! Sends ping every 20 Sec and restarts "Job".
event manager applet TEST
event timer countdown time 20
action 1.0 cli command "enable"
action 2.0 cli command "ping 10.10.10.2 source 10.10.10.1 repeat 1"
action 3.0 cli command "configure terminal"
action 4.0 cli command "event manager applet TEST"
action 5.0 cli command "event timer countdown time 20"
action 6.0 cli command "exit"
! 48 Hours = 172800 Sec
! Show Job History
R1#show event manager history events
No. Job Id Proc Status Time of Event Event Type Name
1 35 Actv abort Wed May13 12:59:25 2015 timer countdown applet: TEST
2 36 Actv abort Wed May13 12:59:45 2015 timer countdown applet: TEST
3 37 Actv abort Wed May13 13:00:06 2015 timer countdown applet: TEST
4 38 Actv abort Wed May13 13:00:27 2015 timer countdown applet: TEST
5 39 Actv abort Wed May13 13:00:47 2015 timer countdown applet: TEST
6 40 Actv abort Wed May13 13:01:08 2015 timer countdown applet: TEST
7 41 Actv abort Wed May13 13:01:28 2015 timer countdown applet: TEST
8 42 Actv abort Wed May13 13:01:48 2015 timer countdown applet: TEST
9 43 Actv abort Wed May13 13:02:11 2015 timer countdown applet: TEST
10 44 Actv abort Wed May13 13:02:32 2015 timer countdown applet: TEST
! Debug TEST
R1# debug event manager action cli
*May 13 13:04:35.171: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : CTL : cli_open called.
*May 13 13:04:35.183: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1>
*May 13 13:04:35.187: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : IN : R1>enable
*May 13 13:04:35.207: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1#
*May 13 13:04:35.211: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : IN : R1#ping 10.10.10.2 source 10.10.10.1 repeat 1
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : Type escape sequence to abort.
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : Sending 1, 100-byte ICMP Echos to 10.10.10.2, timeout is 2 seconds:
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : Packet sent with a source address of 10.10.10.1
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : !
R1#y 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : Success rate is 100 percent (1/1), round-trip min/avg/max = 40/40/40 ms
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1#
*May 13 13:04:35.331: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : IN : R1#configure terminal
*May 13 13:04:35.451: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : Enter configuration commands, one per line. End with CNTL/Z.
*May 13 13:04:35.451: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1(config)#
*May 13 13:04:35.455: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : IN : R1(config)#event manager applet TEST
*May 13 13:04:35.575: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1(config-applet)#
*May 13 13:04:35.575: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : IN : R1(config-applet)#event timer countdown time 20
*May 13 13:04:35.707: %HA_EM-6-LOG: TEST : DEBUG(cli_lib) : : OUT : R1(config-applet)#
Showing posts with label Tricks. Show all posts
Showing posts with label Tricks. Show all posts
21 May, 2015
26 November, 2014
Use Show comand in configuration mode
R1(config)#alias configure show do show
R1(config)#show interface fa 0/0 | in line
FastEthernet0/0 is administratively down, line protocol is down
R1(config)#show alias | in do
show do show
R1(config)#show interface fa 0/0 | in line
FastEthernet0/0 is administratively down, line protocol is down
R1(config)#show alias | in do
show do show
05 November, 2014
Disable "Mode" Button on Cisco
ASW1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
ASW1(config)#no setup express
ASW1(config)#do show run | in express
no setup express
28 August, 2014
Interpret Packet Captures
When troubleshooting packet loss at a remote location where a sniffer trace isn't available, it's hard to isolate it to the LAN or WAN. In the new Cisco IOS 12.4(20)T there is a packet capture feature. The filters can be set based on interface name, direction, ACL, and even if it's to be punted to process level.
! Create Buffer
R1#monitor capture buffer MYBUFFER circular
! Configure Interface for Capture
R1#monitor capture point ip cef MYCAP fastEthernet 0/0 both
*Aug 28 22:49:13.135: %BUFCAP-6-CREATE: Capture Point MYCAP created.
