小漏 » cisco

破解和模拟CISCO ASA操作系统

小漏 — Thu, 10 Apr 2008 14:49:32 +0000

破解和模拟CISCO ASA操作系统

原著：阿锅同学
发表：Netemu社区
申明：转载注明出处,仅限学习与研究之用，请勿用于商业用途
备注：结尾给出PDF文档，以及所需软件
相关文档;用Qemu来虚拟ASA设备（详细）
Qemu模拟ASA802(讨论帖非应用)
欢迎在后面跟帖出实质性讨论，请勿灌水及无关回复
1:
1.
破解CISCO ASA操作系统
工作前的准备:
①Linux操作系统环境
②ASA 二进制文件(bin)

准备工作完成, 那么下面我们就可以开始如何破解出ASA bin文件中的一个完整的linux系统,关于CISCO对PIX和ASA里使用了开源程序的说明和列表:
http://www.cisco.com/en/US/products/ps6120/prod_release_note09186a008086944e.html
根据上面这个地址,可以清楚的看出ASA 操作系统是一个linux系统的改造过来的,基于linux 内核版本为2.6.
OK,让我们开始吧

Step by step:
①
进入Linux系统,从cisco官方下载 asa802-k8.bin,验证其MD5值.
命令:
# md5sum asa802-k8.bin
a94c3eff8c6d12d6ae6d1be9ba2ea529
asa802-k8.bin

2008-4-10 22:23

Cisco 官方网站MD5截图;

2008-4-10 22:23

2：使用hexdump输出asa802-k8.bin 十六进制数据流,将其输入到一个指定文件中.
命令:

# hexdump -C asa802-k8.bin > asa802-k8.hd

2008-4-10 22:23

3：
利用grep在生成的asa802-k8.hd 16进制文件中搜索串“1f 8b 08 00 1d”.

命令:
# grep “1f 8b 08 00 1d” asa802-k8.hd
001228b0 1f 8b 08 00 1d 3d 73 46 00 03 ec 3a 6d 54 14 57

2008-4-10 22:23

4:
①
首先获取asa802-k8.bin文件的大小,然后使用10进制的文件大小数减去16进制头

001228b0,得到最后N bytes 数(10进制).

2008-4-10 22:28

得到asa802-k8.bin文件大小为14524416 字节.
下面我们可以使用linux下非常实用的脚本语言Perl来帮助计算145244160-0×001228b0
命令:

# perl -e ‘$x=14524416-0×1228b0;print “$x\n”‘
13334352

2008-4-10 22:28

这样我们就得到了偏移量 13334352

5：
使用tail 获取asa802-k8.bin 中CPIO镜像文件(一种linux文件系统压缩格式)

命令:

#tail -c 13334352 asa802-k8.bin > asa802-k8.gz

2008-4-10 22:28

这时文件夹内已经生成了一个gzip压缩格式文件.

6：
使用gzip解压asa802-k8.gz

命令:

#gzip -d asa802-k8.gz

2008-4-10 22:28

这时我们发现文件夹内已经包含一个asa802-k8的CPIO镜像文件.接下来使用cpio命令解压该文件.

7：
使用cpio解压

命令:

cpio -i –make-directories –no-absolute-filenames < asa802-k8

2008-4-10 22:30

OK,下面可以看到当前文件夹内出现了一个标准的文件系统,可以使用ls查看:

2008-4-10 22:30

下面需要做的是一些编辑相关文件,之后在将这个文件系统打包,然后使用Qemu这个虚拟机来引导它.

8：编辑相关文件(etc/init.d/rcS 注意此文件并非linux根下的/etc,而是解压asa802-k8所得的文件系统内的/etc),打包文件系统.

命令:

# vim etc/init.d/rcS

2008-4-10 22:30

看的内容为上面,那么我们应该使用vim来编辑它(当然也可以使用别的编辑工具,如gedit 等等).编辑后的内容如下:

2008-4-10 22:30

确认:wr保存退出

注意拷贝出vmlinuz内核文件(模拟需要它来引导)

下面进行打包ASA文件系统工作.

打包命令:

# find . | cpio -o -H newc | gzip -9 > /home/bzzjh/asa802.gz

2008-4-10 22:34

到这里asa802-k8.bin这个二进制文件已经完全的被破解出来,我们可以很清晰的发现,Cisco ASA的操作系统就是个Linux系统,唯一的只是在asa文件夹内的两个asa的操作程序,lina和lina_ monitor (后面关于模拟部分会执行lina_ monitor这个程序).

1.
利用Qemu引导(模拟)Cisco ASA Linux 文件系统.

准备工作:

①
Qemu 程序(附件中提供)

②
破解出来的ASA Linux文件系统asa802.gz (附件中提供)

③
内核:vmlinuz (附件中提供)

因为我们日常工作都是使用windows系统,下面模拟部分我转到windows下系统进行

GO !!

