2
edits
Changes
no edit summary
*** Varinder Singh Jhand: zenit.senecac.on.ca:9418/nad810_091a04
*** Kezhong Liang: zenit.senecac.on.ca:9417/nad810_091a05
*** Gregory John Katherine Ada Masseau: zenit.senecac.on.ca:9418/nad810_091a06
*** Milton Paiva Neto: zenit.senecac.on.ca:9417/nad810_091a07
*** Mohak Dilipbhai Vyas: zenit.senecac.on.ca:9418/nad810_091a08
= Week 11 (March 30) - IPSec and VPN =
[https://cs.senecac.on.ca/~rchan/nad810/0901/IPSec-VPN.pdf IPSec and VPN Slides]
[http://unixwiz.net/techtips/iguide-ipsec.html An Illustrated Guide to IPSec]
[http://www.freeswan.org FreeSWAN]
[http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch35_:_Configuring_Linux_VPNs Configure Linux VPN]
==Assignment 2==[[NAD810 A2|Specification]] [http://zenit.senecac.on.ca/wiki/index.php/Milton-vpn-openswan]Milton's Assignment #2 - Linux VPN with OpenSwan '' '''[http://zenit.senecac.on.ca/wiki/index.php/Talk:Winter_2009_NAD810_Weekly_Schedule Nes: a fantastic, awarding winning tutorial: 'VPN/IPSec for Dumpling']''' '' = Week 12 (April 6) - DNSSEC =DNS Security Extensions* FOUR New Resource Record Types:** The DNSKEY Record*** Zone-signing Key*** Key-signing Key** The RRSIG Record - store the digital signature on an RRset** The NSEC Record - "Next SECure" record, to indicate which domain name comes next after a given domain name** The DS Record - for Delegation Signer* EDNS0 - Teh Extension Mechanisms for DNS, version 0** handle a DNS message larger than 512 bytes** DO flag - DNSSEC OK** AD and CD flag for DNS queries:*** AD - Authenticated Data*** CD - Checking Disabled* Zone Signing** Use dnssec-keygen to generate KSK and ZSK pairs*** dnssec-keygen -f KSK -a RSASHA1 -b 512 -n ZONE mydomain.com.*** dnssec-keygen -a RSASHA1 -b 512 -n ZONE mydomain.com.** Use dnssec-zonesige to sign the zone file*** dnssec-signzone -o mydomain.com. db.mydomain*** keyset file*** dsset file References:* DNS and BIND by Cricket Liu and Paul Albitz - 5th Edition* [http://www.isc.org ISC]* [http://ftp.isc.org/www/bind/arm95/Bv9ARM.ch04.html DNSSEC - BIND Administration Reference Manual]* [http://csrc.nist.gov/publications/nistpubs/800-81/SP800-81.pdf Secure Domain Name System Deployment Guide - PDF file] = Week 13 (April 13) - Review =* Assignment 2 Due (April 14) * Final Quiz on April 16 (5%)* Exam Review
= Exam Week (April 20) - =
[[Category:LUX]][[Category:NAD810]]
