Search results

Port 22 is mentioned, so why not use the features SSH already provides, the server for example can be configured with a list of acceptable client public keys. For other ports you could use SSH tunneling.

Cheers $c8t@, but 111 was posted as the outgoing ACL on the isolated network interface and since this is server to client traffic from the isolated host, should be in the incoming ACL 110. It seems the OP has already decided that the only way to do this is with stateful inspection and since...

I'd still give it another try because if you did have "ip access-group 110 in" and "ip access-group 111 out" on Vlan230, you also have your source and destination addresses reversed. If we just look at RDP, the outgoing ACL needs to allow source 10.1.2.0/24, any port, to destination...

Yes, the address and port should match those of the probe source. The config should have been: ip sla responder udp-echo ipaddress 192.168.10.1 port 16384 I take it you still have enabled responders on the 877 with: ip sla responder Try disabling with no and the re-enabling again - when I...

You've also got to set up a UDP specific responder with the destination address and port. So on the 877: ip sla responder udp-echo 192.168.10.1 16384

There shouldn't be a problem with what you're trying to do. For each entry in one access list based on destination port, you need one in the other based on source port to allow the return traffic. For example: access-list 110 permit tcp any 10.2.3.12 0.0.0.0 eq 445 will need: access-list...

If you're already using bluetooth and don't want to worry about cables or loss of power, you might want to check out: http://www.merlinsystemscorp.co.uk/msc/shop.html?limit=all and get a Parani UD100 Bluetooth USB dongle. Using just the stub antenna that comes with it will probably be on the...

For the lack of syslog messages, enter; show logging and look at Trap logging. The level should be at least 6 (informational or debugging) and should have the correct host IP address/port used and link status as up.

Read all about it here: http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_content_ac_external_docbase_0900e4b1805afd5e_4container_external_docbase_0900e4b1807afcc8.html In addition to your access-list allowing explicit inbound traffic traffic, you add inspect entries...

Syngress is right, return traffic is being blocked. permit tcp ... established applies only to TCP and won't handle return traffic for your other outgoing connections. You need to have entries to explicitly allow UDP, for example, similar to that listed for DNS and NTP. The best solution...

This could get confusing as the all zeros subnet is always known as subnet 0, 10.0.0.0 in the example. Maybe a slight renaming to subnet #1, subnet #2 etc. in which case you do as you posted and calculate for 1 less.

OK, here's my take on this ... You've got a class A address which is subnetted into 2048 networks. This 11 bits (2048 = 2 ^ 11) plus the default Class A /8 gives you your /19 network mask. To get the networks, we only need to calculate for the octets affected by the subnet mask, so your...

What kind of solution are you looking for, something that can be programed or a simple process that someone with pen and paper who knows the powers of 2 and can do some simple math to get the quad decimal addresses?

The debug command is not part of the configuration so a reloaded router will have all debugging off. Telnet into the router first when you restart it and enter show debug to prove this, then do it as you've posted above. Do show debug before you enter undebug all to see what option has been...

Because I'm getting confused with all the picture changes :) - it's cat5e.

Google search gives this port as being used by Spectorsoft's spyware products to connect to their servers.

Cable 1 is a Cat6 crossover cable for gigabit. There's no reason not to use it for 10/100. Only the end shot of cable 2 shows all the colours. The other two only show the top most wires because of the angle and shadows. This is a straight through patch cable.

Looks to me like photos 1, 2 and 3 are the same cable - straight Photo 4 is a cross over cable.

Depends on the situation, but it will involve more work since VLAN 1 is usually the default native VLAN and untagged for links carrying tagged traffic, so additional configuration is required to make it otherwise. You may also prevent connectivity between different manufacturers equipment - Dell...

Using HP Network Configuration Utility will create an adapter for each VLAN. Is it just for DHCP that you are wanting a direct connection? Presumably you will be routing between the two VLANs so you should be able to do DHCP relaying - generally by the router itself, so you just need a DHCP...