Tag Info

Hot answers tagged

5

As an Information Assurance (IA) principle, the less unnecessary services running on a device, the lower the attack surface. To mitigate issues, proper configuration and patching levels are key. Changing ports is one of many elements you can do to lower the potential security risk. Cisco has an excellent guide for proper implementation of the HTTP/HTTPS ...


3

One potential problem with HTTPS is that lazy people (like me) may not set up a Kerberos certificate on the device to ensure that connections to it are secure. Your certificate would have to come from one of 3 sources: a commercial certificate authority like Verisign (expensive), setup your own CA using a Windows or Linux server (not that hard, but time ...


3

Devices in the same subnet don't need router to access each other. Learn networking basics.


2

Enabling HTTPS and changing the port number is actually very common practice. Using a secure password for the login will also increase the security. Of course, you should always use HTTPS over HTTP. But ultimately to answer your question, no it's not insecure. The web management interface is just a user friendly way to configure the settings, but if ...


2

This is indeed more a network troubleshooting question than InfoSec. nmap is a great tool for scanning ports but since you do have access to each endpoints, I would use netcat to troubleshoot this. According Wikipedia, SIP listen on 5060 / 5061 (UDP or TCP). To verify what port is listening you can use one of those tools on the SIP server: lsof -P -n ...


2

You are assuming the router is performing NAT. The router will drop the packet, or less likely send an ICMP reject code routers don't forward anything that is not "established"(outgoing/STUN) or port forwarded (firewall/uPnP). Just like if you were running Apache and IIS on the same box they can't both directly use the same port. IIS comes with a proxy ...


2

I assume your router is running NAT? Because why else would you have "port forwarding rules". If so, the packet will get dropped by the router.


2

I second MadHatter's suggestion of using a desktop UPS. In fact, that's exactly the solution I settled on a few years back when I got a contract to set up wireless coverage for a couple million square feet of warehouse. To avoid needing expensive new fiber runs, the routers and switches for each building were hung up in the ceiling, and provided power with ...


1

To reply to your comment with an image: What you type on a client appears on the other client:


1

Your are getting this problem as your are using !. Say, one request comes and if mac address of coming host in that is other than mac address of host A, it will be redirected. And hence it is also being redirected for host B. And your second rule will never be executed. So the solution for, how to except my mac address list? Jump to one custom chain ...


1

First let me start out by adding just a bit of info. It looks like you intend all IPs to be private network addresses. The IPs that start with 172 must belong to 172.16.x.x - 172.31.x.x for them to be considered private. Since this is just a packet tracer lab, this doesn't really matter. Some of the commands I am entering might be unnecessary if you don't ...


1

SIMPLE ANSWER: Your PC is trying to resolve the Ethernet MAC address of the next-hop interface, but it can not find none (eg: the target PC is powered off). So it reports a "Destination host unreachable" ICMP message originating from its own interface. LONG ANSWER An IP-over-Ethernet network has two complementary network addresses: a non-routable, ...


1

Every open port on your device or server increase the attack surface, certainly. That said, enabling HTTPS would be more secure than enabling a non-encrypted protocol like Telnet or HTTP. You mention changing the port number. Be careful with that, you may prevent the Cisco Network Assistant from finding/managing the device. (Does CNA let you specify a ...


1

On a Cisco Route with IOS 12.2 or higher: access-list 700 deny 0800.2000.0000 0000.00FF.FFFF See the Cisco documentation for access-list(standard-ibm).


1

Try show running-config | section ? e.g. show running-config | section router bgp It works similar to the include statement, but also lists all the sub-commands.



Only top voted, non community-wiki answers of a minimum length are eligible