LflJI J_QJ I L L I Gns3 Error 209 NetWork Set NORTEL First Arabic Magazine For Networks 2012 jLsg LL>**Ji£LJI J-Lqs f © IP Sendee Level Agreement Q t AirViagnet r_JtjlJJ What Happen IfBLVisLost NetWork Set First Arabic Magazine For Networks 7 Server |0>Li ,jd] ^Luaj' Jj& *~- — y g_ -* ® * • 1 I SJ UjJI folliiObujI Fortinet n I J 1 ^ 1 1 1 Jxiiuj Jill Jfi lj 1 II j j 1 ttm 1 ■ 1. p| 1 rtilrti l 1 j-i rj 1 ■ AiX 31 Issue 24 - April/ 2012 lirectional Forwarding Detection (BFD)? , A mcation □ J^liHUAWEI DATACOM Engineer 9 CCNA . CCMP.MCPojLui ^ jjijjali. Atempo Time Navigator mabroukianas@gmail.com i" 1 " :" mil MOROCCO (Bi-directional Forwarding Detection (BFD ♦♦ o-c .dJj ^ c Forwarding engines^ JJ-5 SlEjjJq i jjq^j j «^ ^ overhead <3j>b ♦♦ ♦♦ ♦♦ ♦♦ . mediae BFD : (J^S^jgjj o->^9< 1 data plane ^Laj^fl JjSii ^ BFDJuIl^j SLj^jjJI ^5%j^jjJI . next hop ♦♦ Open Shortest Path ^ Sll^UJI oi^ Ldl^ ♦♦ First (OSPF) <, Intermediate System-to- Intermediate System (IS-IS) c Enhanced (Interior Gateway Routing Protocol (EIGRP .(Border Gateway Protocol (BGP ^ BFDJ^ ^ ♦ ♦ jjq adjacencies *Liij)f BFDJJ L-iib ^ojj-qIj adjacency ^ALj neighbor . BFD process J^LiJI . session pLiuj J^La^ structure LqaI^ co^i^ SlLjLj ^ hello ajUu jj j^i ^jJi c Up^Jj J9V1I9 Session U nimb ^oIj receive^ transmit^ ^ ^JJj BFD control^ JL£IjI qU^J ^ -Sj^I ^hvo .pseudo-preemptive BFD process BFD control JLil^lg JL^j jl ^ uitf bJI Cisco Express Forwarding jLm* J>j>la c>& oaaIj (^^j ^1 >L^lUI switching ♦♦ ♦♦ BFD joj^ .process ^imn ^i^queuing culp-c • neighbors^ 3 j^Ljq unicastj^>i ojLc- l2jL£±AJI od^ pLLj ^oIj iidJjJ IjJa-j ^ cL^Ii^ (Redundancy ) jl ^Ul ^jq SlJLc jj 5^ j^Iaj Redundancy 11^ SlJLslo l-j^ >qJI Jj^Li ^ , A*tlS ^ ^Jj j5>oJI >^ cu^5j 3jUj ^ (failures)J^iiiJI ♦ 5^JjjlLJ (J-J J-jJI jLllLqJI J ■ ; ^yLc) ljLlI5/I olib jj^^j LoaIslo .LlLsJI L7 Lc ^5^5J 5> JI m Vo " (jl UisJI .-.is.uii (Jj^I (jjs j il ^ j LLa-jl / ^-Lll 3 LaLa II L^L^-ljIjJLujI 32 &NetworkSet Issue 24 - April/ 2012 3JLa ^ session J^a ^ BFD",o> ^ o ^j-j ,3U jLlLqJI control J 1 nTnip II jlfl^ II J-l.2 (jjQ oL^Jl (J-S J nTnio detection^ transmit intervalojL^I ^Ic j^sJI ^b^JI ^ ♦U^-J-c ^^LqIqJI multiplier ♦♦ ^.i didl^uQ A *«< lIjLo^I lIILl^ (j^^j a£ c^jjqIjjlqJI Detect MultJ^>JI SloxS ^Lli u K q II jl^JI transmit interval^ ^ D>k^l jl^JI culc J)oYq II BFD :J55u^>j ^ 202*1 .2 Jblil^j LqaI^ • BFD9 OSPF jM^v^j du^^j c(1 SjhMI) neighbors 5 t dLh^ 1 OSPF pLiu)/ ^i^oJI BFD process ^Jj L-iib J^j>j ^J^fl SjhMI ^ i niVn^pll ^jJI ^session pLiuL BFD process ^JJj *su (2 .