首先打开附件文件夹:

2008-4-10 22:34

你看到内容如上图,之后打开asaemu:

2008-4-10 22:34

asa802-k8是我们通过上面的步骤破解出来的asa文件系统.

这里需要说明一下:破解的步骤不能在windows环境中进行,虽然像cpio这样的程序都有一个windows的移植版,但是无法创建linux下的链接文件!

Ⅰ.点击创建Disk.cmd 文件.

之后该文件夹内将会生成一个asa802.vmdk 大小为64.0 KB的文件.

Ⅱ.鼠标右键选种3.ASA802.bat 文件,点编辑

我们将看到该批处理文件的主体内容如下：

..\qemu.exe -L ..\bios -hda asa802.vmdk -hdachs 980,16,32 -kernel vmlinuz -initrd asa802-k8.gz -m 256 –no-kqemu -append “auto nousb ide1=noprobe bigphysarea=16384 console=ttyS0,9600n8 hda=980,16,32″
–net nic,vlan=0,model=i82557b,macaddr=00:aa:00:00:02:01 –net pcap,vlan=0,ifname=\Device\NPF_{E93E58F7-430F-45F7-9565-0CEED2108E27} -net nic,vlan=1,model=i82557b,macaddr=00:aa:00:00:02:02 -net pcap,vlan=1,ifname=2 -serial telnet::1007,server,nowait

注意上面方框内的命令其实是为一行,只是因为换行的缘故.注意灰色部分请不要改动

可以进行修改的部分是粉红色部分和深蓝色部分

下面解释一下粉红色部分和深蓝色部分的意思:

–net nic,vlan=0,model=i82557b,macaddr=00:aa:00:00:02:01

在asa中创建一个网卡,型号为intel i82557b,vlan号为0,mac地址为00:aa:00:00:02:01。这条命令后面: –net pcap,vlan=0,ifname=\Device\NPF_{E93E58F7-430F-45F7-9565-0CEED2108E27}

意思是说将创建的这个属于vlan0的网卡桥接到本地网卡中,其中本地网卡的参数为\Device\NPF_{E93E58F7-430F-45F7-9565-0CEED2108E27}

那么深蓝色部分也同样理解:

-net nic,vlan=1,model=i82557b,macaddr=00:aa:00:00:02:02 -net pcap,vlan=1,ifname=2

在asa创建另一个网卡,vlan为1,mac地址为00:aa:00:00:02:02,并将其桥接到网卡号为2的本地网卡上.

这里肯定会有一个疑问:

ifname=\Device\NPF_{E93E58F7-430F-45F7-9565-0CEED2108E27}

ifname=2

这是两个参数主要是用来桥接到本地网卡,那么它是如何得知？

答案就在下面

Ⅲ. 点击获取网卡参数.

.(注意需要安装winpcap,附件文件夹内已提供)

2008-4-10 22:40

如图:以上就是我的机器中所有可用的网卡,和它的参数

这里同一个网卡参数,可以用两个不同的方法去表示.比如3号,Intel的无线网卡.我们即可以ifname=3 也可以ifname= \Device\NPF_{E93E58F7-430F-45F7-9565-0CEED2108E27} 意思都是将某一个asa中的端口桥接到本地的这个无线网卡上.(这里ifname还可以支持tap接口,因为篇幅问题加上tap接口配置有比较烦琐,不加详细介绍,有兴趣可以邮件讨论)

所以在第一次运行之前请务必需要修改文件中的网卡参数为你主机对应的网卡参数(红下划线部分).

2008-4-10 22:40

提示:当然3.ASA802.bat 文件的批处理只模拟运行一个asa(2个端口),你也可以模拟更多的接口,创建接口:

-net nic,vlan=N,model=i82557b,macaddr=00:aa:00:00:02:01 -net pcap,vlan=N,ifname=XXXX

运行多个asa可以在附件文件夹内复制多个asaemu文件夹,分别运行文件夹内的相应文件

2008-4-10 22:40

Ⅳ.做好一切准备工作后,点击3.ASA802.bat

将看到:

2008-4-10 22:40

之后使用telnet 工具.这里我使用SecureCRT演示

2008-4-10 22:43

创建快速连接,如上图.点击Connect,将会看到一个启动信息:

2008-4-10 22:43

今后将进入shell 命令环境:

2008-4-10 22:43

依次如图键入命令:

2008-4-10 22:43

以上是对Disk进行格式化和挂载分区(使用linux fdisk命令),按照上面操作完毕即可,另外这一步紧在第一次启动时需要操作,以后就不再需要!

