Blog

  • Ubiquiti 3.65 Ghz Cards

    I noticed that Ubiquiti now has some 3.65 cards. This sounds like a great idea for backbone links in some congested 2.4 or 5.8 areas. The only real downside I can see is that the price for the card is ~$250 and the range must be licensed in some areas. Any of you guys running these? If you have any just laying around, I’ll takem off your hands 😉

  • What is Asterisk/Trixbox

    First, Asterisk is an opensoure PBX (phone system). I’ve deployed several systems with great success. I generally use the digium hardware, which is the company that originally developed and later opensourced the Asterisk system. They have tremendous community support, of which, voip-info.org is my favorite.

    So, what is Trixbox? I’ve been using Trixbox since it was Asterisk@home. It is basically a prepackaged install of Centos with Asterisk on a single CD. You pop in the cd, reboot the machine and let it do the rest. It formats, installs and configures your packages. After that, you need only to login and get started. They have a commercial version now as well as an appliance, but I like the tried and true CE version. This is packaged with a great GUI and most common packages. You can add an extension with phone mail in about a minute or two!

  • Searching LDAP for a NULL Value

    The easiest way I’ve found to find a null value is to search for (whatever=\00). The “\00” is the escape sequece for null.

  • Cisco 7600 Fails to Accept Password Reset

    I’ve had problems resetting the password on a 7606 Sup720-DFC-3BXL. I would do the normal break and confreg 0x2142, but it would continue to boot with the old config, refusing to bypass. The fix is that there are two places to issue the break sequence. At the initial boot, but also when it says “Download Start !!!!”. When you see the download start, do the normal break sequence and follow the normal reset process.

    System Bootstrap, Version 8.1(3)
    Copyright (c) 1994-2004 by cisco Systems, Inc.
    Cat6k-Sup720/SP processor with 1048576 Kbytes of main memory

    Autoboot executing command: “boot disk0:c7600s72033-advipservicesk9-mz.122-33.SRB1.bin”
    Loading image, please wait …

    monitor: command “boot” aborted due to user interrupt
    Exit at the end of BOOT string

      rommon 1 > confreg 0x2142monitor: command “confreg” not found
      rommon 2 > reset

    System Bootstrap, Version 8.1(3)
    Copyright (c) 1994-2004 by cisco Systems, Inc.
    Cat6k-Sup720/SP processor with 1048576 Kbytes of main memory

    Autoboot executing command: “boot disk0:c7600s72033-advipservicesk9-mz.122-33.SRB1.bin”
    Loading image, please wait …

    Self extracting the image… [OK]
    Self decompressing the image : ########################################################################
    ############################################################## [OK]

    Restricted Rights Legend

    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software – Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.

    cisco Systems, Inc.
    170 West Tasman Drive
    San Jose, California 95134-1706

    Cisco IOS Software, c7600s72033_sp Software (c7600s72033_sp-ADVIPSERVICESK9-M), Version 12.2(33)SRB1, RELEASE SOFTWARE (fc3)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2007 by Cisco Systems, Inc.
    Compiled Fri 01-Jun-07 09:32 by prod_rel_team
    Image text-base: 0x401012FC, data-base: 0x4186E610

    *Mar 6 23:32:22.055: %SYS-3-LOGGER_FLUSHING: System pausing to ensure console debugging output.

    *Mar 6 23:32:21.447: %PFREDUN-6-ACTIVE: Initializing as ACTIVE processor

    *Mar 6 23:32:22.055: %OIR-6-CONSOLE: Changing console ownership to route processor

    System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)
    TAC Support: http://www.cisco.com/tac
    Copyright (c) 2004 by cisco Systems, Inc.
    Cat6k-Sup720/RP platform with 1048576 Kbytes of main memory

    Download Start
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!
    !!rommon 1 > confreg 0x2142

    rommon 2 > boot
    Please reset before booting
    rommon 3 > reset

    System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)
    TAC Support: http://www.cisco.com/tac
    Copyright (c) 2004 by cisco Systems, Inc.
    Cat6k-Sup720/RP platform with 1048576 Kbytes of main memory

    Download Start
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    Download Completed! Booting the image.
    Self decompressing the image : ######################################################################
    #######################################################################
    #####################################################################
    #####################################################################
    ######### [OK]

    Restricted Rights Legend

    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software – Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.

    cisco Systems, Inc.
    170 West Tasman Drive
    San Jose, California 95134-1706

    Cisco IOS Software, c7600s72033_rp Software (c7600s72033_rp-ADVIPSERVICESK9-M), Version 12.2(33)SRB1, RELEASE SOFTWARE (fc3)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2007 by Cisco Systems, Inc.
    Compiled Fri 01-Jun-07 09:23 by prod_rel_team
    Image text-base: 0x401012FC, data-base: 0x437069B0

    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.