! Configure Associate
R1#monitor capture point associate MYCAP MYBUFFER
! Start Capture
R1#monitor capture point start MYCAP
*Aug 28 22:50:19.767: %BUFCAP-6-ENABLE: Capture Point MYCAP enabled.
! Stop Capture
R1#monitor capture point stop MYCAP
*Aug 28 22:52:03.479: %BUFCAP-6-DISABLE: Capture Point MYCAP disabled.
! Check Configuration
R1#ping 10.10.10.2 repeat 10
! Verify Captured Packets
R1#show monitor capture buffer all parameters
Capture buffer MYBUFFER (circular buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 20 (10 in, 10 out ICMP Packets)
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : MYCAP, Status : Inactive
Configuration:
monitor capture buffer MYBUFFER circular
monitor capture point associate MYCAP MYBUFFER
R1#show monitor capture buffer MYBUFFER dump
22:52:24.743 UTC Aug 28 2014 : IPv4 CEF Turbo : Fa0/0 None
66910D80: CA030A54 0008CA04 0A540008 J..T..J..T..
66910D90: 08004500 00640000 0000FE01 94820A0A ..E..d....~.....
66910DA0: 0A020A0A 0A010000 B9CA0000 00000000 ........9J......
66910DB0: 00000007 CC78ABCD ABCDABCD ABCDABCD ....Lx+M+M+M+M+M
66910DC0: ABCDABCD ABCDABCD 00 +M+M+M+M.
! How to export CAP file.
R1#monitor capture buffer MYBUFFER export tftp://192.168.1.132/buffer.cap
! Note: Then you can open it with Wireshark.
! You Can Filter With Access-List
R1(config)#access-list 100 permit icmp host 2.2.2.2 any
R1#monitor capture buffer MYBUFFER filter access-list 100
R1#show monitor capture buffer MYBUFFER parameters
Capture buffer MYBUFFER (circular buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 4
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : MYCAP, Status : Active
Configuration:
monitor capture buffer MYBUFFER circular
monitor capture point associate MYCAP MYBUFFER
monitor capture buffer MYBUFFER filter access-list 100
! Create Buffer
R1#monitor capture buffer MYBUFFER circular
! Configure Interface for Capture
R1#monitor capture point ip cef MYCAP fastEthernet 0/0 both
*Aug 28 22:49:13.135: %BUFCAP-6-CREATE: Capture Point MYCAP created.
! Configure Associate
R1#monitor capture point associate MYCAP MYBUFFER
! Start Capture
R1#monitor capture point start MYCAP
*Aug 28 22:50:19.767: %BUFCAP-6-ENABLE: Capture Point MYCAP enabled.
! Stop Capture
R1#monitor capture point stop MYCAP
*Aug 28 22:52:03.479: %BUFCAP-6-DISABLE: Capture Point MYCAP disabled.
! Check Configuration
R1#ping 10.10.10.2 repeat 10
! Verify Captured Packets
R1#show monitor capture buffer all parameters
Capture buffer MYBUFFER (circular buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 20 (10 in, 10 out ICMP Packets)
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : MYCAP, Status : Inactive
Configuration:
monitor capture buffer MYBUFFER circular
monitor capture point associate MYCAP MYBUFFER
R1#show monitor capture buffer MYBUFFER dump
22:52:24.743 UTC Aug 28 2014 : IPv4 CEF Turbo : Fa0/0 None
66910D80: CA030A54 0008CA04 0A540008 J..T..J..T..
66910D90: 08004500 00640000 0000FE01 94820A0A ..E..d....~.....
66910DA0: 0A020A0A 0A010000 B9CA0000 00000000 ........9J......
66910DB0: 00000007 CC78ABCD ABCDABCD ABCDABCD ....Lx+M+M+M+M+M
66910DC0: ABCDABCD ABCDABCD 00 +M+M+M+M.
! How to export CAP file.
R1#monitor capture buffer MYBUFFER export tftp://192.168.1.132/buffer.cap
! Note: Then you can open it with Wireshark.