依次键入下图命令:

2008-4-10 22:43

上面这一步是加载e100模块和激活网卡(注意在3.ASA802.bat中模拟了几个端口这里就需要up几个网卡,eth0,eth1,….ethN),然后启动lina_monitor程序(asa操作程序),在输入/asa/bin/lina_monitor后回车,之后就可以进入到ciscoasa>界面

可选操作–begin（如果对linux系统不熟悉可以跳过下面步骤）:
这一步骤是在每次启动都必须执行的.当然可以这样做,在打包asa linux文件系统之前可以写一个自动的脚本在其中().
首先使用vim编辑一个脚本存放在bin/文件夹内如图:

2008-4-10 22:43

之后编辑etc/init.d/rcS.common文件如图:

2008-4-10 22:46

然后保存,这样每次就可以自动启动相关命令.
可选操作—done

所有的步骤都已经完毕
这样一个虚拟的ciscoasa就呈现在我们眼前:

2008-4-10 22:46

3．我们可以用这个虚拟ASA做什么？
l
可以在没有设备在旁边的时候在自己本本上熟悉ASA的命令,完全可以当作一个去现场前的”练习场”
l
可以通过网络搭配,配合dynamips(cisco IOS 模拟器)来搭建一个实验环境.
l
支持单模式下的ASA所有实验.
l
因为模拟不完全原因,FLASH是有问题的,这样造成不能多模式,另外保存配置需要使用命令:
copy running-config disk0:/.private/startup-config
虽然会报错,但是确实是可以保存。Copy run start 不能生效.
l
这仅仅只是个虚拟化的ASA,请不要对它期望过高.仅做学习之用.

至此完毕，欢迎来到netemu社区
原文地址http://netemu.cn/bbs/thread-8308-1-1.html

文中提到的附件请到netemu社区下载

思科4月推安全初级CCNA Security认证!

小漏 — Wed, 02 Apr 2008 00:41:58 +0000

思科4月推安全初级CCNA Security认证

当网络安全成为基本常识而不是专业知识时，思科为了强化基本网络认证CCNA对网络安全的理解，将在4月推出全新的认证CCNA Security。

思科在路由器与交换器的基础认证CCNA，是所有网络工作者的基础认证之一。但自从思科从2007年11月正式推出新版的CCNA认证后，思科在专业认证上出现了一些变化，除了推出比CCNA更基础的认证CCENT外，思科将于4月宣布，在网络安全上推出基础的思科网络安全认证CCNA Security。

身为思科亚太最高培训合作伙伴的晨宇信息总经理，Huiqing Huang表示，思科近年整并许多公司与技术，为了将这些高阶技术做更专业化的上下整合，思科也在相关认证上，进行有计划的技术整合与推动事宜。www.netemu.cn消息：除了在4月宣布CCNA Security新认证外，思科也计划于7月推出CCNA Voice认证，未来计划推动的认证还有CCNA Wireless。Huiqing Huang说：“从思科的认证推动计划中也可以发现，思科正有计划的、一步步整合与推广各种高阶技术。”

目前思科在网络安全的认证上，已经推出中阶Profession的CCSP，以及Expert的CCIE Security。晨宇信息Cisco认证讲师，Zhihao Lian表示，CCNA Security主要是将CCSP的网络安全概念，落实到基础的网络认证中。CCNA Security分成网络安全准则简介、周边安全及使用思科IOS防火墙的网络安全设定等6大安全模块。

Zhihao Lian表示，CCNA Security分成6大模块，在原厂教材中，这6大模块就是6个章节，介绍思科相关的信息安全知识与基本要求。但是在中阶的CCSP则有很大的差别，Zhihao Lian指出，在CCNA Security原厂教材中，6大模块各有1本专书探讨，其中也包含思科所有产品的安全性相关知识与设定。

Expert的CCIE Security在内容上，不仅包含CCNA Security和CCSP的课程与内容，更加入企业导入时所需要了解的相关网络安全和产品的知识。Zhihao Lian指出，思科产品上的相关安全设定与认知，CCSP教材已经完整纳入，而CCIE Security则在CCSP的基础上，提供更细腻、更实务的学习。Huiqing Huang说：“也因为CCIE Security包含的范围更广、更深，目前台湾取得CCIE Security认证的IT人，总数不超过50人。”

思科预计在4月宣布推出CCNA Security的认证考试前，会针对不同区域推动讲师课程培训。Huiqing Huang表示，4月份亚洲的教师课程培训是思科课程培训的最后一站，也意味着思科在认证考试上，一旦宣布推出新的认证考试时，相关的教材、师资都已经完整规画清楚。

思科新推出的CCNA Security认证考试，Huiqing Huang说：“在考试上，必须先考过CCENT之后，才能报考CCNA Security的认证考试，”Zhihao Lian补充表示，“相较于要通过CCSP的网络安全认证考试，必须针对6大模块任选5科考试的情形，CCNA Security只需要考1科考试即可，”

