Blog

Part 1 can be found here. Foreign WLC Configuration: Create a REDIRECT ACL Define the Cisco ISE RADIUS Server Note: […]

August 20, 2024August 20, 20249800, Central Web Auth, Cisco 9800 Wireless Guest, CWA ISE

Cisco 9800 Wireless 2024 – Phase 12 – Central Web Authentication (CWA) With Cisco ISE – Part 1

Open the following ports on the firewall to allow communication between the Foreign (internal) and anchor (DMZ) controllers: For optional […]

July 23, 2024July 23, 2024Cisco 9800 Bulk AP Provisioning, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 11 – Version 17.12.02 Bulk Bulk AP Provisioning

Version 17.12.02 makes it easier to provision APs with primary, secondary, and tertiary controllers.

July 23, 2024July 23, 20249800, 9800 Flexconnect, 9800 High Availability, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 10 – Upgrading to 17.12.2

Before you begin Clean up the old installation files Copy the new image to flash Verify that the file was […]

July 21, 2024July 23, 20249800 Flexconnect, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 9 -FlexConnect Logic & Testing

Testing and verification are based on the following basic configuration found here. Verification of VLANs & VLAN IDs Verification of […]

July 21, 2024July 23, 20249800 Flexconnect, 9800 High Availability, Cisco 9800 Wireless, Cloud 9800 High Availability SSO HA

Cisco 9800 Wireless 2024 – Phase 8 – WLC and AP (Local/Flex) Redundancy Planning – Part 2

Basic Connectivity Configuration. The configuration workflow is as follows Create a PSK WLAN to test basic connectivity Create the Policy […]

July 20, 2024July 23, 20249800 Flexconnect, 9800 High Availability, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 8 – WLC and AP (Local/Flex) Redundancy Planning – Part 1

Cisco 9800 VPC on Nexus Cisco 9800 HA on 17.X Cisco 9800-CL HA Configuring a highly available wireless network requires […]

July 20, 2024July 23, 20249800, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 7 – AP Authorization List

Security Requirements: All Cisco access points must be authorized locally to join the Cisco 9800 WLC. Background Information To authorize […]

July 19, 2024July 23, 20249800, Cisco 9800 CLI Banner, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 6 – CLI Login Banners

Note: When HTTP authentication is configured using TACACS+/RADIUS, the banner message does not display on the Web UI. The login […]

July 19, 2024July 23, 20249800, 9800 Certificate, Cisco 9800 Wireless

Cisco 9800 Wireless 2024 – Phase 5 – Creating and Installing Certificates With SAN

Problem Resolution Retrieve the CA in base64 format Right click on the .cer file and open with a text editor […]

July 19, 20249800, Cisco 9800 Wireless, TACACS for Cisco IOS/ Cisco 9800 Wireless Controller

Cisco 9800 Wireless 2024 – Phase 4 – DNS & TACACS+ Device Admin

Add DNS entries for the Cisco 9800 Controllers Add the Cisco 9800 Controllers to Cisco ISE Configure the ISE TACACS+ […]

July 17, 2024July 23, 20249800, Cisco 9800 HA via vPC, Cisco 9800 Wireless, Cloud 9800 High Availability SSO HA

Cisco 9800 Wireless 2024 – Phase 3 LA Local

West Coast LA Local See the steps on configuring HA here Verify that the WLC pair is in HA By […]

July 17, 2024July 23, 20249800, Cisco 9800 Wireless, Cloud 9800 High Availability SSO HA

Cisco 9800 Wireless 2024 – Phase 2 East Coast Basic Config

Goal: Configure the core WLAN infrastructure (West and East Coast) Verify IP reachability between West and East WLCs

July 14, 2024July 23, 20249800, 9800 Certificate, 9800 Flexconnect, Cisco 9800 Wireless, TACACS for Cisco IOS/ Cisco 9800 Wireless Controller

Cisco 9800 Wireless 2024 – Phase 1 West Coast Basic Config

Goal: Configure the core WLAN infrastructure (West and East Coast) West Coast Data Center 1 Note: The East Coast Dater […]

July 12, 2024July 14, 2024Airwave 8.2.10, Airwave 8.x

Part 2 – Aruba Airwave Failover Logic

Part 1 Testing the Failback After the failover server fails over and becomes the primary, test the failback functionality. These […]