! You Can Filter With Access-List
R1(config)#access-list 100 permit icmp host 2.2.2.2 any
R1#monitor capture buffer MYBUFFER filter access-list 100
R1#show monitor capture buffer MYBUFFER parameters
Capture buffer MYBUFFER (circular buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 4
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : MYCAP, Status : Active
Configuration:
monitor capture buffer MYBUFFER circular
monitor capture point associate MYCAP MYBUFFER
monitor capture buffer MYBUFFER filter access-list 100
01 June, 2014
How To Get Small Output
R1#show processes cpu | include IP Input
80 0 2 0 0.00% 0.00% 0.00% 0 IP Input
R1#show processes cpu | include ^CPU|IP Input
CPU utilization for five seconds: 1%/0%; one minute: 0%; five minutes: 0%
80 0 2 0 0.00% 0.00% 0.00% 0 IP Input
R1#show processes cpu | include ^CPU|PID|IP Input
CPU utilization for five seconds: 0%/0%; one minute: 1%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
80 0 3 0 0.00% 0.00% 0.00% 0 IP Input
R1#show inter fas 0/0 | in ^Fas|MTU|Duplex
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
R1#show inter fas 0/0 | in ^Fas|MTU|duplex
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
R1#show inter fas 0/0 | in ^Fas|MTU|duplex|errors
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 output errors, 0 collisions, 0 interface resets
R1#show inter fas 0/0 | in ^Fas|MTU|duplex|packets
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
R1#show interfaces | in (is)
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is c200.1924.0000 (bia c200.1924.0000)
Internet address is 10.10.10.1/24
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
R1#show interfaces | in ( is )
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is c200.1924.0000 (bia c200.1924.0000)
Internet address is 10.10.10.1/24
show run | i ^interface|^_ip address
! Gives you the every line in your running config that starts with (that’s what the ^ is all about) “interface” or ” ip address”, essentially giving you all of your interface IP’s in an IOS-pastable format. The underscore represents a space. Useful for displaying IP addresses with their associated masks and interfaces.
show ip interf brief | e unassigned
! Shows you all of the IP-capable interfaces on the box, except for the ones that have not been assigned an IP address. I use this often, especially on big switch/routers where most of the physical interfaces do not have an IP addresses, but the SVIs do.
show run | i ip route.*Serial1/1
! Shows you all static routes in your configuration pointing out Serial1/1, no matter what they are. Substitute your own interface name. Useful if you’re doing clean up after decommissioning an interface where you didn’t run a dynamic routing protocol.
show interf status | i Gi[2-6]/20
! Shows you the status of all port 20s in slots 2-6 of a chassis with gig cards. Putting the 2-6 in square brackets is a regex telling the parser that any character that’s 2 through 6 inclusive is a match.
show interf status | i Gi[246]/20
! Shows you the status of all port 20s in slots 2, 4, and 6 of a chassis with gig cards. Here, [246] tells the parser that values 2, 4, or 6 are all matches for that position.
show interf status | i Gi./2_
! Shows you the status of all ports ending in 2. The underscore represents a space, so this makes sure you don’t get a match for “20″ or “22″ when all you really want is “2″. The dot is a wildcard, allowing for any single character in that position. If you want to match a random number of additional wildcard characters, follow the dot with an asterisk.
show interf status | i Gi7/(29|3[0-9])
! Shows you the status of all ports in slot 7, 29 – 39 inclusive. You get the “Gi7/”, right? No regex magic there. The “29|” could be translated “29 or”. The “3[0-9]” could be translated “3 followed by any of the digits 0 through 9 inclusive”. Put it all together, and you get a match for any line containing Gi7/, followed by 29 or 30-39.
show interf status | i _101_
! Displays all lines contain the number 101 with a leading and trailing space. Useful if you want to show all the ports in a particular VLAN, in this case 101.
show inter status | i a-100_|_100_
! Displays all the ports that are running at 100Mbps, whether statically defined or auto-negotiated. Will also match interfaces in Vlan100, though. Sadly, Cisco does not allow you to pipe to “include” and then further pipe to “exclude”, such as you can do in *nix by nesting piped greps. If you could nest your pipe commands in the IOS CLI, there could be some very interesting output filters generated.
show interface | i line|escription|bits
! Presents all interfaces, their descriptions, and the bits per second flowing through them, both input and output. Does not distinguish between up/down status.
