Bob Vachon - CCNA Security

Bob Vachon

Cisco Press
800 East 96th Street
Indianapolis, IN 46240 USA

CCNA Security Portable Command Guide

Bob Vachon

Copyright 2012 Cisco Systems, Inc.

Published by:

Cisco Press
800 East 96th Street
Indianapolis, IN 46240 USA

All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review.

ISBN-10: 1-58720-448-7

ISBN-13: 978-1-58720-448-7

Printed in the United States of America 1 2 3 4 5 6 7 8 9 0

First Printing May 2012

Library of Congress Cataloging-in-Publication Data will be inserted once available.

Publisher
Paul Boger

Associate Publisher
David Dusthimer

Executive Editor
Mary Beth Ray

Manager Global Certification
Erik Ullanderson

Business Operation Manager, Cisco Press
Anand Sundaram

Managing Editor
Sandra Schroeder

Development Editor
Andrew Cupp

Project Editor
Mandie Frank

Copy Editor
Keith Cline

Proofreader
Megan Wade

Technical Editor
Jim Lorenz

Book and Cover Designer
Gary Adair

Publishing Coordinator
Vanessa Evans

Composition
Mark Shirar

Warning and Disclaimer

This book is designed to provide information about the CCNA Security (640-554 IINS) exam and the commands needed at this level of network administration. Every effort has been made to make this book as complete and as accurate as possible, fitness is implied.

The information is provided on an as is basis. The author, Cisco Press, and Cisco Systems, Inc. shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it.

Trademark Acknowledgments

All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Cisco Press or Cisco Systems, Inc. cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

Feedback Information

At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community.

Readers feedback is a natural continuation of this process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through email at . Please make sure to include the book title and ISBN in your message.

Corporate and Government Sales

Cisco Press offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales.

For more information please contact: U.S. Corporate and Government Sales

1-800-382-3419

For sales outside the U.S. please contact: International Sales

Americas Headquarters
Cisco Systems, Inc.
San Jose, CA

Asia Pacific Headquarters
Cisco Systems (USA) Pte. Ltd.
Singapore

Europe Headquarters
Cisco Systems International BV
Amsterdam, The Netherlands

Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco Website at www.cisco.com/go/offices.

CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco Telepresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work. Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS. Bringing the Meeting To You. Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy. Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert. StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)

Bob Vachon is a professor in the Computer Systems Technology program at Cambrian College in Sudbury, Ontario, Canada, where he teaches networking infrastructure courses. He has worked and taught in the computer networking and information technology field since 1984. He has collaborated on various CCNA, CCNA Security, and CCNP projects for the Cisco Networking Academy as team lead, lead author, and subject matter expert. He enjoys playing the guitar and being outdoors, either working in his gardens or white-water canoe tripping.

Jim Lorenz is an instructor and a senior training developer for the Cisco Networking Academy Program. He holds a bachelors degree in computer information systems and has over 20 years of experience in networking and IT. Jim has developed course materials, including content, labs, and textbooks for the CCNA and CCNP curricula. Most recently he coordinated lab development for the CCNA Security course.

This book is dedicated to my students. Thanks for reminding me why I do this stuff. I also dedicate this book to my beautiful wife Judy and daughters Lee-Anne, Jolle, and Brigitte who, without their support and encouragement, I would not have been involved in this project.

I would like to start off with a big thanks to my friend Scott Empson for involving me with this project. Your Portable Command Guide series was a great idea and kudos to you for making it happen.

Thanks to the team at Cisco Press. Thank you Mary Beth for believing in me and to Drew and Mandie for making sure I got things done right and on time. Also thanks to my friend Jim for keeping me in check.

Special thanks to my Cisco Networking Academy family. A big thanks to Jeremy and Rob for involving me in these very cool projects. You guys keep me young.

Finally, a great big thanks to the folks at Cambrian College for letting me have fun and do what I love to do...teach!

The conventions used to present command syntax in this book are the same conventions used in the