目前所有思科的认证考试都必须透过VUE报名、上机考试，包含45至60题的单、复选题目。Zhihao Lian指出，就目前所知，CCNA Security的考试内容除了包括设定的题型外，还有模拟的实验室题目，会有一个情境模拟设定，要求考生将相关的网络安全完成设定。Huiqing Huang指出：“目前亚洲预计在5月份VUE相关的题库会上线，所有的课程与师资培训，也都可以在5月份准时完成、顺利上线。”
56CTO消息,CCNA Security考试代号应该是640-805，目前官方还没有正式公布！而CCSP是否一定要通过CCNA Security认证,也没确定下来

New Ccnp Portable Command Guide

小漏 — Sat, 29 Mar 2008 04:47:48 +0000

此次更新了iscw,ont的书籍，四本全部聚齐

Ccnp Bsci Portable Command Guide (self-study Guide)

文件名：Ccnp Bsci Portable Command Guide (self-study Guide)
中文名：CCNP BCSI BCMSN可移植命令自学指南]
文件语言：英语
文件格式：PDF
文件简介：这个是新版CCNP BSCI的指南

CCNP BCSI BCMSN可移植命令自学指南]
CCNP BSCI Portable Command Guide (Self-Study Guide)

Preparing for the CCNP?certification? Working as a network professional? Here are all the CCNP-level commands for the Building Scalable Cisco Internetworks (BSCI) exam you need in one condensed, portable resource. The CCNP BSCI Portable Command Guide is filled with valuable, easy-to-access information and is portable enough for use whether you抮e in the server room or the equipment closet.

This book helps you memorize commands and concepts as you work to pass the CCNP BSCI exam (642-901). The guide summarizes all CCNP certification-level Cisco IOS?Software commands, keywords, command arguments, and associated prompts, providing you with tips and examples of how to apply the commands to real-world scenarios. Configuration examples throughout the book provide you with a better understanding of how these commands are used in simple network designs.

Eight CCNP BSCI topic areas are covered, including

* Network Design Requirements
* EIGRP
* OSPF
* Integrated IS-IS
* Manipulating Routing Updates
* BGP
* Multicast
* IPv6

附件

showcoverjq8.jpg (46.35 KB)

2007-9-4 07:06

Down: http://netemu.cn/bbs/thread-4909-1-2.html

Ccnp BCMSN Portable Command Guide (self-study Guide)

文件名称：Ccnp BCMSN Portable Command Guide (self-study Guide)
中文名：CCNP BCMSN 可移植行命令手册
文件格式:PDF
文件语言：英语
出版社：Cisco press
文件页数：168
文件简介：如下
Publisher: Cisco Press
Language: English
ISBN: 1587201887
Paperback: 168 pages
Data: Jun 2007
Format: PDF
Description: Preparing for the CCNP? certification? Working as a network professional? Here are all the CCNP-level commands for the BCMSN exam you need in one condensed, portable resource. The CCNP BCMSN Portable Command Guide is filled with valuable, easy-to-access information and is portable enough for use whether you’re in the server room or the equipment closet.

This book will help you memorize commands and concepts as you work to pass the CCNP BCMSN exam (642-812). The guide summarizes all CCNP certification-level Cisco IOS? Software commands, keywords, command arguments, and associated prompts, providing you with tips and examples of how to apply the commands to real-world scenarios. Sample configurations throughout the book provide you with a better understanding of how these commands are used in simple network designs.
The topics in this portable command guide cover how to do the following:
Implement VLANs
Conduct the operation of Spanning Tree Protocol and EtherChannel in a hierarchical network
Implement inter-VLAN routing
Implement gateway redundancy technologies
Describe and configure wireless client access
Describe and configure security features in a switched network
Configure support for voice
Scott Empson is currently the assistant program chair of the bachelor of applied information systems technology degree program at the Northern Alberta Institute of Technology in Edmonton, Alberta, Canada, teaching Cisco? routing, switching, and network design courses in certificate, diploma, and applied degree programs at the post-secondary level. He is also the program coordinator of the Cisco Networking Academy? Program at NAIT, a Regional Academy covering central and northern Alberta. He has earned three undergraduate degrees and currently holds several industry certifications, including CCNP, CCDA?, CCAI, and Network+.
Access all CCNP BCMSN commands—use as a quick offline resource for research and solutions
Logical “how-to” topic groupings provide one-stop research
Great for review before taking the CCNP BCMSN certification exam
Compact size makes it easy to carry with you, wherever you go
“Create your own journal” section with blank, lined pages allows you to personalize the book for your needs
This book is part of the Cisco Press? Certification Self-Study Product Family, which offers readers a self-paced study routine for Cisco? certification exams. Titles in the Cisco Press Certification Self-Study Product Family are part of a recommended learning program from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press.
Category: Cisco Press—Cisco Certification
Covers: CCNP BCMSN Certification 642-812

附件

2007-07-14_104626.png (75.91 KB)

2007-9-4 07:12

BCMSN[1].Portable.Command.Guide.rar (3.61 MB)
Ccnp ISCW Portable Command Guide (self-study Guide)

ccnp Iscw Portable Command Guide

2008-3-28 13:58

Preparing for the CCNP certification? Working as a network professional?
Here are all the CCNP-level commands for the ISCW exam you need in one
condensed, portable resource. The CCNP ISCW Portable Command Guide is
filled with valuable, easy-to-access information and is portable enough
for use whether you’re in the server room or the equipment closet.

