RE: Protection against Man-in -d -middle attack

Here's a question for redemption:
What is the best way to turn on DAI on a production network?

-Luan

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Marko Milivojevic
Sent: Wednesday, March 24, 2010 4:15 PM
To: Narbik Kocharians
Cc: Itechguru; olugbenga lasisi; Thameem Maranveetil Parambath; ccielab_at_groupstudy.com
Subject: Re: Protection against Man-in -d -middle attack

Thanks Narbik.

Now to be truly honest, my labs started as the way to prove you wrong.
However, I soon realized it was ME who was wrong, but decided to post
the lab anyway, since I thought it was a good example.

I agree with the point that I should have kept all the messages Cat2
was spewing on the console. Overall, I think between two labs we
posted, this subject is very well covered.

Anyone has something else Narbik and I can argue about? Keep it
technical, I'm tired of waving the waivers ;-)

--
Marko Milivojevic - CCIE #18427
Senior Technical Instructor - IPexpert
YES! We include 400 hours of REAL rack
time with our Blended Learning Solution!
Mailto: markom_at_ipexpert.com
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Web: http://www.ipexpert.com/
On Wed, Mar 24, 2010 at 18:43, Narbik Kocharians <narbikk_at_gmail.com> wrote:
> Guys,
>
>
>
> I truly was NOT trying to rub it in, we all know that Marko knows his stuff,
> if you ever doubt it, just go back and read some of his posts/answers, the
> man is simply awesome.
>
>
>
> The point I was trying to get across was that when testing this kind of
> stuff, you should always check the right console messages, and the right way
> of testing.
>
>
>
> You should purposely try to make some errors and see some of the console
> messages, which I showed in my post; this is how you nail it down. This is
> how you ACEB the TS portion of the lab.B  As Marko mentioned, when in doubt
> lab it.
>
> Thanks itechguru.
>
> On Wed, Mar 24, 2010 at 5:46 AM, Itechguru <wajid.ccie_at_gmail.com> wrote:
>>
>> Narbik
>>
>> As always, you are awesome. I cannot say that for others.
>> Great demonstration.
>> On Wed, Mar 24, 2010 at 7:49 AM, Marko Milivojevic <markom_at_ipexpert.com>
>> wrote:
>>>
>>> On Wed, Mar 24, 2010 at 09:16, Narbik Kocharians <narbikk_at_gmail.com>
>>> wrote:
>>> > MArko,
>>> >
>>> > Did you just prove what i stated was correct?
>>>
>>> Didn't I write that very clearly at the top of my message. No point
>>> rubbing it in... :-)
>>>
>>>
>>> --
>>> Marko Milivojevic - CCIE #18427
>>> Senior Technical Instructor - IPexpert
>>>
>>> YES! We include 400 hours of REAL rack
>>> time with our Blended Learning Solution!
>>>
>>> Mailto: markom_at_ipexpert.com
>>> Telephone: +1.810.326.1444
>>> Fax: +1.810.454.0130
>>> Web: http://www.ipexpert.com/
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>
>
>
> --
> Narbik Kocharians
> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> www.MicronicsTraining.com
> Sr. Technical Instructor
> YES! We take Cisco Learning Credits!
> Training And Remote Racks available
Blogs and organic groups at http://www.ccie.net