    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

    If you require further assistance please contact us by sending email to
    [email protected].

    cisco CISCO7606 (R7000) processor (revision 1.0) with 983008K/65536K bytes of memory.
    Processor board ID FOX104612L2
    SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
    Last reset from s/w reset
    1 Virtual Ethernet interface
    74 Gigabit Ethernet interfaces
    1917K bytes of non-volatile configuration memory.
    8192K bytes of packet buffer memory.

    65536K bytes of Flash internal SIMM (Sector size 512K).

    — System Configuration Dialog —

    Would you like to enter the initial configuration dialog? [yes/no]: no

    Press RETURN to get started!

    If you wipe the config completely, when you reboot you will most likely need to enter
    “boot disk0:IMAGE-NAME” as in:

    boot disk0:c7600s72033-advipservicesk9-mz.122-33.SRB1.bin

  • Mikrotik Rogue DHCP Detection

    Mikrotik actually has a rogue detection service you can configure, but as we have found running apartment complexes, it can give you false positives. To combat this, I’ve come up with a new method.

    First configure syslog exporting with the DHCP service dumping. Next enable the dhcp client to run on all your inside facing interfaces. I’ve got my Cacti syslog server set to match “dhcp,info,debug dhcp-client%got ip address”, which is the message sent when the dhcp client receives an IP address. Once the syslog server processes the message it sends us an alert.

    Add dhcp-client to each interface, be sure to disable default route, peer dns and peer ntp.

    / ip dhcp-client 
add interface=vlan10 comment="" disabled=no 
add interface=ether2 comment="" disabled=no

    This script will need to be scheduled to run around every hour or so. It will release the dhcp reservation on your interfaces. Otherwise it won’t attempt to pull a new address until the old allocation has expired, which can be up to a year. It loops through releasing from all your interfaces.

    :log info ("dhcp detect release")
:for e from=0 to=40 do={
/ip dhcp-client release ($e)
}

    Once you get an alert from your syslog server, you log into the Mikrotik and issue the:

     
/ip dhcp-client print detail

    You’ll get the following:

    Flags: X – disabled, I – invalid
    0 interface=vlan10 status=bound address=192.168.1.100/24
    gateway=192.168.1.1 dhcp-server=192.168.1.1
    primary-dns=209.189.224.45 secondary-dns=209.189.224.40
    expires-after=21h13m2s

    Take the dhcp-server address and use it below:

    /ip arp print where address="192.168.1.1"

    You will get the following result:

    Flags: X – disabled, I – invalid, H – DHCP, D – dynamic
    # ADDRESS MAC-ADDRESS INTERFACE
    0 D 192.168.0.253 00:08:74:4B:7F:BC ether1

    Now you track this guy down and shut him off at the switch port, or if you are using mac-track in cacti, you simply look him up, connect to the proper switch and kill him. You could also use this in conjunction with the standard rogue detection service to more quickly find the MAC address.

  • Mikrotik Change Log 3.22

    Here’s the log.

    3.21

    They added a TFTP server, that’s interesting. They still don’t have the ability to TFTP from the mikrotik to another server, or so it appears. There is still no really functional way for the mikrotik to send his backups to an FTP or TFTP server.

    Looks like they back ported their MetaRouter to the rb4XX platform.

    3.22

    They added some features for the new RB450G. Still waiting for them to send me a copy to test with 😉

    It appears they added quite a few updates to their MPLS/VPLS engine.

    Nothing ground breaking, but interesting.

  • Mikrotik Tutorial – Set IP Command Line

    I wipe the configs completely on my Mikrotiks before I get going. I then set an IP via command line so I can use winbox to finish my configurations. Here’s a quick video tutorial on how I do it.
    (more…)

Categories