Discussion on:

6
Comments

Join the conversation!

Follow via:
RSS
Email Alert
0 Votes
+ -
I was a pure CLI guy for our Cisco devices. (73 buildings to manage)
I decided to impelement port-security. Naturally, your going to miss some machines, like printers go to sleep and don't show up on a scan, so later you have to figure out where the are, and what port to enable.

Using SiwtchInspector and CNA 5.2 This is an easy task. First as I locked a switch down, I scan the switch with Siwtchinspector and enter the computer or device name in the desc field of cna. Anything not used, I enter as 'unused'in the desc field. Later when someone calls with a amachine down (Locked out) I just use the filter option of CNA to filter on Ports = F*, and desc = 'unused' and then change the filtered ports to 'enable.' when my ping shows the machine now is responding, I run another scan with switch inspector, which tells me which port the ip is on, and then change the desc= computername, and apply, filter as above again, and then change all the ports whose desc=unused to disabled again. 5 minute job. CNA has provedn to make a somewhere difficult job much easier combined with switchinspector.
--Bruce D. Meyer
0 Votes
+ -
Thanks for bringing these tools to our attention. I would never have thought about using the CNA GUI. However, I had no idea that it had all these fantastic tools available. This is a perfect example of why we CLI only people should be more open minded.

Excelent article, one again! Keep up the good work.
This sounds like a great tool, but it doesn't appear to work with devices where TACACS+ or Radius Authentication are used.
0 Votes
+ -
it does work with TACACS/RADIUS but you need to set these up for the HTTP authentication as the CNA uses this to connect and pull off information.
0 Votes
+ -
THANKS for your comments!
ddavis@... Updated - 11th Sep 2007
Thank you to everyone who read and took the time to comment on this article! I appreciate your comments & thanks for supporting Techrepublic!

David Davis, TechRepublic Author
Personal website: http://www.HappyRouter.com
Keyboard Shortcuts:
Prev
Next
Toggle
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the TechRepublic Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.