Search results for query: *

Hi, i've got a problem regarding IGMP DDoS Attacks: (tcpdump output) 10:39:59.608340 55.178.227.218 > xxx: igmp-4 [tos 0xf,CE] 10:39:59.617338 136.232.158.203 > xxx: igmp-6 [tos 0xc] 10:39:59.626267 70.114.236.149 > xxx: igmp-7 [tos 0xf,CE] 10:39:59.635194 190.12.41.19 > xxx: igmp-4 [tos...

Sorry, it should read: 4924 Port 1 = Cisco router Uplink 4924 Port 2 = Connected to Cisco 2950 #1 4924 Port 3 = Connected to Cisco 2950 #2 ^^^^^ Jonas

Hi, i've got a question regarding vlans on the 4924. This is the problem: We have a Cisco router, which connects via GigE to the 4924. The 4924 acts as a Coreswitch, connecting serveral smaller Cisco 2950 switches which connect the clients. Our current problem is, that there are alot of...

Hi, does anyone actually use the 3550-EMI for routing? I would like to know whether a) this works b) how much throughput the 3550 can do on routing c) this is a good idea Is there any router (36xx?) i could compare the throughput to? Thanks, Jonas

Hi, thanks, how do i turn this off? (Is it even possible?) I am not using multicast in any way. Jonas

Hi, i think i've lost the community name but: just use cimon, its a unix util which can monitor almost any cisco device for memory and cpu usage. You can find it on freshmeat.net. Jonas

Heya, i am having some strange broadcast traffic from my 2950T with latest IOS (Version 12.1(13)EA1): (feteched via tcpdump) 05:25:53.349834 0:c:85:7b:9f:c1 0:c:85:7b:9f:c1 9000 60: 0000 0100 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000...

As far as i know this can only be down via SNMP. If you need the community, let me know and i'll dig it out. Jonas

Hi Hunter, thanks alot! Does this work for incoming and outgoing bandwidth? I just see the service-policy input traffic-shape for input...but not output? What are your dcsp paramenters or dont you use any at all? Thanks, Jonas

Hi, i just got a 3550-EMI and want to QoS limit the bandwidth on some ports. Heres my setup: Port 1 Uplink Port 2 to 48 Servers All Ports are in Vlan1. IP Routing is DISABLED. (Background Info: The switch should limit the customer servers to given bandwidth limits that they purchased.) I...

It probably is. People try to open shares that are open even from the internet....some windows (l)users have their whole hdd open. You should filter all incoming connections on port 137 to 139 tcp/udp.

WOW that worked. Thanks alot!

To clarify: acl_out is bound to the outside interface! I am pretty sure that the syntax is correct...

Hi, i got a strange problem. As far as i know cisco acl parses the acls from top to bottom and stops on the first match. Well, right now i have the following acl: access-list acl_out deny ip any 80.131.0.0 255.255.0.0 (hitcnt=0) access-list acl_out permit tcp any host 81.2.x.x eq smtp...

This is starting to get really strange. I have set a specific access-list for the .151 test host, even that doesnt work. Everything except tcp connections works fine, this smells like a pixos bug to me.

Update: my statement was incorrect. Its only blocking tcp now. access-list outside permit tcp any any access-list outside permit udp any any access-list outside permit icmp any any access-list outside permit ip any any access-list inside permit tcp any any access-list inside permit udp...

Thanks for the help. I just used those commands and now i can telnet to the pix from inside but i still cant acess any port on an inside server from outside. Nor can i connect from inside to any port outside (tcp). Jonas

Heya, i am rather new to PIX, i just got a 525 temporary from a friend. The scenario: Network X.X.144.0/24 Outside world gateway: X.X.144.254 Inside hosts: X.X.144.* What i want to have: Pix allowing all inside hosts to connect to outside world and otherwise. I want to allow all connections...