Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 24 guests and 1 member online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow General Certificationarrow Networkingarrow CCNA and GNS3
EH-Net
May 24, 2013, 06:57:11 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: CCNA and GNS3  (Read 5082 times)
0 Members and 1 Guest are viewing this topic.
tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« on: June 01, 2011, 06:18:56 AM »

So after years in the field I find myself needing expanded Cisco knowledge. I'm going to self study for CCNA this month and while I have networking theory out the wazoo, I've never configured a Cisco router in my life. (Plenty of firewalls and a handful of Enterasys and Nortel routers, but no Cisco)

My question is, for those of you using GNS3, how are you emulating Catalyst switches? I know I can use a switch module in the router but you can't emulate many switch functions like BPDU Guard that way in GNS3. I have 2600, 3600, 3700 and 7200 IOS images currently to play with.
« Last Edit: June 01, 2011, 08:18:25 AM by tturner » Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #1 on: June 01, 2011, 08:21:52 AM »

I've been studying for Cisco for the last few months and ran into this question right away.  Sort answer, it is not possible, as I'm sure you've come across in other searches.

Basically, the Catalyst hardware is proprietary, so it can't be emulated using software.  Router hardware can be emulated, which is why GNS3 (dynamips) only needs an IOS image for a fully functional environment.

As you say, the best bet is to get a router IOS and use the NM-16ESW module (selectable by the Slots tab in the router properties).  I am using the 3640 12.4-25d image (I don't think all IOS images support this module).

In case you felt compelled to hack a solution (as I did), a few hours of failure prompted me to contact a network engineer (6xCCIE!) who confirmed this is not possible and that NM-16ESW module was enough for him until he got to the CCIE level and then he just purchased equipment from ebay.

I have a fully functional test environment of my network here in case you have questions on setting up GNS3.
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
sil
Hero Member
*****
Offline Offline

Posts: 549



View Profile WWW
« Reply #2 on: June 01, 2011, 08:34:20 AM »

As an FYI, you can sort of wing it. Here is how someone nixed the CCNP switching exam with GNS3

http://brezular.wordpress.com/2010/12/14/ccnp-switch-642-813-and-gns3-part-1-introduction/
http://brezular.wordpress.com/2010/12/17/ccnp-switch-and-gns3-part-2-1-aaa-and-dot1x-theory/
http://brezular.wordpress.com/2010/12/18/ccnp-switch-and-gns3-%E2%80%93-part-2-2-freeradius-and-wpa-supplicant-installation-and-configuration/
http://brezular.wordpress.com/2010/12/21/ccnp-switch-and-gns3-%E2%80%93-part-2-3-lab-configuring-user-aaa-authentication-and-802-1x-port-based-authentication/

Nothing beats getting a switch though. Emulators can only go so far. You have to look at it (buying a switch) as an investment. You can always go back and re-sell it when you're done
Logged

tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #3 on: June 01, 2011, 08:52:12 AM »

Looks like my 2621, 3745 and my 3660 image all support NM-16ESW. I did not realize though that would give me sufficient coverage for the exam. I should have some 3750 G POE switches to play with soonly but unfortunately will not have them before I do my CCNA. I'm sure they will come in handy for CCNP studies though.

Thanks for the links Sil, had not seen those blog posts. I'm having a lot of fun with GNS3 and have some really evil ideas for connecting it on live networks.  Wink Now if I can just figure out how to handle all the traffic those evil ideas will shove through my box (GNS3 tutorial I saw indicated it could only handle 1/100th of the traffic that a normal router can)

I'll be revisiting this thread later with my experiences. Thanks again for the info Sil and Yatz.
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
sil
Hero Member
*****
Offline Offline

Posts: 549



View Profile WWW
« Reply #4 on: June 01, 2011, 09:24:51 AM »

have some really evil ideas for connecting it on live networks.

Reroute a netblock through netsed and change whatever you want your target to see. http://www.freshports.org/net/netsed/
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.069 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.