Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Search results for query: *
- Users: KiscoKid
- Order by date
-
Outside Access PIX
Sure. For any IP with any mask, just do: ssh 0.0.0.0 0.0.0.0 outside- KiscoKid
- Post #4
- Forum: Security, hacker detection & forensics
-
Updating IOS to Cisco 2916 switch
If the TFTP server connection is timing out, it can due to one of the following: 1. You have no IP connectivity between the TFTP server and the switch. 2. You have specified an incorrect filename. 3. Your TFTP server is misconfigured and not pointing to the right folder on the server where the... -
Can I delete config?
Yes you can use the "delete flash:<filename>" command to remove individual files or use the "format flash:" command to remove all of them in one swoop. -
Outside Access PIX
To access the PIX with ssh from the outside use the following command: ssh a.b.c.d 255.255.255.255 outside where a.b.c.d is the host address you want to allow. If you hae never used SSH and have never configured it on the PIX before, you will need to do something like as follows to enable it...- KiscoKid
- Post #2
- Forum: Security, hacker detection & forensics
-
PIX 515, OWA and a Barracuda Firewall
In my opinion you will use the internal IP of Exchange as it's this box that services OWA. The Barracuda box sounds like it just intercepts SMTP and directing HTTP to it will probably bring up the Barracuda management interface and not OWA! Hope this helps- KiscoKid
- Post #2
- Forum: Security, hacker detection & forensics
-
Pix IDLE-TIMEOUT
You should be able to change VPN timeouts using the following command "vpngroup group_name user-idle-timeout user_idle_seconds" The following is an excerpt from the PIX command reference that explains more about it...- KiscoKid
- Post #2
- Forum: Security, hacker detection & forensics
-
PIX version 6.2 --> Idle connections die
I'm not sure this is your issue. Firstly the PIX already allows established TCP connections. Thus I believe your issue is not related to this but instead related to connection timeouts. Instead try the "timeout" command to see if that helps. Info on that command follows...- KiscoKid
- Post #2
- Forum: Security, hacker detection & forensics
-
error in BSCI book?
172.16.8.0/21 includes subnets 172.16.8.0 thru to 172.16.15.0 -
Is there a router that accepts 2 different internet connections?
Cisco's 1841 router can support multiple WAN technologies due to its module nature. It has 2 fixed Fast Ethernet ports and 2 modular WAN ports which allows you to use any 2 WAN technologies you wish. The link belows talks more about the 1841...- KiscoKid
- Post #2
- Forum: Compatible networking solutions
-
P2P & Bit Torrent Restrictions
Sure. Check out the following link from Cisco that talks to NBAR (Network Based Application Recognition) http://www.cisco.com/en/US/products/ps6616/products_qanda_item09186a00800a3ded.shtml -
Vlan Mismatch
Nothing ahppens. They are informational only and generated by CDP I believe. -
Diverting a VLAN before routing.
You are correct. If you have manually removed VLAN 17 from the trunk to the core, then VLAN 17 traffic will not be passed over it. -
Diverting a VLAN before routing.
They will be de-tagged and passed to the access port. They should not be passed to the upstream core switches if VTP pruning has been enabled thereby preventing the switch from forwarding traffic for VLAN 17 as it's not in use on the remote core switch. -
CMS
Cisco generally recommend that, depending on the switches in your cluster, that the best switches to be a command switch are the 3750 and, if one isn't present, the 3560. That said however you chave the ability to nominate a standby command switch which I personally think is a very good idea... -
PIX 7.2 Failover virtual MAC Address clarification
I admit I've never had need to configure this command as the default is to use the BIA (Burned-In Address) of the interfaces in question anyway. I got the following from the PIX Command Reference that may go some way to clarifying your question: The failover mac address command lets you...- KiscoKid
- Post #2
- Forum: Security, hacker detection & forensics
-
Is the Cisco 2811 overkill for my WAN?
The 1800 range is designed to run up to full T1/e1 rates so I'd say it probably is overkill. Based on what you are saying, the 1841 could've probably done the job for you as well. -
10BT 1ENET
Cisco measure the throughput of their products in bits per seconds. -
BGP Paths
i means IGP (interior gateway protocol) Other attributes include: e (the EGP protocol which BGP replaced) ? (INCOMPLETE meaning the prefix originated from some unknown source) Origin is a well-known mandatory attribute thus the advertising AS tells its neighbors the origins of its routes... -
input error on router 7206 NPE-G2 gigabit interface
CHeck out this article on the CCO. Whilst it talks about a high-speed ATM interface, it does pertain to you as you also have a high speed ingress interface showing ignored errors. http://www.cisco.com/warp/public/121/ignorederrors_6143.html -
CSU/DSU T1 CARD
All you should need to do is the following: Interface serial0/0 service-module t1 clock source line [internal] service-module t1 timeslots 1-24 speed 64 which clock source you use, i.e. internal or line, depends who is providing your clocking currently. If it's a Full TI, I would suggest it...