July 12, 2024July 13, 2024Airwave 8.2.10, Airwave 8.x

Part 1 – Aruba Airwave Failover Logic

Part 2 About the Failover Server The failover server communicates with the watched AirWave servers using SSH, SNMP, and AMON […]

July 7, 2024July 7, 20249800, 9800 Certificate, Cisco 9800 Wireless

Cisco 9800 Certificates “Off the box”

“On box” Create the CSR Create a folder with the name of the device Create the OpenSSL .cnf file Update […]

July 7, 2024July 7, 20249800, 9800 Certificate, Cisco 9800 Wireless

Cisco 9800 Certificates “On the box”.

“Off box” ssh into the WLC Retrieve the CA in base64 format Right-click on the .cer file and open it […]

July 4, 2024July 4, 2024TACACS for Cisco IOS/ Cisco 9800 Wireless Controller

Cisco TACACS Base Config

R1, R4 and CORE-SWITCH ISE Config System > Deployment > Edit the ISE node 2. Add the network devices 3. […]

May 23, 2024June 14, 2024ARUBA ACMA, Aruba ACMP, Aruba Campus Access Fundamentals, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Aruba WLC, Captive Portal, Cisco ISE, Cisco ISE AAA

Aruba WLC With Cisco ISE 3.2.0.542 Registered Guest Captive Portal Logic

Proof of concept – Cisco Captive Portal via an Aruba Mobility Controller. The wireless LAN controllers are “firewalled” and can […]

September 16, 2023September 16, 2023TCP

TCP Basics Part 2

TCP Startup Connection Process Step #1 Step # 2 Step # 3 Computer_X acknowledges receipt of WebServer_X’s sequence number and […]

September 15, 2023September 15, 2023ARP, Routing and Switching

ARP

ARP stands for Address Resolution Protocol. It is a communication protocol used in computer networks to map an IP address […]

September 15, 2023September 15, 2023Aruba ACMP, Aruba Campus Access Fundamentals, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Implementing Aruba Campus Access,

ACMP, Aruba Campus Access – Building Blocks – Terminology

High-Level Groups and Profiles AP Groups An Example AP group and the associated profiles. WLAN Profile > Virtual AP AP […]

September 13, 2023September 15, 2023ARUBA ACMA, Aruba ACMP, Aruba Campus Access Fundamentals, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Implementing Aruba Campus Access,

ACMP, Aruba Campus Access – Building Blocks – Policy Enforcement Firewall – # 2

Part 1 Destination Alias Example Destination Aliases A quick note about positioning. Example: Look at the original rule and start […]

September 10, 2023September 15, 2023Aruba ACMP, Aruba Campus Access Fundamentals, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Implementing Aruba Campus Access,

ACMP, Aruba Campus Access – Building Blocks – Policy Enforcement Firewall – # 1

Part 2 Aruba’s configuration can be a bit confusing at times. The focus of the Aruba Campus Access Fundamentals, Implementing […]

September 9, 2023September 9, 2023EIGRP, Routing and Switching

EIGRP Basic Config

R5 R1 R2 R3 R4 Verification

September 8, 2023September 8, 2023DMVPN Phase 3, Routing and Switching

DMVPN – Phase 3

High-Level Operations Summary Wireshark Verification All 4 (Spoke) routers sent an NHRP Registration Request to R5 (Hub), who responded with […]

September 8, 2023September 15, 2023DMVPN, Routing and Switching

DMVPN Notes – Phase 2 Dynamic Mappings

Configuration and Behavior Between R5 and R1 R1 (Spoke) sends an NHRP Request to R5 (Hub) R5 (Hub) Responds with […]

September 8, 2023September 8, 2023Routing and Switching

DMVPN Notes – Phase 2 Static Mappings

DMVPN Phase 2 with static mapping restrictions: R5 Hub R1 R2 R3 R4 Verification of mappings R1, R2, R3 and […]

September 7, 2023September 8, 2023DMVPN PHASE1, Routing and Switching

DMVPN Notes – Phase 1 Dynamic Mappings

Dynamic mappings allow for a much more scalable configuration. How does this work? R5 HUB R1 Spoke R2 Spoke R3 […]