80 0 2 0 0.00% 0.00% 0.00% 0 IP Input
R1#show processes cpu | include ^CPU|IP Input
CPU utilization for five seconds: 1%/0%; one minute: 0%; five minutes: 0%
80 0 2 0 0.00% 0.00% 0.00% 0 IP Input
R1#show processes cpu | include ^CPU|PID|IP Input
CPU utilization for five seconds: 0%/0%; one minute: 1%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
80 0 3 0 0.00% 0.00% 0.00% 0 IP Input
R1#show inter fas 0/0 | in ^Fas|MTU|Duplex
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
R1#show inter fas 0/0 | in ^Fas|MTU|duplex
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 output errors, 0 collisions, 0 interface resets
R1#show inter fas 0/0 | in ^Fas|MTU|duplex|packets
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
R1#show inter fas 0/0 | in ^Fas|MTU|duplex|errors|packets
FastEthernet0/0 is administratively down, line protocol is down
MTU 1500 bytes, BW 10000 Kbit/sec, DLY 1000 usec,
Half-duplex, 10Mb/s, 100BaseTX/FX
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
R1#show cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Intrfce Holdtme Capability Platform Port ID
R2.lab.local Fas 0/0 167 R S I 3725 Fas 0/0
R3.lab.local Fas 0/1 167 R S I 3725 Fas 0/0
R4.lab.local Fas 0/1 167 R S I 3725 Fas 0/0
R5.lab.local Fas 1/1 167 R S I 3725 Fas 0/0
R6.lab.local Fas 1/1 167 R S I 3725 Fas 0/0
R7.lab.local Fas 0/1 167 R S I 3725 Fas 0/0
R8.lab.local Fas 0/1 167 R S I 3725 Fas 0/0
R9.lab.local Fas 0/1 167 R S I 3725 Fas 0/0
R1#show cdp neighbors | include ^Device|R2
Device ID Local Intrfce Holdtme Capability Platform Port ID
R2.lab.local Fas 0/0 148 R S I 3725 Fas 0/0
R1#show interfaces | in (is)
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is c200.1924.0000 (bia c200.1924.0000)
Internet address is 10.10.10.1/24
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
R1#show interfaces | in ( is )
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is c200.1924.0000 (bia c200.1924.0000)
Internet address is 10.10.10.1/24
show run | i ^interface|^_ip address
! Gives you the every line in your running config that starts with (that’s what the ^ is all about) “interface” or ” ip address”, essentially giving you all of your interface IP’s in an IOS-pastable format. The underscore represents a space. Useful for displaying IP addresses with their associated masks and interfaces.
show ip interf brief | e unassigned
! Shows you all of the IP-capable interfaces on the box, except for the ones that have not been assigned an IP address. I use this often, especially on big switch/routers where most of the physical interfaces do not have an IP addresses, but the SVIs do.
show run | i ip route.*Serial1/1
! Shows you all static routes in your configuration pointing out Serial1/1, no matter what they are. Substitute your own interface name. Useful if you’re doing clean up after decommissioning an interface where you didn’t run a dynamic routing protocol.
show interf status | i Gi[2-6]/20
! Shows you the status of all port 20s in slots 2-6 of a chassis with gig cards. Putting the 2-6 in square brackets is a regex telling the parser that any character that’s 2 through 6 inclusive is a match.
show interf status | i Gi[246]/20
! Shows you the status of all port 20s in slots 2, 4, and 6 of a chassis with gig cards. Here, [246] tells the parser that values 2, 4, or 6 are all matches for that position.
show interf status | i Gi./2_
! Shows you the status of all ports ending in 2. The underscore represents a space, so this makes sure you don’t get a match for “20″ or “22″ when all you really want is “2″. The dot is a wildcard, allowing for any single character in that position. If you want to match a random number of additional wildcard characters, follow the dot with an asterisk.
