Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 100 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow General Certificationarrow Networkingarrow CCNA and GNS3
EH-Net
May 26, 2012, 06:11:00 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: CCNA and GNS3  (Read 2674 times)
0 Members and 1 Guest are viewing this topic.
tturner
Sr. Member
****
Offline Offline

Posts: 329


View Profile WWW
« on: June 01, 2011, 06:18:56 AM »

So after years in the field I find myself needing expanded Cisco knowledge. I'm going to self study for CCNA this month and while I have networking theory out the wazoo, I've never configured a Cisco router in my life. (Plenty of firewalls and a handful of Enterasys and Nortel routers, but no Cisco)

My question is, for those of you using GNS3, how are you emulating Catalyst switches? I know I can use a switch module in the router but you can't emulate many switch functions like BPDU Guard that way in GNS3. I have 2600, 3600, 3700 and 7200 IOS images currently to play with.
« Last Edit: June 01, 2011, 08:18:25 AM by tturner » Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GSEC, OPSE, CSWAE, VCP

Next 6 months: GCIH, CSTP, STI MSISE
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #1 on: June 01, 2011, 08:21:52 AM »

I've been studying for Cisco for the last few months and ran into this question right away.  Sort answer, it is not possible, as I'm sure you've come across in other searches.

Basically, the Catalyst hardware is proprietary, so it can't be emulated using software.  Router hardware can be emulated, which is why GNS3 (dynamips) only needs an IOS image for a fully functional environment.

As you say, the best bet is to get a router IOS and use the NM-16ESW module (selectable by the Slots tab in the router properties).  I am using the 3640 12.4-25d image (I don't think all IOS images support this module).

In case you felt compelled to hack a solution (as I did), a few hours of failure prompted me to contact a network engineer (6xCCIE!) who confirmed this is not possible and that NM-16ESW module was enough for him until he got to the CCIE level and then he just purchased equipment from ebay.

I have a fully functional test environment of my network here in case you have questions on setting up GNS3.
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
sil
Hero Member
*****
Offline Offline

Posts: 536



View Profile WWW
« Reply #2 on: June 01, 2011, 08:34:20 AM »

As an FYI, you can sort of wing it. Here is how someone nixed the CCNP switching exam with GNS3

http://brezular.wordpress.com/2010/12/14/ccnp-switch-642-813-and-gns3-part-1-introduction/
http://brezular.wordpress.com/2010/12/17/ccnp-switch-and-gns3-part-2-1-aaa-and-dot1x-theory/
http://brezular.wordpress.com/2010/12/18/ccnp-switch-and-gns3-%E2%80%93-part-2-2-freeradius-and-wpa-supplicant-installation-and-configuration/
http://brezular.wordpress.com/2010/12/21/ccnp-switch-and-gns3-%E2%80%93-part-2-3-lab-configuring-user-aaa-authentication-and-802-1x-port-based-authentication/

Nothing beats getting a switch though. Emulators can only go so far. You have to look at it (buying a switch) as an investment. You can always go back and re-sell it when you're done
Logged

tturner
Sr. Member
****
Offline Offline

Posts: 329


View Profile WWW
« Reply #3 on: June 01, 2011, 08:52:12 AM »

Looks like my 2621, 3745 and my 3660 image all support NM-16ESW. I did not realize though that would give me sufficient coverage for the exam. I should have some 3750 G POE switches to play with soonly but unfortunately will not have them before I do my CCNA. I'm sure they will come in handy for CCNP studies though.

Thanks for the links Sil, had not seen those blog posts. I'm having a lot of fun with GNS3 and have some really evil ideas for connecting it on live networks.  Wink Now if I can just figure out how to handle all the traffic those evil ideas will shove through my box (GNS3 tutorial I saw indicated it could only handle 1/100th of the traffic that a normal router can)

I'll be revisiting this thread later with my experiences. Thanks again for the info Sil and Yatz.
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GSEC, OPSE, CSWAE, VCP

Next 6 months: GCIH, CSTP, STI MSISE
sil
Hero Member
*****
Offline Offline

Posts: 536



View Profile WWW
« Reply #4 on: June 01, 2011, 09:24:51 AM »

have some really evil ideas for connecting it on live networks.

Reroute a netblock through netsed and change whatever you want your target to see. http://www.freshports.org/net/netsed/
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.122 seconds with 23 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.