September 5, 2023September 5, 2023OSPF, Routing and Switching

Network Type DB/BDR Hello TypeUnicast/Multicast Hello/Dead/WaitIntervals Point-to-Point NO Multicast 10/40/40 Point-to-Multipoint NO Multicast 30/120/120 Point-to-Multipoint Non-broadcast NO Unicast 30/120/120 Broadcast […]

September 5, 2023September 5, 2023OSPF, Routing and Switching

OSPF Basic Configuration Deep Dive – Part 1

Building OSPF Adjacencies Down This is the first OSPF neighbor state. It means that no information (hellos) has been received […]

September 5, 2023September 15, 2023OSPF

OSPF Notes Basics – Part 2

Part 1 Link State Advertisements (LSAs) OSPF Header The major fields of the OSPF packet header are as follows: Identifying […]

September 4, 2023September 7, 2023OSPF, Routing and Switching

OSPF Notes Basics – Part 1

Part 2 Forming OSPF Adjacencies Must match items: Must be unique items: OSPF Network Types Broadcast DR/BDR Election There is […]

September 3, 2023September 8, 2023DMVPN PHASE1, IP, Routing and Switching

DMVPN Notes – Phase 1 Static Mappings

EVE-NG topology DMVPN combines mGRE, the Next-Hop Resolution Protocol (NHRP), and optional IPSec. DMVPN can be implemented as Phase 1, […]

September 2, 2023September 2, 2023Routing and Switching, Subnetting

VLSM – Review – Example

VLSM table Major Network = 10.15.0.0/22 11111111.11111111.11111100.00000000 Number of networks = 2^ 6 = 64 Network Address Usable Host Range […]

August 31, 2023August 31, 2023OSI Model, Routing and Switching

OSI Model High-Level Review

The OSI (Open Systems Interconnection) model is a conceptual framework that standardizes the functions of a communication system or network […]

August 31, 2023August 31, 2023TCP

TCP Basics Part 1

TCP Header

August 30, 2023August 30, 2023DHCP, Routing and Switching

DHCP

DHCP stands for Dynamic Host Configuration Protocol. It’s a network protocol used to automatically assign IP addresses and other network […]

August 30, 2023August 30, 2023Routing and Switching, Traceroute

Traceroute

Traceroute from PC1 (192.168.13.2) to PC2 (192.168.62.2) Note to self: The process repeats for each router in the path. Even […]

August 26, 2023August 26, 2023VTP

R&S Study Labs – VTP

VTP Modes You can configure a switch to operate in any one of these VTP modes: VTP Version 1 VTP […]

August 26, 2023September 2, 2023Routing and Switching, Subnetting

VLSM – Review

Example Exponent Number of Hosts * -2 Notation Bits Subnet Mask 2^1 2 /31 11111111.11111111.11111111.11111110 255.255.255.254 2^2 4 /30 11111111.11111111.11111111.11111100 […]

April 19, 2023April 19, 2023Aruba ACMP, Aruba cluster, Aruba code upgrade, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Aruba WLC

ARUBA ACMP LAB SETUP – 1

April 8, 2023April 8, 2023wireless, wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Wireless pentest lab Part 6 – Remote Packet Capture

Wireless remote packet capture refers to the process of capturing network traffic on a remote device or network using a […]

April 7, 2023April 7, 2023wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Wireless pentest lab Part 5 – Extracting Certificate Info

Disclaimer for Wireless Penetration Testing Educational Purposes: The wireless penetration testing educational service provided here is solely for the purpose […]

April 4, 2023April 4, 2023WIFI 6 802.11 ax, wireless - ubuntu - kali linux, Wireless Security basics

WI-FI 6 Notes – Trigger Frames

Trigger Frame The trigger frame is a control frame of the MAC header, which contains the association IDs (AIDs) of […]

April 3, 2023April 4, 2023wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Wireless pentest lab Part 4 – PEAP Relay Attacks with wpa_sycophant

The article that covers the details of the attack can be found here and here. Launch the rogue AP Start […]

April 3, 2023April 3, 2023wireless, wireless pentest, Wireless Security basics

Wireless pentest lab Part 3

Part 1 Part 2 hostapd-wpe Download the files Creating certs Copy and edit the hostapd-wpe config file Execute the script […]