This book can help you memorize commands and concepts as you work to
pass the CCNP ISCW exam (642-825). The guide summarizes all CCNP
certification-level Cisco IOS Software commands, keywords, command
arguments, and associated prompts, providing you with tips and examples
of how to apply the commands to real-world scenarios. Sample
configurations throughout the book provide you with a better
understanding of how these commands are used in simple network designs.

The topics in this portable command guide cover how to do the following:
- Implement basic teleworker services
- Implement Frame-Mode MPLS
- Implement a site-to-site IPsec VPN
- Describe network security strategies
- Implement Cisco Device Hardening
- Implement Cisco IOS Firewall
- Describe and configure Cisco IOS IPS

URL: _http://www.amazon.com/exec/obidos/tg/detail/-/1587201860/
Download:

CODE
http://rapidshare.com/files/102663583/1587201860.zip

[attach]6710[/attach]
[ R e l e a s e N o t e s ]

All the ONT 642-845 commands in one compact, portable resource

Preparing for the CCNP® certification? Working as a network
professional? Here are all the CCNP-level commands for the ONT exam you
need in one condensed, portable resource. The CCNP ONT Portable Command
Guide is filled with valuable, easy-to-access information and is
portable enough for use whether you’re in the server room or the
equipment closet.

This book will help you memorize commands and concepts as you work to
pass the CCNP ONT exam (642-845). The guide summarizes all CCNP
certification-level Cisco IOS® Software commands, keywords, command
arguments, and associated prompts, providing you with tips and examples
of how to apply the commands to real-world scenarios. Sample
configurations throughout the book provide you with a better
understanding of how these commands are used in simple network designs.

The topics in this portable command guide cover how to do the following:
- Describe Cisco VoIP implementations
- Describe QoS considerations
- Describe DiffServ QoS implementations
- Implement AutoQoS
- Implement WLAN security and management

URL: _http://www.amazon.com/exec/obidos/tg/detail/-/1587201852/

Download

http://rapidshare.com/files/102665380/1587201852.zip

Cisco ios

小漏 — Sun, 09 Mar 2008 02:26:38 +0000

提供的cisco ios 仅用于模拟器学习与研究用途，请勿用于商业行为，否则后果自负 ae4697ee收集网络上提供下载ios的FTP,链接等，如果你在以下的地址还是无法找到自己想要的，请回复，我将上传.注意：只提供dynamips,pemu,asa,junos等模拟器相关os，谢谢

交流地址:http://www.netemu.cn/bbs

c1700-k9o3sy7-mz.124-15.T1.bin 只有T1的
下载地址 http://www.xiaolou.net/netemu/ios/c1700-k9o3sy7-mz.124-15.T1.bin

c1700-k9o3sy7-mz.123-23.bin
c1700-sy7-mz.123-23.bin
c1700-y-mz.123-23.bin
c2691-ipvoicek9-mz.124-13b.bin
c2691-jk9o3s-mz.123-22.bin
c2691-is-mz.123-22.bin
c2691-entservicesk9-mz.124-13b.bin
c2691-adventerprisek9_sna-mz.124-13b.bin
c2691-ipbasek9-mz.124-13b.bin
c2691-ik9s-mz.123-22.bin
c2691-entbasek9-mz.124-13b.bin
c2691-bino3s-mz.123-22.bin
c2600-adventerprisek9-mz.124-17.bin
c2600-is-mz.123-22.bin
c2691-i-mz.123-22.bin
c2600-advipservicesk9-mz.124-17.bin
c2600-is-mz.123-17a.bin
c2600-ipbasek9-mz.124-17.bin
c2600-ik9s-mz.123-22.bin
c2600-ik9o3s3-mz.123-23.bin
c2600-is4-mz.123-23.bin
c2600-bino3s3-mz.123-22.bin
c2600-i-mz.123-22.bin
c2600-i-mz.123-22.bin

