6
votes
Private and authenticated DNS
For example, let's say I own a domain example.com, I'd like to create a subdomain mypc.example.com (not just only one though) that is only resolved for those phones (Android/iOS) and PCs (Windows, ...
- 32.2k
5
votes
How to configure IIS 7.5 SSL \ TLS to work with iOS 9 ATS
The question is old, but it will be found during searching. I spent some time to find solution to the same problem. Thus I decide to write the answer to share my results with others.
Short answer: you ...
- 239
4
votes
Accepted
Email from IOS with attachments larger than 7.5Mb gets stuck in outbox and constantly tries to resend. Costs us hundreds in data fees
Take a look at https://technet.microsoft.com/en-gb/library/hh529949(v=exchg.150).aspx
There is an interesting line at the bottom of that page that implies the effective maximum limit is about 33% ...
- 3,733
4
votes
How can I automate the deployment of cisco IOS upgrades?
I recently wrote an Ansible module that allows you to use SSH+SCP to transfer a file to Cisco IOS devices.
One of the use cases is obviously transferring IOS images. It has some built-in checks like ...
- 41
4
votes
Accepted
Is there a Cisco IOS command for finding out the serial number of a switch / router?
Sure, that info's usually in the output of show version , though that might vary with specific devices and software versions.
- 114k
4
votes
Why do I start at privilege level 1 when logging into a Cisco ASA 5510?
You can login directly in enable mode if your privilege level allows it.
I am running asa916-k8.bin on 5510
The command is aaa authorization exec LOCAL auto-enable
Ravi L
- 115
4
votes
Accepted
Strongswan IKEv2 VPN on OS X 10.11 and iOS 10 Clients
As it turns out, I needed to use the Apple Configurator to create the VPN Profile so I could set the cryptography to use DH Group 2 and 3DES.
I also had to change the Remote ID to the FQDN of the VPN ...
- 181
3
votes
Accepted
Cisco 2801 - ACL example to prevent certain users in same subnet from accessing certain devices
Devices in the same subnet don't need router to access each other. Learn networking basics.
- 8,500
3
votes
Accepted
How can I automate the deployment of cisco IOS upgrades?
{Disclaimer - I work for an HP partner}
What I see most often is the use of a tool like HP Network Automation (which does far more than merely push IOS updates to Cisco devices - it supports all ...
- 18.1k
3
votes
Accepted
Nginx with http2 and ios WKWebView
Research suggest there is a bug in Ubuntu/Debian nginx package which causes low http2 performance, you need to use alternative distribution/compile nginx from source code yourself (it's really easy ...
- 3,637
3
votes
In Cisco IOS, how can I view OSPF network areas?
To see the areas which your current router is advertising routes for you can run the command
sh ip ospf statistics
This will show the areas for which SPF algorithm ran and other statistics about ...
- 1,290
3
votes
Nginx+Apache2+LetsEncrypt with IPhone cannot display page
This doesn't seem to be a problem with SSL (or Let's encrypt). The fact, that the request shows up in your log file proves that the request came through fine (the SSL handshake is done before the ...
- 21.7k
3
votes
cisco config delayed apply?
I'm not aware of a buffer as such that can store commands.
What you can do is edit the config as a flat file (swapping the addresses as you wish) then upload it to the Cisco 800.
So....
copy ...
- 61
3
votes
Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?
They use Office 365 and have always required phones to be enrolled
(giving their IT department full access) in order for email etc. to be
accessible. However, I used to be able to circumvent this ...
- 109k
3
votes
Forcing Dovecot 2.3.4.1 to use TLSv1.2
Not a complete answer, but maybe part of a solution:
1. I tried the solution suggested by @joffrey, but could not get it to
work. Enabling or disabling TLSv1.3 ciphersuites in ssl_cipher_list
seems ...
- 181
2
votes
Show code for specific block in cisco IOS conf mode?
Try
show running-config | section ?
e.g.
show running-config | section router bgp
It works similar to the include statement, but also lists all the sub-commands.