(3 s^laiJI) OSPF neighbors^* session 2. OSPF Informs BFD 1,OSPF Neighbors 2. OSPF Informs BFD Router A 17Z1&10.1 v 172.16. Router B 3, BFD Neighbors Formed Bidirectional Forwarding Detection O^^Li (.aLLs (Jj-lJ jLuUO tdl j rtS ." J^iii J^A^ Ai£- . JjaJI (2 s^iaaJl) down aJll BFD sessionj^ oU Cr L^JI OSPF process jb^L BFD jq^Sj (3 ii) reachable asj ^ BFD neighbor OSPF^o^ OSPF process joq^j j±±W ^3 ♦ ( d^u^n) neighbor relationship 3. BFD 3. BFD Informs 4 OSPF Breaks Connection with Neighbors Informs OSPF v , OSPF * x * 172 J 6 JO. 1 1. Network Failure 172,16,10.2 Router A _ _ _ , Router B 2. BFD Breaks Connection with Neighbors < x - OSPF NEIGHBOR RELATIONSHIP Asynchronous mode to**^ ^ BFDj^aj j o^liJI IOS,oliaj c Demand modeg ^jJl9 c Asynchronous modeJaai LJb. a£.±i BFD controf J^j>i a 0 hi^l c(>qI>u>JI (j^Q; II Lg-ua5Lj I BFD control ^ Ija^ ^^Ij ^ ^ IjJ ■qLIqJJI^JjJ (Jjq ^jJI^UI ( ^ r Lc l^;"«^ Lg-LLc> (j^l qjlq II J5%j^>j . sessionJJ downo^Lcj ^ 24 ojq 5Lj5^ ^ JL^j jj ^ iQiVj BFD localDiscriminatorJJ Sjj^JI (C u£JI jr^" ^ 1 remoteDiscriminatorc min_Txlntervak DetectMultiplier$ minRxInterval Jujail localDiscriminator : D Ij-^ ^ a±*3 (35^j (jl L-i^ji BFD session ♦♦ .( non-zero) ^ jiu^j remoteDiscriminator : D ^UbUI ojLLkl ^Ul Discriminator ^ La o II ^ol i II LqLqJ ^qLqjIj ^j^fl ^jjqjJI J^aLiJI min_Txlnterval : D ^IJI BFD control^ JUIjI^ ^ : m^j< : ^h ; ^ ml IAIN ^ j ojJI J-uaLoJI I J.i^ ^j^fl ^JjqjJI J^aLiJI min_Rxlnterval : D BFD control,o>^ JL£I^I ^ .*r*\ A *jj<^\\ : ►djQlj-ajUAil ^oU^JJI Ij.^ Aj^j ^jJI ^^LojJI J^LAJI 3LoA£DetectMultiplier : D BFD control,o>. JL^j> cuic u ^iav^ii tliia^JI (j^iLj l^^lu ^ j 1 97 qJI Ij.^ ^-0 L-j^j-ua ^ ♦♦ s session JAi ^ a.^q 33 ® NetworkSet Issue 24 - April/ 2012 .BFDjIjx.1 dLuLt^g BFDJ dUA^UI lj^S^jjjjj pi ■*■>■ '''■■■< ^ ■ " ■< jJaJJ Lj^x. J x a i4j a-iLi c l?JI link- ^ s^jAJi jjI jl^j ^j^j ^Ul neighbor down eventjJ^ 11^ . OSPF relationship ♦♦ ♦* c(Shortest Path First (SPF J±slZ£ ^ ^ J£ Su^lWII (state advertisements (LSAs >'*<^j router ospf 1 no] bfd all-interfaces] k interface^^ RFDj^oa?. ^\ LiaJ o$u^ :3lJIUI ^I^M [no] ip ospf bfd [disable] : BFDdJL^ \**"x ^fil cLJLUI jjol^fl 0/RouterA#sh ip ospf int e2 is up, line protocol is up 0/Ethernet2 Area 0 , 16/Internet Address 172.16.10.1 Process ID 1, Router ID 172.16.10.1, Network Type BROADCAST, Cost: , Transmit Delay is 1 sec, State BDR, Priority 1 BFD enabled Designated Router (ID) 172.16.10.2, Interface address 172.16.10.2 , Backup Designated router (ID) 172.16.10.1 Interface address 172.16.10.1 , Timer intervals configured, Hello 10, Dead 40 Wait 40, Retransmit 5 • BFD JxS pj Show ip ospf neighbor detail RouterA#sh ip ospf nei 172.16.10.2 det Neighbor 172.16.10.2, interface address 172.16.10.2 ,0/In the area 0 via interface Ethernet2 BFD enabled Neighbor priority is 1, State is FULL, 6 state changes ^ 0/B. Ethernet interface 2 9 Aoll^ ^jl^?. t>o au,..,, ODPF a < i ^lUI Jlijj>JI ^ 0/Ethernet interface 1 Jia ♦♦ ♦♦ ♦♦ .OSPF process^ ahii >qJI interfacesj^^ L7 Lc b^ A ^ BFD 34 ® NetworkSet Issue 24 - April/ 2012 0/interface Ethernet2 ip address 172.16.10.1 255.255.0.0 bfd interval 50 min_rx 50 multiplier 3 i router ospf 1 log-adjacency-changes detail network 172.16.0.0 0.0.255.255 area 0 bfd all-interfaces 0/interface Ethernetl ip address 172.16.10.2 255.255.0.0 bfd interval 50 min_rx 50 multiplier 3 D router ospf 1 log-adjacency-changes detail network 172.16.0.0 0.0.255.255 area 0 bfd all-interfaces RFnjc.v«j OSPF^I <>o ^ BFD sessioruLiij] j^zishow bfd neighbors details RouterA#sh bfd neighbors details (OurAddr NeighAddr LD/RD RH Holdown(mult State Int (3) 94 1 2/2 172.16.10.2 172.16.10.1 0/Up Et2 Local Diag: 0, Demand mode: 0, Poll bit: 0 MinTxInt: 50000, MinRxInt: 50000, Multiplier: 3 Received MinRxInt: 50000, Received Multiplier: 3 (Holdown (hits): 150(0), Hello (hits): 50(8605 :Rx Count: 8607, Rx Interval (ms) min/max/avg last: 56 ms ago 49/72/32 :Tx Count: 8609, Tx Interval (ms) min/max/avg last: 16 ms ago 49/72/32 Registered protocols : OSPF Uptime: 00:07:08 Last packet: Version: 0 - Diagnostic: 0 I Hear You bit: 1 - Demand bit: 0 Poll bit: 0 - Final bit: 0 Multiplier: 3 - Length: 24 My Discr. : 2 - Your Discr. : 2 Min tx interval: 50000 - Min rx interval: 50000 Min Echo interval : 0 #RouterA 35 Issue 24 - April/ 2012 RouterB#sh bfd neighbors details (OurAddr NeighAddr LD/RD RH Holdown(mult State Int ( 3) 142 1 2/2 172.16.10.1 