c3660-telcoentk9-mz.124-13b.bin
c3660-ik9o3s-mz.124-13b.bin
c3660-telcoentk9-mz.123-22.bin
c3640-jk9s-mz.124-16.bin
c3660-is-mz.123-23.bin
c3640-is-mz.124-16.bin
c3660-ik9o3s-mz.123-22.bin
c3640-ik9s-mz.124-16.bin
c3660-i-mz.124-13b.bin
c3640-is-mz.123-23.bin
c3660-i-mz.123-22.bin
c3640-i-mz.124-16.bin
c3640-i-mz.123-23.bin
c3640-ik9o3s-mz.123-22.bin
c3640-ik9s-mz.123-23.bin
c3620-ik9o3s7-mz.123-22.bin

c7200-jk9s-mz.124-13b.bin
c7200-jk9s-mz.124-13a.bin
c7200-jk9su2-mz.123-23.bin
c7200-is-mz.124-13b.bin
c7200-jk9s-mz.123-22.bin
c7200-ik9s-mz.124-13b.bin
c7200-is-mz.123-22.bin
c7200-ik9o3s-mz.123-22.bin

c7301-boot-mz.122-18.S1.bin
c7200-k4p-mz.120-24.S2.bin
c7200-p-mz.120-22.S5.bin
c7200-kboot-mz.122-18.S1.bin
c7200-kboot-mz.122-18.S.bin
c2600-is-mz.120-28a.bin
c2950-i6q4l2-mz.121-19.EA1.bin
c7301-boot-mz.122-18.S.bin
c7400-kboot-mz.122-14.S3.bin
c7200-boot-mz.120-22.S5.bin
c2500-k4p-l.120-25.4.S

rsp-jk9sv-mz.123-7.T.bin
c7200-jk9s-mz.123-7.T.bin
c3660-ik9s-mz.123-3a.bin
c7200-k91p-mz.122-18.S4.bin
c7200-k91p-mz.122-18.S1.bin
c7200-k91p-mz.122-18.S.bin
c7301-k91p-mz.122-18.S5.bin
c7301-k91p-mz.122-18.S.bin
c7301-k91p-mz.122-18.S1.bin
c7400-k91p-mz.122-14.S3.bin
c7301-is-mz.122-11.YZ2.bin
c2500-k4p-l.120-25.4.S
c7301-boot-mz.122-18.S1.bin
c7200-k4p-mz.120-24.S2.bin
c7200-p-mz.120-22.S5.bin
c7200-kboot-mz.122-18.S1.bin
c7200-kboot-mz.122-18.S.bin
c2600-is-mz.120-28a.bin
c2950-i6q4l2-mz.121-19.EA1.bin
c7301-boot-mz.122-18.S.bin
c7400-kboot-mz.122-14.S3.bin
c7200-boot-mz.120-22.S5.bin
c2600-adventerprisek9-mz.123-4.XD.bin
c2600-ik9o3s-mz.122-21b.bin
c1700-ipvoice-mz.123-9.bin
c2600-jsx-mz.123-13.bin
c3550-i5q3l2-tar.121-13.EA1a.tar
c3745-ik9o3s-mz.123-9.bin
c2600-bin-mz.123-18.bin
c2600-is-mz.122-15.ZJ3.bin
c5300-is-mz.123-15.bin

Série c1600
c1600-k8osy-l.123-1a.bin
c1600-k8Osy-Mz 123-9.bin
c1600-k8osy-mz.123-1a.bin
c1600-k8osy-mz.123-3a.bin
c1600-oy-mz.121-6.bin
c1600-sy-l_112-17_P.bin
c1600-sy-mz.123-1a.bin
c1600-sy-mz.123-6.bin
c1600-y-l.123-1a.bin
c1600-Y-Mz 123-1A.bin
c1600-bnr2sy-l.123-3a.bin
C1600-K8osy-Mz 123-5a.bin
C1600-K8osy-Mz 123-6.bin
c1600-k8osy-mz.123-13.bin
c1600-k8osy-mz.123-1a.bin
C1600-Nosy-Mz 123-1a.bin

Série 1841
c1841-broadband-mz.123-11.T3.bin

Série 2500
c2500-c-l.122-13.T.bin
c2500-i-l.113-11a.bin
c2500-i-l.120-7.T
c2500-i-l.121-18.bin
c2500-i-l.121-2.T.bin
c2500-i-l_120-5.bin
c2500-io-l.120-7.bin
c2500-io-l.120-9.bin
c2500-is56i-l.120-24.bin
c2500-is56-l.120-24.bin
C2500-Is-L 123-3A.bin
c2500-is-l.121-18.bin
c2500-is-l.122-8.T.bin
c2500-is-l_120-7.bin
c2500-ix-l.122-13.bin
c2500-jos56i-l.121-18.bin
c2500-js-l.122-7a.bin
C2500-Is-L 123-3A.bin