April 3, 2023April 3, 2023wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Wireless pentest lab Part 2

Part 1 Part 3 berate-ap OR Test berate_ap Testing hostapd-mana Create certificates: Documentation can be found here Create a certificate […]

April 1, 2023April 3, 2023wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Wireless pentest lab Part 1

Part 2 Part 3 Reference and credit: https://w1f1.net/ Tools: screen Linux screen is a command-line utility that allows you to […]

March 25, 2023March 28, 2023wireless - ubuntu - kali linux, Wireless Security basics

PEAP EAP-MSCHAPV2 Attack

References: EVP_RSA_gen() generates a new RSA key pair with modulus size bits. Create a certificate signing request. Create the hostapd.eap_user […]

March 25, 2023March 25, 2023wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

Kali Linux – Rogue SSIDs Part 1 PSK

Wireless Penetration Test and Training Purposes Disclaimer: The training material and exercises provided are for educational and training purposes only. […]

March 23, 2023April 8, 2023WIFI 6 802.11 ax, WIFI 6E BASICS, wireless - ubuntu - kali linux, wireless pentest, Wireless Security basics

ALFA AWUS036AXML – (802.11ax) 2×2 6 GHz

AWUS036AXML is the WiFi 6/6E (802.11ax) 2×2 6 GHz and Bluetooth 5.2 high-performance USB adapter. It comes with a 2-in-1 USB-C […]

March 20, 2023April 8, 2023802.11, wireless - ubuntu - kali linux, wireless pentest

Kali Linux Wireless Pentesting Notes

By default, Kali is set to global regulatory domain (00). To change or set the regulatory domain, run iw reg […]

March 16, 2023March 25, 2023wireless - ubuntu - kali linux, wireless pentest

WIFOO Revisited – Part 2 – WEP

Part 1 Create the wireless monitor interface(s). 2. Recon and gather info using any of the monitor mode interfaces. Take […]

March 16, 2023March 25, 2023WIFI 6 802.11 ax, WIFI 6E BASICS, wireless - ubuntu - kali linux, Wireless Security basics

WIFOO Revisited – Part 1 – 6GHz Adapter Test

Part 2 Check the status of the adapter/driver The recon data will be saved in .csv format. This is useful […]

March 7, 2023March 12, 2023Wi-Fi 6E, WIFI 6E BASICS

6GHz Baseline Test

This is a high-level document where I try to understand how different devices will transfer data and at what data […]

November 22, 2022November 22, 2022ARUBA ACMA, Aruba ACMP, Aruba Mobility Conductor, Aruba Mobility Master 8.x, Aruba WLC, WIFI 6E BASICS

6GHz Basics – Scanning and Probing in the 6 GHz band

Passive Scanning – With 1200 MHz to cover and 59 channels to scan, a station with a dwell time of […]

November 12, 2022November 17, 2022Wi-Fi 6E

WIFI 6E Basics Notes

Reference: https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-delivers-wi-fi-6e-certification-program An overview of WPA 3 can be found here wlan virtual-ap “WIFI6E”aaa-profile “WIFI6E_AAA_PROFILE”vlan 12ssid-profile “WIFI6E_SSID_PROFILE”allowed-band noneallowed-band-6ghz Security Wi-Fi […]

November 4, 2022November 4, 2022802.11, Wi-Fi 6E

Wi-Fi 6E Notes Part 1 – IAP 655

Channels Image Reference: www.juniper.net show arm-channels show ap bss-table show ap arm neighbors Basic Packet Capture from the IAP pcap […]

October 31, 2022October 31, 2022ARUBA ACMA, Aruba ACMP, Aruba Mobility Conductor, Aruba Mobility Master 8.x

ACMP – Convert IAP to Campus

Whitelist the IAP on the Mobility Conductor Obtain the Ethernet MAC address of the IAP from the GUI/sticker on the […]

October 25, 2022Aruba ACMP

ACMP – ArubaOS 8 and AOS-CX Release Descriptions

Reference: https://www.arubanetworks.com/support-services/end-of-life/arubaos-software-release/

October 16, 2022October 17, 2022ARUBA ACMA, Aruba AP Boot Sequence, Aruba cluster, Aruba code upgrade, Aruba Mobility Conductor, Aruba Mobility Master 8.x

