Tag Info

New answers tagged

0

Some more advanced router options are only accessible through telnet. You should be able to telnet your router's IP (e.g. telnet 192.168.1.1) and access those from the command line.


0

Check if the default gateway and subnet mask is correct. Is the virtual router on the same physical network as the external router? (Try creating a new physical network) Try pinging from your client device to your server before you try using Remote Desktop.


2

You are assuming the router is performing NAT. The router will drop the packet, or less likely send an ICMP reject code routers don't forward anything that is not "established"(outgoing/STUN) or port forwarded (firewall/uPnP). Just like if you were running Apache and IIS on the same box they can't both directly use the same port. IIS comes with a proxy ...


2

I assume your router is running NAT? Because why else would you have "port forwarding rules". If so, the packet will get dropped by the router.


0

Perhaps you need to turn on forwarding in the kernel with: sysctl -w net.ipv4.ip_forward=1


2

I second MadHatter's suggestion of using a desktop UPS. In fact, that's exactly the solution I settled on a few years back when I got a contract to set up wireless coverage for a couple million square feet of warehouse. To avoid needing expensive new fiber runs, the routers and switches for each building were hung up in the ceiling, and provided power with ...


0

Two possible answers: (1) The ARP cache on the Asus losing the MAC address for the modem router. Is there any other device besides the modem that has an interface on 192.168.0.1 ? You say you can ping 192.168.0.1 while WAN connectivity is interrupted, but can you see the Technicolor web interface on 192.168.0.1:80 or telnet to it ? If that changes, ...


0

You need to set the machine up as a dns server. If you're on Linux, this would be with bind9


0

when i telnet to my router and do ping -c 1 -w 1 -W 1 212.77.100.101 during incident, the command exits immediately Of course it exits immediately, you are giving it just 1 count and 1 second to be successful. -c count Stop after sending count ECHO_REQUEST packets. With deadline option, ping waits for count ECHO_REPLY packets, ...


0

Confirm you are receiving your IP from the DHCP on the client and it knows that 192.168.1.2 or 192.168.1.1 is the default gateway. You may have to ipconfig /release renew. Confirm on the wireless router that it does not have the DHCP server enabled, this would more than likely try to send the traffic out through it's wan port. And I assume that the wan port ...


1

To reply to your comment with an image: What you type on a client appears on the other client:


2

This is indeed more a network troubleshooting question than InfoSec. nmap is a great tool for scanning ports but since you do have access to each endpoints, I would use netcat to troubleshoot this. According Wikipedia, SIP listen on 5060 / 5061 (UDP or TCP). To verify what port is listening you can use one of those tools on the SIP server: lsof -P -n ...


1

Your are getting this problem as your are using !. Say, one request comes and if mac address of coming host in that is other than mac address of host A, it will be redirected. And hence it is also being redirected for host B. And your second rule will never be executed. So the solution for, how to except my mac address list? Jump to one custom chain ...


1

First let me start out by adding just a bit of info. It looks like you intend all IPs to be private network addresses. The IPs that start with 172 must belong to 172.16.x.x - 172.31.x.x for them to be considered private. Since this is just a packet tracer lab, this doesn't really matter. Some of the commands I am entering might be unnecessary if you don't ...


1

SIMPLE ANSWER: Your PC is trying to resolve the Ethernet MAC address of the next-hop interface, but it can not find none (eg: the target PC is powered off). So it reports a "Destination host unreachable" ICMP message originating from its own interface. LONG ANSWER An IP-over-Ethernet network has two complementary network addresses: a non-routable, ...


1

Every open port on your device or server increase the attack surface, certainly. That said, enabling HTTPS would be more secure than enabling a non-encrypted protocol like Telnet or HTTP. You mention changing the port number. Be careful with that, you may prevent the Cisco Network Assistant from finding/managing the device. (Does CNA let you specify a ...


3

One potential problem with HTTPS is that lazy people (like me) may not set up a Kerberos certificate on the device to ensure that connections to it are secure. Your certificate would have to come from one of 3 sources: a commercial certificate authority like Verisign (expensive), setup your own CA using a Windows or Linux server (not that hard, but time ...


5

As an Information Assurance (IA) principle, the less unnecessary services running on a device, the lower the attack surface. To mitigate issues, proper configuration and patching levels are key. Changing ports is one of many elements you can do to lower the potential security risk. Cisco has an excellent guide for proper implementation of the HTTP/HTTPS ...


2

Enabling HTTPS and changing the port number is actually very common practice. Using a secure password for the login will also increase the security. Of course, you should always use HTTPS over HTTP. But ultimately to answer your question, no it's not insecure. The web management interface is just a user friendly way to configure the settings, but if ...


1

Try show running-config | section ? e.g. show running-config | section router bgp It works similar to the include statement, but also lists all the sub-commands.


0

OIDs set in the config file become read-only so this is why iso.3.6.1.2.1.1.5.0 is writable only if sysName is not set in config. To have meaningful MIBs, able to write to them and produce effect, one must load them or extend the agent himself.


3

Devices in the same subnet don't need router to access each other. Learn networking basics.


1

On a Cisco Route with IOS 12.2 or higher: access-list 700 deny 0800.2000.0000 0000.00FF.FFFF See the Cisco documentation for access-list(standard-ibm).


0

I won't touch on the ports as this is well covered by David Schwartz, but I did want to touch on the other aspect of using this device for your ISP router that hasn't been addressed, which is the router performance. The 2611XM is a very old model of router that were primarily designed at the time as "branch routers" often utilizing Frame Relay (56k to T1 ...



Top 50 recent answers are included