- 75
2
votes
How can I solve DNS delay on iOS over VPN
It's an IPV6 issue, if you go to console and open your ppp log you will notice an IPv6 query every 3 seconds until it times out. You need to tell the ppp daemon to not try IPv6. To do this create a ...
- 21
2
votes
How to fix Image Swapping Issue in iOS 8 with keep-alive + HTTP Pipe-lining?
I was dealing with this issue on a new website we just launched. Everything looked good in FF/Opera/Chrome, etc. but I had MAJOR image swapping issues in iOS8+. I noticed that a lot of the sites ...
- 21
2
votes
How to fix Image Swapping Issue in iOS 8 with keep-alive + HTTP Pipe-lining?
We had this problem as well and the solution for us was to remove all tags in our HTML and use css classes with background property instead. Here's an example:
.img_logo {
background: url(../...
2
votes
How can I automate the deployment of cisco IOS upgrades?
There are many tools but I recommend to using Expect ( http://en.wikipedia.org/wiki/Expect )
Expect has main advantage that it completely simulates command prompt interaction and is very easy to ...
- 101
2
votes
How do I know if a specific cisco router and IOS support a certain feature?
Even though the device supports it, Cisco by default uses what I call "compatibility mode" for AAA, where it limits the feature set to the "old model".
Use the aaa new-model, then try again.
- 989
2
votes
Accepted
Apple Server: "Trust this computer" automatically via Profile manager
Apparently there seems no such possiblity.
In the official apple profile manager help site you can have a look at the list of settings available to configure with Profile manager. They are listed ...
- 8,941
2
votes
First ping (to any destination) fails from switch but not from router
The first icmp packet is fail because host sends ARP request.
If the destination host MAC is already in ARP cahce the device is not send this request.
- 21
2
votes
Accepted
"tunnel mode ipsec ipv4" seems to be missing from my CISCO router
The Cisco IOS Interface and Hardware Component Command Reference tells us that this command was introduced in 12.3(14)T which is quite old, but unfortunately your IOS version is just a tiny bit older ...
- 337
2
votes
Accepted
Nginx+Apache2+LetsEncrypt with IPhone cannot display page
Nginx cannot proxy to Apache by h2 protocol:
Protocols h2 http/1.1
removing this line solve the problem, but I still cannot understand why it's happing ONLY WITH devices iOS 10.
- 61
2
votes
Nginx+Apache2+LetsEncrypt with IPhone cannot display page
Now facing the same/similar issue on iOS 12 with nginx 1.16.0 proxying to apache enabled with http2. Workaround is to disable http2 on nginx, the right solution is described here https://trac.nginx....
2
votes
Accepted
Confused about meaning of SE and EX releases in cisco IOS
Sometimes the one/two letter designation is the branch/train/platform identifier.
Here is an old list of common branch identifiers:
M/T – 800 Series ISR, ISRg2 (1900, 2900, 3900), Connected Grid ...
- 246
2
votes
Accepted
Adding a new vlan to a pair of Cisco 4948E that are standby - any pitfalls?
OK, no problems caused. The new SVI on each switch started as "admin down", so a no shut on each one brought it up, no problems.
- 35.9k
2
votes
Why is my IOS EzVPN client not connecting to my ASA EzVPN server?
The salient lines of debug output are
*Nov 1 23:17:53.987: ISAKMP:(0):Looking for a matching key for server.demo.company.local in default
*Nov 1 23:17:53.987: ISAKMP: no pre-shared key based on ...
- 2,353
2
votes
Accepted
Is the new iOS cloudflare 1.1.1.1 app an actual VPN
Cloudflare's 1.1.1.1 is not a VPN provider, it's a DNS resolver service. It doesn't encrypt your traffic. However, it can encrypt your DNS queries.
By using DNS over HTTPS (DoH) you can ...
- 44.8k
Only top scored, non community-wiki answers of a minimum length are eligible