Hot answers tagged

9

Google tells me "No, mostly." https://docs.meraki.com/display/SM/Systems+Manager+FAQ#SystemsManagerFAQ- Does the user have to enter the Apple ID password for every app installed? When Apps are deployed via MDM, Apple requires an Apple ID and password for the app to be installed. Apps downloaded and installed via Apple Configurator do not require ...


8

What are the errors in the log from 10:06:40.691 to 10:06:40.723? Line 10:06:40.691 5 SMTPI-011473([69.197.220.11]) inp: \022\003\001 was part of SSL handshake. Byte 0 = 022 means SSL record type = 22 (SSL3_RT_HANDSHAKE) Byte 1-2 = 0301 was means SSL version = TLS1_VERSION See this page for reference. But unfortunately the server on port 587 doesn't talk ...


6

I think what you are looking for is : router# show running-config interface FastEthernet0/1 This will only display the configuration for port Fa0/1. When you are in config mode, you can use the do keyword to call the show command : router(config)# do show running-config interface FastEthernet0/1


6

For example, let's say I own a domain example.com, I'd like to create a subdomain mypc.example.com (not just only one though) that is only resolved for those phones (Android/iOS) and PCs (Windows, Linux) that have a specific key, those machines who do not have that key mustn't be able to resolve the IP. Basically a private replacement to dynamic DNS services....


5

Unfortunately, no, IOS does not support anything like this. The closest feature would be object-groups for ACLs, which were added in 12.4(20)T. They allow you to define an object-group containing the IP address(es) (or TCP/UDP ports or other things) you want to filter on. You would then reference the object-group instead of a static address in your ...


5

There isn't really a solution, from a file compression standpoint, that you can use. The router's bootloader decompresses the IOS image and, since you can't alter the bootloader adding support for new compression algorithms isn't possible. Having an out-of-band management connection would the best techncal means to safely handle these situations. In the ...


5

The question is old, but it will be found during searching. I spent some time to find solution to the same problem. Thus I decide to write the answer to share my results with others. Short answer: you should not use IIS Crypto to specify the order of Cipher Suites. I recommend you to click on "Defaults" buttons to remove previously set order and ...


4

You can login directly in enable mode if your privilege level allows it. I am running asa916-k8.bin on 5510 The command is aaa authorization exec LOCAL auto-enable Ravi L


4

The support is mixed. Some devices support both, some only one and some again, neither (IOS-XR, which is a bit short-sided on their part). It is really up to the business units (sadly). That being said, I find that 90% of the customers and vendors out there still use RFC 3164. RFC 5424 might be considered "better" since it makes events easier to ...


4

You've already discovered that there's two sets of RAM on the 6500/7600 series supervisors - the switch processor or supervisor RAM, and the MSFC or "route processor" RAM. The terminology isn't helped by there being three different names for each of these two components. The "sh ver" output is for the MSFC (RP) (add the two values together). "remote command ...


4

show sessions will display outgoing connections from your switch/router to other devices. show users will display incoming connections to the vty interfaces (ssh/telnet...) of your switch/router. So i think you need show users here.


4

Sure, that info's usually in the output of show version , though that might vary with specific devices and software versions.


4

I recently wrote an Ansible module that allows you to use SSH+SCP to transfer a file to Cisco IOS devices. One of the use cases is obviously transferring IOS images. It has some built-in checks like not transferring the file if it already exists and performing an MD5 comparison (original file to transferred file). The MD5 is CPU intensive on the router, ...


4

Take a look at https://technet.microsoft.com/en-gb/library/hh529949(v=exchg.150).aspx There is an interesting line at the bottom of that page that implies the effective maximum limit is about 33% less then the limit you have configured. Given the default for active sync is 10mb and you are seeing problems around 7, that would make sense. Try increasing to ...


4

As it turns out, I needed to use the Apple Configurator to create the VPN Profile so I could set the cryptography to use DH Group 2 and 3DES. I also had to change the Remote ID to the FQDN of the VPN Server as it is listed in the certificate's Common Name. OS X ignored the Subject Alternative Name (SAN). However, while I can now establish the connection to ...


4

To see the areas which your current router is advertising routes for you can run the command sh ip ospf statistics This will show the areas for which SPF algorithm ran and other statistics about the results of that algorithm, Plus this will show for all the ospf processes running on the router. There is no way you can see the areas which were running ...


3

When you enable the VPP programme users will authenticate with their own iTunes account when you push apps to them. First, read this KB article for an overview of how to use Apple's VPP Managed Distribution model with the Meraki Dashboard. Obtain a Volume Purchase Program account from Apple, for business or education. Download, open in a text editor, and ...


3

Devices in the same subnet don't need router to access each other. Learn networking basics.


3

{Disclaimer - I work for an HP partner} What I see most often is the use of a tool like HP Network Automation (which does far more than merely push IOS updates to Cisco devices - it supports all kinds of network devices, does configuration management, can be used for audit compliance, etc). You might also consider some of the Open Source products like Chef,...


3

Research suggest there is a bug in Ubuntu/Debian nginx package which causes low http2 performance, you need to use alternative distribution/compile nginx from source code yourself (it's really easy and will take like 5 minutes of your time). For debian you may have to replace that configuration line in that building guide with something like: ./configure -...


3

I'm not aware of a buffer as such that can store commands. What you can do is edit the config as a flat file (swapping the addresses as you wish) then upload it to the Cisco 800. So.... copy running config to ftp or tftp server $ copy flash: tftp: edit file / change ip addresses ftp/tftp it back $ copy flash: tftp: copy it to the start-up/running config ...


3

They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to be accessible. However, I used to be able to circumvent this by accessing my Office 365 emails through IMAP. You clearly don't respect your clients or value their business or the business relationship you have with ...


3

Not a complete answer, but maybe part of a solution: 1. I tried the solution suggested by @joffrey, but could not get it to work. Enabling or disabling TLSv1.3 ciphersuites in ssl_cipher_list seems to be completely ignored by Dovecot 2.3.4.1. The ssl_prefer_server_ciphers does not have any effect on TLSv1.3 either. No matter what Dovecot settings I tried, I ...


2

As an obsolete ex-PIX/ASA admin I of course found this irresistible. I have no appliance (but an old PIX 506E running 6.3) to try it on, so it's kind of totally lame. But this is what I found in the online documentation for 9.1 and through some random Googling. Reference links are provided at the bottom of the post. So fingers crossed... Assuming all other ...


2

There is actually a Cisco doc on this exact topic (AppleTV) but it is for the lightweight version. Might help you though: http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_tech_note09186a0080bb1d7c.shtml The things you have to do are still the same.


2

Doh! The answer is really simple, the switch is part of a stack and I rebooted the switches one after the other. The configuration was never reloaded. I feel so stupid for skipping this simple fact.


2

Try show running-config | section ? e.g. show running-config | section router bgp It works similar to the include statement, but also lists all the sub-commands.


2

When I set up FreeRADIUS last year with an internal CA, and all BYOD devices, this was an issue on every desktop and mobile OS. I simply instructed the users to click Accept, and if they were truly paranoid, they could stop by and see me to manually verify the certificate. A few did. If you don't control the devices and can't install your CA certificate on ...


2

You need to specify your SNMP server snmp-server host 192.168.x.x community_name Logging command is for syslog messages only.


2

In the Cisco portal, it shows that the latest download for that device is 15.4.2T as of March 28, 2014.


Only top voted, non community-wiki answers of a minimum length are eligible