Tag Info

New answers tagged

2

I recently wrote an Ansible module that allows you to use SSH+SCP to transfer a file to Cisco IOS devices. One of the use cases is obviously transferring IOS images. It has some built-in checks like not transferring the file if it already exists and performing an MD5 comparison (original file to transferred file). The MD5 is CPU intensive on the router, ...


0

NO_PROPOSAL_CHOSEN means a protocol or key mismatch. Try to enable "Perfect forward secrecy" and set it to "Group2" on your SonicWall.


0

guess what, it turned out that the fibre on end of the line had to be flipped at the connector! Who knew....


2

By default there is no limitation on the status of the ports. They should be administratively enabled by default. Additional thoughts: Check that the ports are not administratively disabled (show int x/y). Verify that the SFP on both sides are the same (multimode/singlemode of the same type/wavelength) Ensure that switch to switch connection is allowed ...


0

Without getting into a bunch of gory details, I'll just make the following points: 1. You can't "route" traffic at layer 2, routing occurs at layer 3. 2. The client traffic is going to die without ever reaching the IPS or the Firewall. The client is going to ARP for the Default Gateway, and being that the Default Gateway is in a different VLAN it will get ...


1

Seems it is a normal behaviour for OID .1.3.6.1.4.1.9.9.171.1.2.3.1.35 Its value is INTEGER: 1 when tunnel is up, but this OID disappears when tunnel is down. So your check should handle this : if OID is not found then raise an alert because tunnel is down : http://www.nycnetworkers.com/management/monitor-cisco-asa-vpn-tunnel-state-via-snmp Unlike ...


1

I had a simmilar issue and this document helped me out... VPN: The log shows "Received Notify: No Proposal Chosen" (SW3902) - Affected SonicWALL Security Appliance Another hint is to check the passphrase - and be sure that the shared secred has a minimum lenght of 6 characters.


0

I think you're confusing things. Finding and joining an AD domain doesn't rely on broadcast traffic, it relies on direct communication with a DNS server (hosting the AD FQDN) and a Domain Controller (which most times is the same server as the server hosting the DNS FQDN of the AD domain) for protocols such as DNS, LDAP, RPC, Kerberos, SMB, etc. The ...


1

This is because the source address you are using to connect is in a different subnet and/or the APs don't allow packets having more than one hop. To circumvent this you should: Connect to the AP via some workstation on the LAN, by getting the remote desktop and using a web browser. This is pretty much the silver bullet. If you can't do the above, configure ...


1

This option is used when you need to compare tcp and udp port numbers. Operator can be one of the following keywords: lt (less than) gt (greater than) eq (equal) neq (not equal) range (inclusive range of values) and operand is the value of the source or destination port for the specified protocol. For example, the following ACE: access-list 100 ...


-2

Ask this question: how does Vonage do it? If you do something for money, you better have some security in place. I'm sure they upgrade infrastructure all the time. If your not to concerned about security within the employees home, a router set up to connect to the company's VPN might be useful. Connect your IP phone to that.


1

The problem is that when you specify a tacacs or radius server first in your login method in your case the defualt method, it will never try the local username unless tacacs or radius is unreachable. So if you want to test your local login 1 of the following: 1. remove your device from radius (not good for production devices) 2. shut off the port that ...



Top 50 recent answers are included