Antony Di Scala's blog

tag:blogger.com,1999:blog-81193476549958922712011-12-07T13:24:14.469ZAntony Di Scala's blog_d1ZZy_noreply@blogger.comBlogger111100tag:blogger.com,1999:blog-8119347654995892271.post-60839912920860811202011-12-07T13:22:00.001Z2011-12-07T13:24:14.475ZHP Procurve Useful Commands

Adding a single port / port range to a trunk(config)# trunk ethernet A3 trk1 lacpor(config)# trunk ethernet B16-B20 trk1 lacpRemove a port from a trunk(config)# no trunk A21Remove an Interface from Aggregated Link (config)# no interface A21 lacpNaming an Interface / trunkNaming an interface also names the trunk if the port is used. (config)# interface ethernet A9 name Assigning a MAC address to a

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-35793776859079946262010-05-05T20:35:00.003+01:002010-05-05T20:47:32.506+01:00Resetting Cisco 2600 series router

breakrommon 1> confreg 0x2142rommon 2> resetrouter(config)# config-register 0x2102((NOTE: IF YOU DON'T WANT START-UP CONFIG!!!!!))router# copy run start((OTHERWISE))router# copy start run

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-23708230453434483902010-03-26T12:51:00.001Z2010-03-26T12:52:38.097ZHP ProCurve Basic Config

hostname "switch666"snmp-server contact "Antony Di Scala"trunk 23-24 Trk1 LACPip default-gateway 172.20.18.11snmp-server community "SNMPNAME" Unrestrictedvlan 1 name "DEFAULT_VLAN" untagged 1-22,Trk1 ip address 192.168.150.10 255.255.255.0 exitbanner motd "YOU DO NOT HAVE PERMISSION TO LOG IN!!!PLEASE DISCONNECT!!!AUTHORISED ACCESS ONLY!!!"spanning-tree Trk1 priority 4password manager

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-51844923291095671062010-03-15T08:28:00.001Z2010-03-15T08:31:40.883ZCisco ASA - Deny ports between two boxes except for.....

This example blocks all traffic except microsoft sql ports;access-list 100 permit tcp host 192.168.150.150 host 192.168.160.151 eq 1433access-list 100 deny ip host 192.168.150.150 host 192.168.160.151access-list 99 permit tcp host 192.168.160.151 host 192.168.150.150 eq 1433access-list 99 deny ip host 192.168.160.151 host 192.168.150.150

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-85998473845483482272010-03-10T08:11:00.007Z2010-03-10T08:28:09.496ZCisco ASA VPN Config Example

access-list 102 extended permit ip our network subnet their network subnetaccess-list 104 extended permit ip our network subnet their network subnetnat (inside) 0 access-list 102crypto ipsec transform-set name of vpn esp-aes esp-md5-hmaccrypto map name of vpn 10 match address 104crypto map name of vpn 10 set transform-set racksetcrypto map name of vpn 10 set peer public ip of other devicecrypto

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-74497314738324516382010-03-08T11:20:00.001Z2010-03-08T11:20:30.847ZSSH on Cisco Rouer

Q: How do I enable SSH logins on my routers? A: First, make sure you're using a version of IOS that supports SSH. I'm using 12.4. Turn on new-model logins (make the password better than my example): aaa new-modelusername cisco password cisco Give it a FQDN, which is needed for key generation, and then generate a key. The key name will be devicename.domain-name: ip

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-80803725653143810802010-03-08T10:51:00.001Z2010-03-08T10:52:00.021ZSetup Cisco Netflow

Q: How do I set up Netflow on my router? A: First make sure Netflow is included in the IOS you are running. You might try one of the "show" commands given below, or use Cisco's Software Advisor tool (on the CCO website). Turn on CEF, and set up the flow parameters. Here we are sending Netflow packets in version 5 format to 10.1.2.3 on port 2003/UDP. For active

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-65023115360479952282010-03-05T10:42:00.000Z2010-03-05T10:44:09.217ZTime range access on Cisco Router

# Deny TCP traffic always, except between these time..ip access-list extended DENY-WEB permit tcp any any time-range http-allow permit ip any any time-range http-allowaccess-list 101 permit ip 192.168.1.0 0.0.0.255 anytime-range http-allow periodic weekdays 12:00 to 14:00 periodic weekdays 17:00 to 23:59 periodic weekdays 0:00 to 8:59 periodic weekend 0:01 to 23:59

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-38173993802701686632010-03-05T10:38:00.000Z2010-03-05T10:39:10.153ZBasic Cisco Switch commands....

interface vlan 1: This is a global command used to configure the interface for VLAN. ip default-gateway [address]: This is a global command and set default gateway. ip address [address][subnet mask]: This command is used to configure the interface and set the ip address interface fast Ethernet 0/x: This command put user into user configuration mode. speed {10/100/1000/auto/nonegotiate}:

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-25304009049274458042010-03-03T14:17:00.002Z2010-03-03T14:18:12.513Zwww.clickitconsultant.co.uk

I have registered this domain name in the hope of starting something on the side, part time....When I have some time I'll get stuck in!For now "Hello World!"

_d1ZZy_noreply@blogger.com0tag:blogger.com,1999:blog-8119347654995892271.post-84340566365235761802010-02-26T10:26:00.000Z2010-02-26T10:30:44.505Zdiscala.co.uk

I am in the midst of completely revamping the website.Joomla will be my friend!Daily updates to follow, hopefully.

_d1ZZy_noreply@blogger.com0