Série c2900
c2900xl-c3h2s-tar.120-5.WC7.zip

Série c2950
c2950-i6q4l2-mz.121-6.EA2b.bin
c2950-i6q4l2-mz.121-6.EA2c.bin
c2950-i6q4l2-mz.121-9.EA1.bin
c2950-i6q4l2-mz.121-9.EA1d.bin
c2950-i6q4l2-tar.121-12c.EA1.zip c2950-i6q4l2-tar.121-9.EA1.zip

Série c3550
c3500XL-c3h2s-mz-120.5-XW.bin
c3550-i5k2l2q3-tar.121-11.EA1.zip
c3550-i5q3l2-tar.121-12c.EA1.zip
c3550-i5q3l2-tar.121-8.EA1c.bin

Série c3600-2600
c3600-2600-analog-fw.1.2.2.bin

Série c3620
c3620-i-mz.121-6.bin
c3620-i-mz_121-5_T.bin
c3620-is-mz.120-28d.bin
c3620-is-mz.120-5.T1.bin
c3620-is-mz.122-16.bin
c3620-is-mz_121-5_T

Série 3631
c3631-telcoent-mz.123-2.T1.bin

Série c3640
C3640-I-Mz 123-6.bin
c3640-i-mz.120-17.bin
c3640-i-mz.120-7.T.bin
c3640-i-mz.122-6.bin
C3640-Is-Mz 123-6.bin
c3640-is-mz.120-5.bin
c3640-is-mz.120-7.T.bin
c3640-is-mz.121-11.bin
c3640-is-mz.122-1.bin
c3640-is-mz.122-7.bin
c3640-is-mz.123-8.T_96_32_Plus.bin
c3640-jk9o3s-mz.123-10.bin
C3640-Js-Mz 123-6a.bin
c3640-js-mz.122-8.T.bin
C3640-Jsx-Mz 123-6.bin
c3640-ix-mz.123-12a.bin
c3640-is-mz.123-1a.bin
c3640-is-mz.123-10.bin
c3640-i-mz.123-9a.bin

Série c3660
c3660-is56i-mz.120-7.XK.bin
c3660-is56i-mz.120-7.XK2.bin
c3660-is-mz.121-6.bin
c3660-jo3s56i-mz.120-7.XK1.bin
c3660-jo3s56i-mz.120-7.XK2.bin
C3660-Jk9S-Mz 123-3.bin
c3660-is-mz.123-5a.bin
c3660-ik9s-mz.123-16.bin

Série 3725
c3725-ix-mz.123-3c.bin
c3725-ipvoice-mz.123-10.bin

Série c5300
c5300-i-mz.120-5.T1.bin
c5300-i-mz.122-1a.bin
c5300-i-mz.122-2.XA3.bin
c5300-i-mz.122-2.XB3.bin
c5300-is-mz.120-4.XJ4.bin
c5300-is-mz.120-7.T.bin
c5300-is-mz.122-2.XA3.bin
c5300-jk9s-mz.122-2.XB3.bin
c5300-js-mz.121-5.T5.bin
c5300-is-mz.122-2.XA3.bin
c5300-i-mz.122-2.XB3.bin

Série c5350
c5350-is-mz.122-11.T.bin
c5350-is-mz.122-2.XB3.bin
c5350-is-mz.122-2.XB6.bin
c5350-jk8s-mz.122-11.T.bin
c5350-js-mz.122-15.T1.bin
c5350-js-mz.122-2.XB5.bin
c5350-is-mz.123-9.bin

Série c7200
c7200-is-mz.19991126
c7200-js-mz.122-11.T.bin
c7200-tipv6-mz.0519
c7200-p-mz.123-7.T.bin
c7200-js-mz.123-8.T3.bin
c7200-js-mz.123-7.T.bin
c7200-js-mz.123-6b.bin
c7200-jk9s-mz.123-7.T.bin
c7200-jk9s-mz.123-12a.bin
C7200-Jk9o3S-Mz 123-8 T.bin
c7200-is-mz.123-6a.bin
c7200-is-mz.123-3.bin
c7200-is-mz.123-1a.bin c7200-is-mz.123-14.T1.bin
c7200-ik9s-mz.123-10.bin
c7200-ik9o3s-mz.123-1a.bin

Série PIX 634
pix634.bin ae4697ee

IOS来自于互联网版权属于CISCO 请不要作为商业用途
否则后果自负

http://www.xiaolou.net/cisco-ios/

PIX 635
PIX 721
PIX 711
PIX 722
PIX 515
PIX 535
PIX 529
ASDM512
ASDN 511
PIX 802
ASDM6.0
asdm-602.bin
asdm-602.msi
asa722-19-k8.bin
asa802-k8.bin
vnc-plugin.jar
ssh-plugin.jar
rdp-plugin.jar

上传中
请于24小时后删除(大家都这么说的)

[hide]