show interf status | i Gi7/(29|3[0-9])
! Shows you the status of all ports in slot 7, 29 – 39 inclusive. You get the “Gi7/”, right? No regex magic there. The “29|” could be translated “29 or”. The “3[0-9]” could be translated “3 followed by any of the digits 0 through 9 inclusive”. Put it all together, and you get a match for any line containing Gi7/, followed by 29 or 30-39.
show interf status | i _101_
! Displays all lines contain the number 101 with a leading and trailing space. Useful if you want to show all the ports in a particular VLAN, in this case 101.
show inter status | i a-100_|_100_
! Displays all the ports that are running at 100Mbps, whether statically defined or auto-negotiated. Will also match interfaces in Vlan100, though. Sadly, Cisco does not allow you to pipe to “include” and then further pipe to “exclude”, such as you can do in *nix by nesting piped greps. If you could nest your pipe commands in the IOS CLI, there could be some very interesting output filters generated.
show interface | i line|escription|bits
! Presents all interfaces, their descriptions, and the bits per second flowing through them, both input and output. Does not distinguish between up/down status.
25 March, 2014
Show Descriptions
#Configure Interface Description on Cisco
SW1#conf terminal
SW1(config)#interface fastEthernet 0/24
SW1(config-if)#description LINK_TO_SW2
SW1(config-if)#end
#Show Commands
1)
SW1#show interfaces status | include 0/24
Fa0/24 LINK_TO_SW2 connected trunk a-full a-100 10/100BaseTX
2)
SW1#show interfaces description | include 0/24
Fa0/24 up up LINK_TO_SW2
3)
SW1#show run in fas0/24 | in description
description LINK_TO_SW2
SW1#conf terminal
SW1(config)#interface fastEthernet 0/24
SW1(config-if)#description LINK_TO_SW2
SW1(config-if)#end
#Show Commands
1)
SW1#show interfaces status | include 0/24
Fa0/24 LINK_TO_SW2 connected trunk a-full a-100 10/100BaseTX
2)
SW1#show interfaces description | include 0/24
Fa0/24 up up LINK_TO_SW2
3)
SW1#show run in fas0/24 | in description
description LINK_TO_SW2
10 February, 2014
Disable Password Recovery
#Disable Password Recovery
IOS release 12.3T (and 12.4) introduced a great security feature:
the ability to disable password recovery (using the well-known break key sequence)
with the no service password-recovery global configuration command.
However, once you configure this feature on some routers,
you might have no means whatsoever to get it under control if you forget the password.
Switch3#show version | in password
The password-recovery mechanism is enabled.
Switch3#configure terminal
Switch3(config)#no service password-recovery
Switch3(config)#do show version | in password
The password-recovery mechanism is disabled.
Switch3#write
Switch3#reload
[ Send the break signal at this point ]
PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to factory default
configuration and proceed [y/n] ? y
Reset router configuration to factory default.
Note:
Switch3(config)# config-register 0x2142
Password recovery is disabled, cannot enable diag or ignore configuration.
Switch3(config)# service password-recovery
Switch3(config)# config-register 0x2142
IOS release 12.3T (and 12.4) introduced a great security feature:
the ability to disable password recovery (using the well-known break key sequence)
with the no service password-recovery global configuration command.
However, once you configure this feature on some routers,
you might have no means whatsoever to get it under control if you forget the password.
Switch3#show version | in password
The password-recovery mechanism is enabled.
Switch3#configure terminal
Switch3(config)#no service password-recovery
Switch3(config)#do show version | in password
The password-recovery mechanism is disabled.
Switch3#write
Switch3#reload
[ Send the break signal at this point ]
PASSWORD RECOVERY IS DISABLED.
Do you want to reset the router to factory default
configuration and proceed [y/n] ? y
Reset router configuration to factory default.
Note:
Switch3(config)# config-register 0x2142
Password recovery is disabled, cannot enable diag or ignore configuration.
