1,205 reputation
57
bio website blog.egofuzzer.net
location Mexico
age 45
visits member for 4 years, 9 months
seen Aug 10 at 15:17

[ $[ $RANDOM % 6 ] == 0 ] && rm -rf / || echo You live -- Dtyst


Nov
6
awarded  Yearling
Nov
6
awarded  Yearling
Nov
6
awarded  Yearling
Apr
7
comment How common is NAT within companies (one public ip address)?
in my side of the world extremely common...may i ask why the use of the IP address as a source of "uniqueness"? why not some value in a cookie or something along the lines?
Apr
7
answered Configure hairpinning on Cisco 871 IOS 12.4(15)T4?
Apr
7
comment Configure hairpinning on Cisco 871 IOS 12.4(15)T4?
My understanding of the question is what the OP is looking for is how his internal users can access the internal server using the server's "public" address, that is the server address that the external DNS server is translating for OP's external users...if this is the case then this NAT rule will not work...then it may very well be that my question understanding is wrong and if so please disregard this comment...
Apr
6
answered How do you configure ASA5505 to be its own CA?
Apr
6
comment Cannot login to Cisco 2911 over ssh?
...when you say you do not have access through the console port you mean the actual physical console port on the router? or are you referring to the ssh connection? if your router was accepting connections before and now these are getting stuck, it may be related to the router's CPU usage...thing is that if you do not have access to the physical console port you will not be able to do much troubleshooting sans reboot the device...
Apr
6
comment Connecting and Viewing a remote MS ACCESS database
...putting the MS database files in a network folder?
Apr
5
revised What can I do to “stress test” an ASA5505?
deleted 16 characters in body; added 12 characters in body; added 16 characters in body
Apr
5
answered What can I do to “stress test” an ASA5505?
Apr
4
comment Configuring a new core switch with VLANs
RIPv1 is a classful routing protocol, which means you will have issues if you want to subnet "outside" the "boundaries" of an A,B and C network classes. Then there is also this other nasty issue that RIPv1 does not have any mechanisms to authenticate prefix announcements and this leaves you open to many nasty and hard to troubleshoot security issues. If you really, really, really need RIP, then use v2 or move to other routing protocols such as OSPF (or EIGRP depending on who your hardware vendor is).
Apr
4
awarded  Commentator
Apr
4
comment Configuring a new core switch with VLANs
If the four VLANs are in the same switch and each VLAN has an IP address assigned (i.e. a "VLAN interface" in Cisco "parlance") so each of these interfaces appear as "connected interfaces" in your switch's routing table, then there is no need to run a routing protocol. It is enough that each device in each of the four VLANs/networks to have as a default gateway the IP address assigned to it's VLAN for them to have connectivity. Now if you want to connect to networks not directly connected, then you will need a routing protocol (or only a default route, depending on your topology et.al.)
Apr
2
answered Do you need to have your own DNS in order to receive mail on a VPS?
Apr
1
answered Exposing an apache port 80 that is in an office behind a firewall?
Apr
1
comment Need confirmation on layer 2 security question
Well my reading of the question was that if OP is talking about traffic "escaping" out of the "LAN" (VLAN) then there has to be another "LAN" (VLAN) where the traffic is leaked to. So now having two VLANs my reasoning was to give an scenario where the traffic between to VLANs could leak, then trunking, 802.1q, double-tagging et al. And for the record there is no such thing as a switch with no VLAN, if we are talking of a switch there should be at least one VLAN (with ID 1).
Mar
31
answered Need confirmation on layer 2 security question
Mar
31
comment What is a Cisco BVI interface? What is it used for?
@Inf.S Real life scenario (so real that it is the one I have configured in my router) is the one described in the answer, that is, I want to have my wireless users and my wired users to be on the same subnet. I do this by first bridging the wireless interface with the VLAN interface that "represents" the physical ports where my wired users are connected and then I create a BVI interface "attached" to this "bonding" (of wireless and VLAN interface). It is this BVI interface that is going to be the default router for my wireless and wired hosts.
Mar
31
comment What is a Cisco BVI interface? What is it used for?
@Inf.S You are basically right, only the BVI is a routed interface so the forwarding decision it takes depends not on the destination mac address but on the destination IP address of the packet. It is the same concept as a "VLAN interface", that is the routed interface that L3 represents all the L2 ports on the VLAN to which it is attached.