因为论坛有流量限制请选择连接下载

PIX635:
ftp://edurainbow:cisco@www.edurainbow.com/PIX/OS/pix635.bin

PIX721下载:

ftp://edurainbow:cisco@www.edurainbow.com/PIX/OS/pix721.bin

Pix515:

ftp://edurainbow:cisco@www.edurainbow.com/PIX/OS/pix515.bin

add1:
Tuesday, May 15, 2007  1:20 PM    8331264 asa722-19-k8.bin
   Tuesday, June 19, 2007  4:40 PM    14524416 asa802-k8.bin
   Tuesday, June 19, 2007  4:41 PM    6889764 asdm-602.bin
   Tuesday, June 19, 2007  4:42 PM    13760400 asdm-602.msi
   Thursday, March 29, 2007 12:27 PM    5670400 asdm522-58.bin
   Saturday, May 19, 2007 10:55 AM       636 info.txt
   Tuesday, June 19, 2007  4:44 PM    545757 rdp-plugin.jar
   Tuesday, June 19, 2007  4:43 PM    254725 ssh-plugin.jar
   Tuesday, June 19, 2007  4:43 PM       69106 vnc-plugin.jar

add2：
http://xiaolou.4shared.com
password:netemu.cn

add3：
htp://dynagen.cn/pix/asdm-511.rar
htp://dynagen.cn/pix/asdm-512.rar
htp://dynagen.cn/pix/asdm-602.msi
htp://dynagen.cn/pix/asdm-602.rar
htp://dynagen.cn/pix/pix515.bin
htp://dynagen.cn/pix/pix721.bin
htp://dynagen.cn/pix/pix721.rar
http://dynagen.cn/pix/pix722
http://dynagen.cn/pix/pix802.rar
http://dynagen.cn/pix/pix_635.bin

地址N
ftp://down.netemu.cn
user:netemu.cn
password:netemu.cn

在分享一个FTP 内涵大量pix ios http://netemu.cn/bbs/thread-6069-1-1.html

思科IOS IP SLA 详解

小漏 — Wed, 05 Mar 2008 01:31:16 +0000

思科IOS SLA(以下简称IP SLA)基于思科SAA 技术发展而来，并在其基础上进行了增强 … 本文集中讨论了新的SLA（又称作SAA）信息，包括使用与配置原则，最近公司vip客户的备份线路也做了sla，监控与对端是否连同，保证质量.

对这个还不是很了解，客户端设备的ios要isp版本的才支持，而机房一台sla服务器的26xx就可以做了,版本12.2就够了，先学习学习

特找来文档看看,这个是网上找到的中文文档

下载地址：chick it

思科最新推出CCDE: Cisco Certified Design Expert

小漏 — Wed, 23 Jan 2008 06:55:17 +0000

Expert Level Network Design and Architecture ExperienceCCDE Assesses advanced Network Infrastructure Design Principles and Fundamentals for large networks. A CCDE can demonstrate an ability to develop solutions which address planning, design, integration, optimization, operations, security and ongoing support focused at the infrastructure level for customer networks.
链接：

http://www.cisco.com/web/learning/le3/ccde/index.html

中文站点还没有推出网页。

Prerequisites for CCDE

There are no formal prerequisites for CCDE certification. Other professional certifications or training courses are not required.
Recommended Training and Experience

It is expected that the candidate will have an in-depth understanding of the topics in the exam blueprints, a minimum of seven years job experience, and a thorough understanding of networking infrastructure principles. Please view the written exam information page for more details.
Step One: CCDE Written Exam

You must pass the two-hour, written qualification exam which covers advanced networking infrastructure design principles and concepts. Once you pass the qualification exam, you are them eligible to schedule the practical exam.

Written Exam Information

Written exams are scheduled and taken at Pearson Vue, Cisco’s authorized testing vendor. Please visit the link below for more details and to schedule exams. Be sure to use the same candidate ID number for every exam that you take. If you use a different ID number, you will create a different record in the CCIE database and you will need to contact CCIE support for help in merging the records.

Schedule and Pay for Written Exam
Step Two: CCDE Practical Exam

The CCDE practical exam is still in development, however it will be an eight-hour exam that will test your ability to identify, manage, and create advanced solutions for large scale networks. You must pass the lab within three years of passing the written exam in order to achieve certification.

2门考试：

第一门：资格考试，网络基础理论，2小时，选择题；现在可靠，据说。。。。
第2门： 8小时，实验考试，考察实践动手能力；

小漏 » cisco

最新的 pass4sure for ccie 350-001 v2.93

破解和模拟CISCO ASA操作系统

思科4月推安全初级CCNA Security认证!

New Ccnp Portable Command Guide

Ccnp Bsci Portable Command Guide (self-study Guide)

附件

附件

ccnp Iscw Portable Command Guide

Cisco ios

思科IOS IP SLA 详解

思科最新推出CCDE: Cisco Certified Design Expert