172.16.10.2 0/Up Etl Local Diag: 0, Demand mode: 0, Poll bit: 0 MinTxInt: 50000, MinRxInt: 50000, Multiplier: 3 Received MinRxInt: 50000, Received Multiplier: 3 (Holdown (hits): 150(0), Hello (hits): 50(10131 :Rx Count: 10137, Rx Interval (ms) min/max/avg last: 8 ms ago 49/64/32 :Tx Count: 10135, Tx Interval (ms) min/max/avg last: 36 ms ago 49/64/36 Registered protocols : OSPF Uptime: 00:08:24 Last packet: Version: 0 - Diagnostic: 0 I Hear You bit: 1 - Demand bit: 0 Poll bit: 0 - Final bit: 0 Multiplier: 3 - Length: 24 My Discr. : 2 - Your Discr. : 2 Min tx interval: 50000 - Min rx interval: 50000 Min Echo interval : 0 #RouterB ^ SlIaAJI Jiiii ni/V;5 SIjI ♦♦ 36 VNetworkSet Issue 24 - April/ 2012 PHI II III EGYPT cLLt ■«!■ "i<- IjUJ LiLLLljl a£ 5 »Ii ^1 £3-^39^0 ^1 jj-ujI (jl LojIj l!j jqjlj < v . . 1 ^o^jjl^ cLl^qJI l^jIj^I jjq J-cLqIj^ p^jLSJI ... ji a ji^jl£j| t 53j> l iij| r (j^lj (jl l±l1c la j .2jL£ ^1 i^yiSL) cl (J-o-slj .... 3 1*1^9 1*1^9 I ^ I c L J_u^L^ ^ij ^1 ^ ?JI jliu IjUJ ^^CCNAji^l ^ l^J ^j^UI ♦♦ ♦ ♦ ♦♦ w pLgljl^ S_jU^JI^ oLu^iJI^ olJ^jI^JL Ij5>q S ^oJLsdl ^ CCNA SjI^Ij ^ (>jlL^LJI ^ c^^^^ MCITP 3 CCNP ^ (>jlL^LJI J^Ei Jj^^9 ^-ljL^ (jjQ j^jo^/I ^1 jia 1 j L^jIj ^j-SlII 37 ® NetworkSet Issue 24 - April/ 2012 5_JI J-i-o t-Lic. u i\'\i (33--JI s^LqJlII oL_jI 2Lojj_og i3^__JI ■ II _jL_i j5hH5^5 "■^"■ gAi-Qj .".!<.. v. II ■■< >jQ _jLr__o _jLo_A ,o__u "■'<■■••■ ♦ A > All ♦ I ♦ 1 *t ♦ ♦< SlS^Ii IjI JLLcJI Jjli_oj ^^idl ^1 J£j SlLqL* 3Lo_iL_3 oj ^L_£±_ii uKi ni IL cL_oLk 3 1 5 1 1 Laj / Jq-L^. qI -_jLslu-o ^Io__j tpllajl SuIaj __i__jLLqJI olioJI :o--ioJI jLllA' _Laj olioJI >L-J • J3III ^Jl Lfc^lag .di^j-i -_J_j_Vl_Q_Cr jJlj 2Lo_>3LQ9 (J-o-sdl (35-uj j 1 ^ ^^ ^.J-c :LLc__JI LL_a__JI _-6_i_* ojq ^J^l J54AJI SuIaj ^ nil (j^SLjg clL_Lo_o cL_^_jj_i_j j-i-SI <_^JI (J-L_aj ^/i ^ ( ^J_c l-q^j^q II (JLqJLj X9 ^j) Q nlf) ^I?^j-uj ^ J ^1 l-J-SLJ ^jjO d_J J qYm! Lo (J I _l_JLj^ _d ^JJ iiuQ l_i_J J-li5 ♦ j II J IK .iJjoLol ^o^j _lslj Lq^j (_£jj__aJI .U^UA.? II SjIqC <"i qqII (j^fl ^O-ujI LgJ (J^^J9 L^H^Jjfh J )<7n1 l-LO^JI J5J-0 JjQ^ (JjQ ^fj-J^ pl9 I 1^)9 j 7-5 1 (3__i_i__J I ^1 -i-^l^-J L-jlj-J l(j K gnih^ ^.i __jLS jAJI l-jI^-jI I^SjIaj (jl O-sL-JI ^oglpr- I^Ij-lj (jl l^-L-ai jUoIj^I (jjQ AJ9 ^1 qI og ^ I " « I o ^ jiici 1 ^o.i_- (jjQ (jX- < A i"s 1 1 (jj lIu^j (JL-^ (_^A9 ^ qjJLqJI q a (j » _1i5lLo_L_jI I jI :_dU L7 Aj_Li cd-o_c ^.lc ,o__-qj xia^ ( c 5> _Lq ^1 Jio ^-095 -^i^9j -XlqJ U^U^7 II 3_j|j_J| l-1jlLc> L_^| __l__J| : Jio g^^iJI ^ .dljLi Lq ^1 cuJI (j \\o\sd\ j j_c^ r^j nio du j.iiTni (5-iJI JLqJI _-Q_lgJI d__4J-iiJI ^qJ^ (JjQjJI (JjQ Oj-li l_-LlLc O-U j_d____JI -jtJJ o-^goll 38 ® NetworkSet Issue 24 - April/ 2012 ♦ ♦ ♦ ♦♦ Lo ♦ ♦ ♦ ♦♦ J-LOJ-L ; L7-^ (J ^[9 jlj Q?niL ^■I'SLjLLq (J-o-SlII (jL^jQ ^i jlj qjLujLj j^J^iJI^ pLo-Lfc^/l^ ^J^fl L* ^i 2L£ j^idl ^ JiLi^JI 5^ o^l of dLL^i 5^ Lof ^11^ >AJ pjMJI JLJI ^LlLJ ^i C- t t cLLuj j^jjo J-j-i lILI J-j LlL^ua-jj Mi 5^-ulJI J-o-£ ^Lj^fl o^iu Mi 2LLi>Jl9 o nvntll diLi^l j^g ui II (j^>9 i lILlLc j-q-j Lo-Jj-i ^-uJ^UI ^f^i ^i >V..i l^i^^ ^ < j .Vt 1 1 j (g PS 1 ^i^jjj , 1 1 n j ? 1 1 3Jj^jjo /.i . (jjo ^ g T i 1 q jLaq J lIL^^JI lIJJ jJ «t!ii^JI» ^^jij ^1 J-oXr j_Lc LLLo j i/Kll . L^-C^j-iiuQ ^oLqJI (jl (jjo ^ox-jJI ( ^ r Lc dlli^ tlii^JI ^i U>jIj ^ ^ ^ T j ^1 l 4 ^ p^iJI ^i dX-LuJ 24 1^^^ ^o^jjJ J nl ; 1 1 (J_£ pig o II tiiLiii JL^ ^i (J_SJ cuJ^LlI^I pLgjo ♦ CLLuJ (jjQ ojjl!^ L->LIi jjQ JjoLsllIiaj cLL^j-oJI od^ ^i ^i p ^ * 1 ^ ^ ■ ■ 1 rO^-jl J^L^JU jIj ^.Jo ♦ «J-o5Lll 39 ® NetworkSet Issue 24 - April/ 2012 LjI^jJI (J-S (jjQ o ^-o Lsllc^ ^oIjI^ J^idl <3j>o J ' 6^-? 65 £5J 6' M^r! _ ♦ cLuJ_qLLqJI ^jJ-C- jJ-QJ^ (J-O-SJI J^juJ^ L _L^|^U j|j qTmiL p I ..»n*t yj£ IVi J^L^g d^J^UI JJ^ jJ_C 1 flSI _ ^ojlLslLII ( ^_o L^^u^jqI cLL^J^ oaj-Lslq JH^j iIj (j^jLsljI ( ^ r o l-j! 1 ni II oj j-S 6 (TXfftl mq Li52_o CU\J_ci £j6 ■ ■ clJLoLuj q ; kw'i - £udIq jLuijJI \'\ ^Mi A_loj^ ' i "il i'i cLoJliio cLuiLcl (T> 41 ® NetworkSet Issue 24 - April/ 2012 ^.A 7 j a ^ irt_LcXt ■ "* ■ I - * I flit ^ I f - J "ll ^ admin @networkset 1 IPv6 ^ajSI) >j LjI cLLlqj^ m! lIjLlIqjLII ^qJI-C^ i—Ujlj*$\ jl-L^I ^jLLj (JjQ jo^JI jLiitl Lol IPv6 JJ ^LrJI lIIlq ^ m1 1 Lo l±I^J (j-ojLo l J_c^_c ^ol^oJI Clf)J^^ 6-^-1 (jjQ ^LUl JJ-SlII djL^LlIil lAjJ^aJg Joj-Ja II * JjJLL 5 >llcUI SujJ^j o-c ^j^j Lolp SlU-oJI ♦♦ SSS LgJ J3-L^ ox- 49 IPv6 Jl JOgJ Ligj^j 42 Issue 24 - April/ 2012 ^Lj-H^l d.ij-S-oJ cL^LilJJ ^lujjq J-o-c Jl 2lJLq-£-j 3 lc 1 ' SlsljIjJI ahni II • J :? " (^-lj ^a^j ^1 Translation ♦♦ ♦♦ (jM-L^JI cLo^j-j J-o-s-j cLJf lIjLSj-iIJI SJLc^ ^Jj ^H^j ^jajJI Jj^JLj J-o5u It I! ♦♦♦♦♦ 1 I ♦♦ ♦♦ ♦♦ ♦♦ , k> q II 1 1 1 dJgA