Monday, November 21, 2011

Cisco IOS archive

Cisco has simple method for backup config

mkdir flash:/archive

 

conf t

archive

 log config

  logging enable

  hidekeys

 path flash:archive/config

 write-memory

 

 

you can use other options like path tftp,scp... etc

also notify syslog contenttype plaintext if you want write to log

for check archive:

 

 

show archive log config all

show archive config differences flash:archive/config-1 system:running-config

 

Friday, October 21, 2011

Software upgrade Cisco Wireless LAN Controller

1. check your controller software version.
(Cisco Controller) >show sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 6.0.199.4
2. check  release notes for new software version and check upgrade patch table. 
3. download new image from cisco site and copy it to tftp server.
4. login to controller
(Cisco Controller) >transfer download mode tftp
(Cisco Controller) >transfer download serverip 172.16.15.70
(Cisco Controller) >transfer download path .
(Cisco Controller) >transfer download filename AIR-WLC2100-K9-7-0-116-0.aes
(Cisco Controller) >transfer download start
Mode............................................. TFTP
Data Type........................................ Code
TFTP Server IP................................... 172.22.22.10
TFTP Packet Timeout.............................. 6
TFTP Max Retries................................. 10
TFTP Path........................................ ./
TFTP Filename.................................... AIR-WLC2100-K9-7-0-116-0.aes
This may take some time.
Are you sure you want to start? (y/N) y
TFTP Code transfer starting.
TFTP receive complete... extracting components.
/mnt/application
Writing new RTOS to flash disk.
Writing new Code to flash disk.
Executing install_code script.
Writing new APIB to flash disk.
Executing install_apib script.
TFTP File transfer is successful.
  Reboot the controller for update to complete.
  Optionally, pre-download the image to APs before rebooting to reduce network downtime.
(Cisco Controller) >reset system
The system has unsaved changes.
Would you like to save them now? (y/N) y
Configuration Saved!
System will now restart!

Monday, October 10, 2011

Enable ASDM for Cisco ASA

ciscoasa# conf t
ciscoasa(config)#asdm image disk0:/asdm-645-106.bin
ciscoasa(config)#http server enable
ciscoasa(config)#http 172.16.1.0 255.255.255.0 inside

Tuesday, September 20, 2011

upgrade ROM and IOS for cisco 4900 switches

for ROM upgrade:

1. download last rom from cisco site.

2. copy rom file to switch bootflash:

3. turn on switch and enter control-C to go to rommon

4. enter rommon 1 >boot bootflash:cat4500-ios-promupgrade-122_31r_SGA7(or your rom)

5. switch will restarted after upgraide

6. run show version  | i ROM

 

 

for IOS upgrade:

1. download last ios

2. copy ios to switch bootflash:

3. enter show running-config | i boot system

4. go to config mode 

5. enter no boot system flash bootflash:cat4500-entservicesk9-mz.122-13.SG1.bin(your ios)

6. enter boot system flash bootflash:cat4500-entservicesk9-mz.122-54.SG.bin

7. save config and reboot switch

8. check ios version after reboot show version | i bootflash 

Wednesday, August 24, 2011

MS Outlook autocomplete cache file

MS Outlook autocomplete cache file 
path for file:
Windows XP
C:\Documents and Settings\username\Application Data\Microsoft\Outlook\outlook.NK2
Windows 7
C:\Users\username\AppData\Roaming\Microsoft\Outlook\outlook.NK2
Maximim emails key
H_KEY_CURRENT_USER\Software\microsoft\Office\10.0\outlook\
DWORD MaxNicknames default it is 1000

Wednesday, August 17, 2011

Cisco switch port security

 Example:
int Fa0/1 
switchport mode access
!- maximum MAC address on port
 switchport port-security maximum 2
 switchport port-security
!- restrict MAC, logging  but don't shutdown port
 switchport port-security violation restrict
 switchport port-security mac-address sticky
 !- allowed MAC addresses
 switchport port-security mac-address sticky 702a.0371.96a6
 switchport port-security mac-address sticky 78d6.f355.eb4d
Show port security settings:
show port-security int Fa 0/1

Thursday, August 11, 2011

Cisco DHCP Snooping

just config, it's pretty easy
!enable DHCP snooping for vlan 1
ip dhcp snooping
ip dhcp snooping vlan 1
!enable DHCP option 82
ip dhcp snooping information option
!set trust port for DHCP server
int Gi0/2
ip dhcp snooping trust
!set limit per second
int range Fa0/1 - 24
ip dhcp snooping limit rate 20
!set trust trunk port:
ip dhcp snooping trust

show settings:
show ip dhcp snooping
show ip dhcp snooping binding