Archive

Archive for July 8th, 2009

Freeradius – and Cisco 802.1x configuration

July 8th, 2009 No comments

If you want to practice radius configuration, or if you are testing a Cisco RADIUS setup without having access to the production server, here is a nice solution and sample config.

The Cisco configuration is for the IOS.  If you want to know how to configure on CatOS, read this post Read more…

Categories: CISCO, Security Tags:

Configuration change tracking

July 8th, 2009 No comments

This has been available since IOS 12.3(4)T/12.2(25)S. For each configuration command that is executed, the following information will be logged:

• The command that was executed
• The configuration mode in which the command was executed
• The name of the user that executed the command
• The time at which the command was executed
• A configuration change sequence number
• Parser return codes for the command

You can have this information stored in a local buffer or sent to a syslog server.  Here’s a basic configuration that will get you going:

Read more…

Categories: CISCO Tags:

Recovering an IOS using TFTP and Xmodem

July 8th, 2009 No comments

Have you lost or corrupted an IOS?  These procedures descibe:

  • How to recover an IOS from rommon using TFTP
  • How to recover an IOS from switch: prompt using Xmodem Read more…
Categories: CISCO Tags:

Difference Between STP BPDU Guard and STP Root Guard

July 8th, 2009 No comments

BPDU guard and root guard are similar, but their impact is different. BPDU guard disables the port upon BPDU reception if PortFast is enabled on the port. Read more…

Categories: CISCO Tags:

Configure SSH on Cisco Router

July 8th, 2009 No comments

This is the minimum configuration needed to support inbound SSH sessions on a router (you might want to add transport input ssh to the line configuration if you want to disable telnetaccess to the router): Read more…

Categories: CISCO, Security Tags:

NAT and PAT configuration examples

July 8th, 2009 No comments

Another aide-memoir Read more…

Categories: CISCO Tags:

QoS – Throttle Bandwidth Based on the Time of Day

July 8th, 2009 No comments

Scenario: Say a device in your network performs incremental backups out to a server on the internet.  These backups consume bandwidth and ruin the quality of your VoIP calls.  You wish to throttle the bandwidth for this server traffic between 6 and 10pm (when you feel you need good phone quality). Read more…

Categories: CISCO Tags:

TCL Script to ping a number of IPs

July 8th, 2009 No comments

This is a handy TCL scipt if you need to ping lots of IP addresses.  If your router supports TCL you can:

Enable TCL on router: R1#tclsh

Quit TCL: R1#tclquit

TCL SCRIPT FOLLOWS: Read more…

Categories: CISCO Tags: