Scribd Logo
Upload

Welcome to Scribd!

  • Notes For UTeM Workshop2

    Uploaded by

    comingSo
    2 views2 pages
    This document discusses several network protocols and concepts: - Samba should not be used over VPNs due to poor performance and weak encryption. Unblocking ports 139/445 allows Samba file sharing over local networks. Samba shares files while FTP transfers files between connections. - Snort uses techniques like host-based and network-based intrusion detection. It monitors traffic on ports like UDP/TCP 53 for DNS and UDP 67-68 for DHCP. - RADIUS authentication assigns privilege levels (0-15) to control device access. The username "admin" would have privilege level 15 to access all commands. - OSPF is preferred over other routing protocols for its efficient path selection and

    Original Description:

    Original Title

    Notes for UTeM Workshop2

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses several network protocols and concepts: - Samba should not be used over VPNs due to poor performance and weak encryption. Unblocking ports 139/445 allows Samba file sharing over local networks. Samba shares files while FTP transfers files between connections. - Snort uses techniques like host-based and network-based intrusion detection. It monitors traffic on ports like UDP/TCP 53 for DNS and UDP 67-68 for DHCP. - RADIUS authentication assigns privilege levels (0-15) to control device access. The username "admin" would have privilege level 15 to access all commands. - OSPF is preferred over other routing protocols for its efficient path selection and

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    2 views2 pages

    Notes For UTeM Workshop2

    Uploaded by

    comingSo
    This document discusses several network protocols and concepts: - Samba should not be used over VPNs due to poor performance and weak encryption. Unblocking ports 139/445 allows Samba file sharing over local networks. Samba shares files while FTP transfers files between connections. - Snort uses techniques like host-based and network-based intrusion detection. It monitors traffic on ports like UDP/TCP 53 for DNS and UDP 67-68 for DHCP. - RADIUS authentication assigns privilege levels (0-15) to control device access. The username "admin" would have privilege level 15 to access all commands. - OSPF is preferred over other routing protocols for its efficient path selection and

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 2

    ACL

     Reason to block samba service


     First off, SMB performance over high latency links is garbage and even worse
    with overhead of a VPN.
     Secondly, most linux samba daemons only support SMBv2 which uses weak
    encryption and can be just about considered plainly legible over the internet.

    Samba
     What to do to let samba access
    1. Must be on the same network to let the samba client access.
    2. Unblock port related to samba which is port 139(old version) and 445(after
    windows 2000)
     Difference among samba and ftp

    1.

    FTP SMB

    FTP stands for File Transfer SMB is a client-server


    Protocol. The main aim of communication protocol
    FTP is to transfer files that helps share and access
    from one connection to files, printers, serial ports,
    another. Additionally, it and other resources. It
    also allows you to create helps in interprocess
    and delete files and communication.
    directories.

    2. So Windows is sharing a serial device connected to it through SMB. You can


    share specific type of USB devices, like a printer, or share files on a storage
    USB storage device but wouldn’t be able to share that physical storage device
    (attach it to the remote host). You can’t share a USB keyboard or mouse for
    instance through SMB.

    Snort
     Techniques used by snort
     Difference between host-based and network-based
     Port that used by snort

    DNS
     Parameters that used to detect any change or update of the DNS record from the
    alternative DNS server to the primary DNS server
     SOA (Start of Authority)
     Type of DNS record and their used
    DHCP
     How to setup to let the host assign the static IP from the DHCP pool

    RADIUS
     username admin privilege 15 secret abc123! (diff privilege diff can access)

    ● privilege level 0 = seldom used, but includes 5 commands: disable, enable, exit,
    help, and logout
    ● privilege level 1 = non-privileged (prompt is router>), the default level for logging
    in 103
    ● privilege level 15 = privileged (prompt is router#), the level after going into enable
    model
    OSPF
    - reason to used OSPF as routing algorithm
    o OSPF offers more efficient path choice and convergence speed.

    You might also like