Tag Info

Hot answers tagged

20

You need to be able to log in on another host on the same network segment. Some of the ways to get access to the misconfigured host requires root on the intermediate host, but there also is one easy way to get access without needing root on the intermediate host. The easy way to access the host using IPv6 ssh -o ProxyCommand='ssh -W ...


9

kasperd posted a great answer detailed enough for me to learn how I can recover from situation in the question. This answer is the exact step-by-step of how I did it. SSH to server on same physical network Using arp -a or ip neighbor list as root find the MAC address of misconfigured server. Using MAC to link-local converter find link-local for ...


5

You mention client-facing systems. This to me means your first priority is uptime on the systems that make you money. Networking and storage sound like #1 and #2. (Edit:) Oh, and resiliency. Get your backups checked out, in-line and tested. Make sure you can restore them! Prioritize internal network and AD next, you need a solid foundation. Based on ...


3

As stated above, this is a question with a multitude of very long answer. So, I'll try to keep very short: backup: with no backup, if something breaks you really have a change of going out of business storage: check that your storage servers (and their disks) are in good healt networking: a careful policy audit should not take too much time (about 1-2 ...


2

Are you able to actually get a response from that address in a browser with only the local network connected? Even if ping works, there may be other network issues blocking other protocols and ports. Examples are firewalls, NAT configuration, routing issues, etc.


2

You need to load an IP address within the configured subnet of your target, not just within the range that you actually want. If you send a packet to 10.0.0.2 with subnet 255.255.255.248 from, for example, 10.0.0.220, 10.0.0.2 will look at its subnet mask to figure out how to reply. Since .220 is WAAY out of the subnet 255.255.255.248, .2 has to send the ...


1

RTSP is just another application layer protocol layered on top of TCP or UDP, like HTTP or FTP. As Wikipedia puts it The default transport layer port number is 554 for both TCP and UDP, the latter being rarely used for the control requests. If you open up TCP and UDP, you should be fine.


1

Your subnet mask is undoubtedly 255.255.255.0, so that address is not on your network. If your subnet mask is 255.255.0.0, your machine wouldn't be sending traffic to it through your gateway.


1

I'd search for the help of a project manager on a scenario like this. From my experience, tackling network (infrastructure and logic), backup and security first is a better way to pavement the changes. Also, document every aspect of the current state the whole thing runs before making any change to the environment (photos are great depending on the case). I ...


1

Restarting Print Spooler service on the client did the job. Restarting the service on the server didn't work. Our network: Win7Ultimate 64bit + a bunch of Win7Pro 64bit without domain, only workgroup.


1

I was running into this issue while using a home OpenVPN server and connecting to it using the Tunnelblick application on Mac. What was happening on my end is that a route with my home IP as the destination and an incorrect gateway was getting leftover after disconnecting from the VPN. Deleting this route solved the issue, simply $ sudo route -n delete ...


1

netsh interface ipv4 add neighbors "Local Area Connection" 10.1.1.1 12-34-56-78-9a-bc this will create a static arp entry that survives reboots. be careful adding the routes though, as you may not be able to remove them without a hotfix: https://support.microsoft.com/en-us/kb/2718830


1

I eventually just used comm2ip and modified the program to support more com ports (it only supports 5 out of the box). It is installed on a windows box with a bunch of rollover cables connected from the PC to Cisco routers. You ssh into the box and are redirected, based on the port, to a serial port. This is not a very enterprise-y solution, and we should ...


1

Assuming you've checked the basics like ensuring that the access list is actually bound to the interface with the access-group command, if the logs are showing that the traffic is being denied, you can find out more information by simulating a packet with the packet-tracer command. That should tell you exactly why the packet is being rejected. Assuming your ...


1

Run netstat -lpn and verify that the web server port you want to use is in deed running on 0.0.0.0 instead of localhost. If it's not then we need to edit the configs to listen on "*" and then restart the web server daemon. If you have a firewall on your machine, just for a few minutes here to troubleshoot, turn it completely off so that we can eliminate it ...


1

Where was this cabling that you checked? Was it inside a patch cable, or on the back of a patch panel with a punch-down? (this is not obviously clear from your question). If it was on a punch-down, the internal connections of the external blocks to the internal pins is not obvious. Different punch-downs have different wiring requirements, so you'll need to ...


1

Decided to just use Veeam ONE. Their free version offers enough data and monitoring. Seems that network monitoring is a shortfall of VMware.



Only top voted, non community-wiki answers of a minimum length are eligible