Qj(g ^ I ALL^J O J-Q5LQ ♦♦ Jj^JI {jo IPsec Jl joUiuLJ L^Log IjjI^ l^j 65^ c^J^Lj Jj* ,4-j-l^LJI (>o jJLo 1 .1^ ccc lIjLu-Lu LgJ 03^; Lio^u *ol SLuL^jj ^ 1 q-jI IPv6 JJ ^-oJLsdl p ^ * 1 1 cLlujLLo-j jO^jJI q-lLslj jUojuL^ [g-j^ nTnil jJ> IgJg^j 4^' cr^«J 1^ <3^ L * JjJ ' J^' 3 ^liJI ^jA" ^jjj ^IjLo .lllSLiJLsiJJ a l DOSJI ^LJli ^5^/1 3 jlAJI ^5 SSS DDOS Jl ^JIULj^ LiLsubl j-jjLg >f^l r o^^ 1 ♦♦ liJJj <_J-C- -ij^ J4^' • 340 ^ Lij^jj ^Luj^I a '<■>■ n' Jlai Jo&j (jl Jjjjl 3J (>SJ ^1 o5J>i o_9J>i L^dc .i^iij ^1 Si^^iJl ^ 3uKIj a^iii UjIj l LjI o^Mk ♦...^Jl^ (J5jJj1II jju 5^ C ft * Uo,^ £i)j_J nl ^^b^oJI lj.i^ (jl #QJXr| ^J^f 1 0 5^ jJI^ (j^Jlij^JI ^Jj J££-I i_0^uJ lJJ jj I jLo l-i^L TSS a<.Aii ^ ^JJ ^Lui ^oJ 1 8 oj^I suLo^i j^likJI^ jiiijiiJi ^ a^ : m a^itiii (j ^ i lT i ) 5^JI ^Ll^j l^o^JI ^ Ci >2Lj 43 Issue 24 - April/ 2012 CISCO A^Jj-J _>» 3uQ_lILqJI Col_Q-_JI (j sherif_sec@yahoo.com l_>JjJjJI ^jJLc QJuoJ IjJl_.jJI -I - « ft « ♦ VPN 3u_aliJI Su^l^Ii^l c>_ioj LoJliai, aJa^Ldl jbi__j^l 3iid_UJI ^r: 1 """ Jj'^M Jjaj (_9jJ_3^9 Leas6d-Line J^Jo_k o-lJ, daAsili} o___fc -oh Vfnil ^oT » IjLoIi (jjl Su.n I oT H <*l m»7iiII ^.i I^V i L_lIj_^I 1 q V ^ ^ o (j^jJI ^3_LII jLl±__J Lg-i-o JJ r ^-o-jI-q -IjK i mi II l~l ; iu^ ^ ♦ ^<-*«^..< L_Kl nl 3J-LJ LgjQi.l Vfnll 2L_Ll___JI jjo 1(3 h ij ajjJ Lr UI " ^ II SLSLlAJI (jjq ju^I ^-0 3^l*^> a< ; **h ijLi, Authentication Pre-shared Key ^lljUlq ur Lc jUi^I c>1^j Digital Su^jJI *«m ^ jUIc^I ^ Certificate l^J Certificate 4 a< ; .*tM ^Xc, Authority JjjIj IjI JLLoJI J-U-nJ ur iSLQ, JjMj^^UI J£ (jl ^1 Full-Mesh Topology l^?; 1 Ojlj^fl cLlS_u3^ SjJlSjO l2jjIj_C^/I ^9j cr^- ^1 oTr-^l folj * Q 1 1<* J) I Kl ililj-J^jJI cLlOJ I q I 1 » , d *S 1 n 1 1 1 l_lLS Jl o'^-^ Spoke J£ Ju>sij c aiJ9 5 Spoke ch^LLc ULu Static IP o^Ij ol aj^ ^Ul Hub Dynamic IPs £1 c^JI <>a Spokes Jl ^^^H : 3jll£jlII (Jju^LajLlL ^ * Q j j ^IjAjL-jL^, j 1 n ri^i Y 1 1 gcLi Lqj^J Lj J^Lo J^L&ju L^jI ^I^JI (>^jl (jr^- ^6-1 ^ Lg-J^f djubl^Iil J_^j ^ IgnAl^l (CUJ ^JjJ^J Jj jjLjQjjI^ii - Encryption Algorithm yj^^wx - Decryption Algorithm yj*zx\\ ^ \y±\ 3 - ISAKMP £juL£oJJ JjLU ^jLuqjjI^ Digital Certificate 5ull 3u£j5*9 , VPN Jl ^LajJ Lr UI ^jA^/l SLg^^JL dLaj^ail <_qjJq J^ lit! Encapsulation J^ ^ c^i >J^JI ^ LgJL^j jl : (jjj (Jr Lc ±q2su 2l1±AJI ol^ 3 Ig^iAj d-o j^JLi, jiulLQ (J5^ri