ACMP – Exam Notes – Introduction to Clusters – Part 1

What is clustering? A cluster combines multiple managed devices to provide high availability for all clients. Benefits include seamless roaming […]

October 11, 2022October 12, 2022802.1X, ARUBA ACMA, RADIUS

Review: 802.1X EAP-TLS Authentication Flow Explained – With Packet Captures

Steps 1,2 and 3 – Establish layer one and two The wireless client associates with the AP and seSupplicantional EAPOL […]

October 11, 2022October 14, 2022ARUBA ACMA, Aruba Mobility Master 8.x, Aruba WLC

Aruba Certified Mobility Associate (ACMA) – Notes

Model AP Client Type Firewall Capacity POE Ports 7005 16 1,024 Physical 2 Gbps N/A 7008 16 1,024 Physical 2 […]

October 3, 2022November 2, 2022Aruba Mobility Master 8.x, Aruba WLC

Generate HTTPS Certificate for Aruba WLC

In cryptography, PKCS #12 defines an archive file format for storing many cryptographic objects as a single file. It is […]

August 14, 2022October 17, 20224-way handshake, WPA3, WPA3 Downgrade

WPA3 Downgrade attack

WLAN configured for WPA3 SAE with backward compatibility Confirmation via airodump-ng Confirmation via Wireshark The client connected after going through […]

December 29, 2021October 17, 2022Wireless Security basics

WPA_SUPPLICANT – MULTI CONFIG

PEAP MSCHAPV2 network={ssid=”LAB-PEAP“scan_ssid=1key_mgmt=WPA-EAPeap=PEAPidentity=”jack”password=”black”phase1=”peaplabel=0″phase2=”auth=MSCHAPV2″} TTLS-PAP network={ssid=”LAB-PAP-TTLS“scan_ssid=1key_mgmt=WPA-EAPeap=TTLSidentity=”jack”anonymous_identity=”anon”password=”black”phase2=”auth=PAP”} TTLS-CHAP network={ssid=”LAB-CHAP-TTLS“scan_ssid=1key_mgmt=WPA-EAPeap=TTLSidentity=”jack”anonymous_identity=”anon”password=”black”phase2=”auth=CHAP”} TTLS-MSCHAPv2 network={ssid=”LAB-TTLS-MSCHAPv2″scan_ssid=1key_mgmt=WPA-EAPeap=TTLSidentity=”jack”anonymous_identity=”anon”password=”black”phase2=”auth=MSCHAPV2″}

December 16, 2021December 16, 2021Wireless Security basics

WPA_SUPPLICANT – SIMPLE PSK CLIENT

network={ssid=”TEST”scan_ssid=1key_mgmt=WPA-PSKpsk=”password12345″} wpa_supplicant -Dnl80211 -iwlan0 -c/etc/wpa_supplicant.conf

December 15, 2021October 17, 2022Wireless Security basics

HOSTAPD – WPA/WPA2 CONFIG

interface=wlan1driver=nl80211ssid=BLACKhw_mode=gchannel=11macaddr_acl=0ignore_broadcast_ssid=0auth_algs=1wpa=2wpa_passphrase=LETMEINwpa_key_mgmt=WPA-PSKwpa_pairwise=TKIPwpa_group_rekey=86400ieee80211n=1wme_enabled=1 bss=wlan1_0driver=nl80211ssid=WHITEhw_mode=gchannel=11macaddr_acl=0ignore_broadcast_ssid=0auth_algs=1wpa=2wpa_passphrase=LETMEINwpa_key_mgmt=WPA-PSKwpa_pairwise=TKIPwpa_group_rekey=86400ieee80211n=1wme_enabled=1

December 15, 2021December 15, 2021Wireless Security basics

HOSTAPD – WEP CONFIG

Use hostapd to create multiple SSIDs on a single wireless adapter interface=wlan1hw_mode=gchannel=6driver=nl80211ssid=APPLEauth_algs=1wep_default_key=0wep_key0=”10101″ bss=wlan0_1 hw_mode=g channel=6 driver=nl80211 ssid=PEAR auth_algs=1 wep_default_key=0 wep_key0=”10101″

October 19, 2021October 27, 2022Ekahau, Ventev