Network Wizkid's Technical Knowledge Base

In this article, we will take a look at how to configure different types of NAT on the Cisco ASA post 8.4 software code. Accompanying this post is a video demonstration covering what has been discussed in this article. We will cover the following types of NAT: Static NAT Dynamic NAT Dynamic PAT Identity NAT Before jumping into the demonstrations I will explain the purpose of each type of NAT on the Cisco ASA. Overview of NAT NAT addresses can be defined as the following: Inside local address: This is the IP address that is assigned to a host on the inside of a network. The inside local address is most certainly bound to fall within the RFC 1918 reserved private IP address spaces. Inside global address: This is a globally routable IP address (public IP address) that can represent one or more inside local IP addresses to the outside world. Outside local address: This is the IP address of an outside host as it appears to the inside network. Outside global address: This is the IP addre...

I've had many people reach out to me over the last couple of months and ask if we could get together to share ideas and methods in order to attain the CCIE Security certification. This has led me to write this post and hopefully have something productive come from it. I've been apart of internal/external study groups before and although it's nice to meet people within these groups, there hasn't really been any structure as to how we can actually work in tandem to achieve certifications. So, today I would like to put together what would hopefully be a productive and valuable study group for the CCIE Security. With that said I've decided to create this post as a call to those that want to be apart of a new Cisco WebEx Teams space that I am putting together for the CCIE Security certification. I want to keep the group as simple as possible but with a strong focus on REALLY keeping the members of the group focused on the task in hand... attaining the CCIE Security certi...

In this quick tip Cisco ISE article I would like to point out how ISE administrators can displays usernames for failed authentications. The following has been tested on ISE 2.4 but is relevant for older ISE versions. When a user/machine fails authentication ISE will mask the identity automatically. This can be seen in the RADIUS Live Logs and looks like the screenshot (1) shown below. Although you can click on the details of each live log, sometimes it’s good to know what the identity is to troubleshoot further. The good news is that with ISE, we can unmask the identity, however, the bad news for some is that you can only keep identities unmasked for a limited time, depending on ISE version. As of up to ISE 2.4 patch 3 you cannot keep identities unmasked permanently, in fact, the maximum time in which you can keep identities unmasked for is 30 minutes before ISE masks them again. As mentioned, this is not convenient and was in fact raised as a bug (CSCvh91118). I believe ISE releases ...