ci ^^Q 1 1 J^ 45 Issue 24 - April/ 2012 : VPN Jl^ j;<""" C * £ 6*° r^i J^ L ^Ic l1Ljja£ L7 Lc J_j ojIjxJ Lr i i \Q O jJLSjQ l_JLsJI CT i (J5^J Lg-J^f iliKlnlll GET Jla ^<;AH ol^ ^ SdJ^ J9j (^1 ^Jj J^oj LojJ-cg, J3%jojjJI lii* ^ (5>kl a< ; *. ^JJ J^^JJ Spokes Jl ur Lc Sjq^qjq a< ; *tH oi^^ 5 DMVPN Jl J^Ia ol^ic Hub Jl (jjo y lu j L^Aic jAl Spoke u o n 1 1 ojjIjLjjO SLLS ^li ^oV 1 1 Spoke Jl lj-<£ JL >oJ y ^9 Spoke-To-Spoke Tunnel . Hub Routing Protocol Sfli^ II ^og i igLLcg d i K qJI Spokes Jl (jj^LLc j^^idl Multicast Jl ^LiLj j^Joi^ ^ GRE ai^AJi t^>' djj^JI Spoke Jl 11a cd&i kdiifr Lo 46 ® NetworkSet SPI Firewall Issue 24 - April/ 2012 i <3jj lJj^ ^rUI 2L2jLkJI J MA (j^ 0 I^Lo (JjJj-LgjQ M^lU9 ^Lfcl » Ojl_LC Jj-ij ^l 5^JJ J^oj ^LiLuJI jo> ^l .LojLj Li SPI Firewall Jl ^ Lo 11^5 ♦♦ ^ y>h uiiuLj ^ii ^JJLL^ o'L ^jLUI jl^aJI -'KAj ♦♦ ♦♦ ♦♦ ♦ ^LiLuJI ^ ® www . N e tAJO rkSet.net SPI Firewall (jjO L-im / _ IjjLoJIjl^^JI **^" ; " cLlUjX. (J-lqj sljgjjiJI SPI .dJLuft* £j ^ .^^l 5 I Su^HII a<..--.n 5I >L&I a<..*.j ^^Ul ^LJI ^Li Firewall Su^jliJI ac.Aiij (a±J>iuJI) 3ullljJI a<.*.n ^li L-dJa-j I i a (JjjLoJI L-LujLa II jOg"j '.'.^ ( "■ '■j'* 'SH) ^ SPI Firewall ^jLUl jLl?JI Lj^U JjUl ^bJl ** c (^jLlll jIa^JI JMk (jjQ lIjULuJI jojj^ j-lslj LqaIc^ >j£liJ3 ^LjLJI <>o < 3^JLIL ? SPI Firewall p^su C J-ii^-oJI J-Qj 1 Ml L-JLLaJLilJ (J I J-SLJ ♦ .UUA. 0 II ^ I g 2 oIja^JI ^1 Firewalls Jl ojq Sj>i5lLo UI^jI ^JJLi^ lIjLqj^ lIjK 1 mi II 2uLq^J ^jjLjLlu cr UI SujLLII ^_ir) I MiL rpl^"* (JLLq-II LljI ^f] . j^LgJI • J&u «i<3 SPI Firewall Packets Jl 0 ^>^a. 5ujLUI ^1 j^aJl ^ ,05111 11a ^^Bj SPI Firewall f>$su dijp. . .iij^^l 5 I 3u?.jLaJl .lijK Ijj Lo Packets Jl oi^ (>i ^aaUL ♦♦ Destination ^^Aj .dJi^ . jliJI^ SuLkljJI ^ j;ov..« 0 n 3I49JI ol^ic ^1 Address 3LiLb)fL . Jo^j >oJI jl^JI o^s 1 ^ $ Source Address U£ . Port Address $\ ol^ (>o d££^J JL^j)fl pLIJI ^LiUJI .IijI^ Ijj Lq ^JJL dil yi iiiLj LLc j : ^UJl^ ^ijAaJI jl^5 (j^Li I I I I I I OJJ j^AJI ujrJJ o-^goll 47 ® NetworkSet Issue 24 - April/ 2012 jJ^LiuQ (jjq Ja1£UJ 1^ SPI Firewall joi^ (jLo c 3 J J Q I r - a n ij U i a nlj7^ I (jil , L— ll J II Personal uQ nii SujLUI £ jl^JI ojq >kl ^ .d-ILL* (jljjjiJI (jjq £3-i-H l»l^ ♦ Software Firewall Lg-aolag Luj ^jUI^ SPI Firewall ii5Lj Zl^ij cLiL SPI Firewall q 3 j jl^JI jjU^JI UnA SPI Firewall UIlj • l^ikl j SLliAJI .