Friday 4 March 2016

AAA with Tacacs+ on Debian

A while ago I've tried setting up different authorisation levels on a Cisco router with privilege levels. It failed miserably because this is badly documented by Cisco and the amount of effort needed to get something useful out of it was too much. The main problem is the hierarchical privilege structure of commands and the somewhat illogical relation between these commands (enable write privileges to allow read privilege....).


Monday 4 January 2016

NMAP Automation and reporting

If you need a tool to check your devices firewall settings, NMAP is the tool to use. It is possible to automate this check so you can get a daily report even with a report on differences.

The following script checks a subnet, reports on all active hosts and open ports. Differences will also be reported and these reports will be mailed.

The script below is a slightly edited script found here.