^JjJLoJI l_l^jLJI jjULj ^L^qJI j-Lq ojq (^I^j LqJ SPI Firewall .LoJ-QJ jl^l (^J^l ^l^-j) ^X^J l-LJL^-J M I QJLuJjQ Lq-JJ^ HPciiiuii (jjo (J_^ (JLq-qJ) I £_q_Lj (j! dill (JL-ljJ^ HP "'I 1 j^) "* (jjQ ^l^LqJ! (JLq-qJ) die LLq-L^-j Lq toc^-H (J o ^ * » » 11 ^ojjjL i_q^jjlqJ! HP "'I 1 j^) "' (Jy 3 ,n a Q £jH o-c- (3.9-^ i_q^jjj jj_sJI IJl^J ^JLqjo^ , HP ^o-ILc jQ (JO^Ll (jliJLJ^JjjJ I I Ai2^ I C i Ui Slot Module ^oIj Switch 8206zl Chassis layout The Switch 8206zl is a rack-mountable, 6U-height chassis. The interface modules are inserted in the front slots, labeled A through F. Management and fabric modules are labeled MM1/MM2 and FM1/FM2, respectively ^n^Tll o j5^=> o\jz 9 port 24 Module J! ^t^j J9Q95A System Support Module J9095A System Support Module J9093A 82002 1 Fabr-k Module* J9092A 820Qd Monqgenneril Module- 2nd Monagemem Module sl oS A-B-C-D-E-F-G-H-l-J-K-L^ ^nJ yUL ^h 9 Slots ^ j^d ^ ^iiij^JI q^Hj j<.mm 0 <- 1 Fabric Modules- 2 Lg-jk Modules >;-^j wj..«ii jAb c^xsllj L^lsu Modules J^uj ^ jy... 0 n ^ 5 Gbps 14.4 dLLs-^j (j^lj Link Links 2 ja5l» cd^^ Tunnels J^jjJ^ c>& ^Ij^ a *,?wj.., GbpS 28.8 {Q(?rw)Q7> o (J5^lq 49 Issue 24 - April/ 2012 Management Module - 3 dLiLb^L ,CPU , RAM, Console Interface LEDs ^Jl « ^ ^ S E9 □□ System Fan Tray - 4 Chassis oj\y± a^jj L2i*iu j! L^K (j! j^jJ! j^j jbj^ Chassis oj\y± Power Supplies - 5 Management 9 \ Power Supply ^! ^u_aj a-uL^o! 5^5) Power Redundancy aJU ^ p.^T..*^ ( yxsul) pLIj! J^5lIL ^o^^j ^3 Power Supply I^Iq^VI ^ Ic.U ( wj.,,11 J 0 r r l;*.f MhHiiIp Power Over Ethernet aJU , ^ a±iLb! Back PS3 0 Power 2 ^ ^LJ! Ji! ^ Supplies Power 4 o^Ij Supplies (J-q-SLj 1I0 ft J_^J^ r) *N » (j I AJ ^9 J^5Lj a ttlH)inl l L ^ Slots 6 (J-j-S-iliXJ ^-gju-La J^jIij Power Supplies J! 0,1*3 50 Issue 24 - April/ 2012 • jj.^u ■ ^■■■^jvii ™ Modules JK^^fl^jfai^^JI^Li ^^(j^l^- Fast Ethernet J^Ijjo oi^ i^.u . - - - . . . * _ ****** **i ■*** ' .******. i*** ****** ****^B ffffff ffff ****** ****** h ¥¥¥¥¥¥ B wt • 4-pdft 10 Gt'E SFP- . ****** ****** • fffff? H HP ProCurve Switch 821 2zl pSii ^J l 1 -High Performance 2- Security ACLs (per-port) 3- IP Routing 4- Supported for IPv4/IPv6 dual stack 5- Resiliency- Redundant Power Supplies, Hot-Swappable Fabric Modules ^ High Capacity dlpj >ni 1 ♦♦ ♦♦ ♦♦ Layer 3 J^j IPV4 andlPV6