Switch3(config)# service password-recovery
Switch3(config)# config-register 0x2142
01 February, 2014
Change Netmask Format
#Bit-Count
R1#terminal ip netmask-format bit-count
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1/24
R1#show ip route | in subnet
10.0.0.0/24 is subnetted, 5 subnets
11.0.0.0/24 is subnetted, 1 subnets
#Decimal
R1#terminal ip netmask-format decimal
R1#show ip route | in subnet
10.0.0.0 255.255.255.0 is subnetted, 5 subnets
11.0.0.0 255.255.255.0 is subnetted, 1 subnets
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1 255.255.255.0
#Hexadecimal
R1#terminal ip netmask-format hexadecimal
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1 0xFFFFFF00
R1#show ip route | in subnet
10.0.0.0 0xFFFFFF00 is subnetted, 5 subnets
11.0.0.0 0xFFFFFF00 is subnetted, 1 subnets
R1#terminal ip netmask-format bit-count
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1/24
R1#show ip route | in subnet
10.0.0.0/24 is subnetted, 5 subnets
11.0.0.0/24 is subnetted, 1 subnets
#Decimal
R1#terminal ip netmask-format decimal
R1#show ip route | in subnet
10.0.0.0 255.255.255.0 is subnetted, 5 subnets
11.0.0.0 255.255.255.0 is subnetted, 1 subnets
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1 255.255.255.0
#Hexadecimal
R1#terminal ip netmask-format hexadecimal
R1#show interface fa 0/0 | in Internet address
Internet address is 11.11.11.1 0xFFFFFF00
R1#show ip route | in subnet
10.0.0.0 0xFFFFFF00 is subnetted, 5 subnets
11.0.0.0 0xFFFFFF00 is subnetted, 1 subnets
19 November, 2013
Wireshark
### Add Column:
Rigth click on packet details (host,src port, dst port) and click "Apply as column"
### How to generate ACLs,iptabes,Windows Firewall,IPFirewall Commands:
Select any Packet -> Click Tools -> "Firewall ACL Rules"
### Start Capturing At Open Wireshark:
Add -i # -k to the end of the shortcut, replacing # with
the number of the interface you want to use. The -i option
specifies the interface, while the -k option tells Wireshark
to start capturing immediately.
"C:\Program Files\Wireshark\wireshark.exe" -i 2 -k
### Configure Remote capturing:
services.msc ->
Remote Packet Capture Protocol v.0 (START)
Click the Capture Options link in Wireshark, then select "Remote"
Enter the address of the remote system and 2002 as the port
### How to change Mac resolv (c4:7d:4f:11:11:11 to cisco_11:11:11)
C:\Program Files\Wireshark\manuf (change this file)
### How to change Port Name (22 to ssh)
C:\Program Files\Wireshark\services (change this file)
### Capture in Terminal: (as administrador)
C:\Program Files\Wireshark>tshark.exe -i 2 (Real Time Without saving any capture)
C:\Program Files\Wireshark>tshark.exe -i 2 -w c:\capture-01
Capturing on Microsoft
431
Note: (-i [interface number]) (-w [directory where save captured file])
### Download Files From Capture:
File -> Export Objects -> HTTP
### Download FTP data
Search ftp data conversation after 3 way handshake -> open first packet and click "save as" (pic1.jpg)
### Start Graphs Monitor:
Click "Statistics" -> IO Gaphs
Configure Filters
###Display filter:
#Hide Protocol (s)
!(ipv6)
!(dns) && !(dhcp)
#Capture Network
net 192.168.1.0/24
ip.addr == 172.16.0.0/16
vlan.id==10
#Adding Simple Regular expressions:
"[aA][bB][cC]" or "(?i)abc" - Abc,ABC,AbC
"(?i)(abc|xyz)" - ABc,AbC or xyz,XyZ,XYz | = or
"(?i)(a.c|x..)" - AxC,AGc or Xhu,xgr,xJi . = any single character
Ejample :
frame matches "pass"
frame matches "(?i)pass"
frame matches "(?i)(pass|success)"
frame matches "(?i)(pa.s|su..ess)"
frame matches "(?i)(go{2}e)"
Equal to eq == ip.dst == a.b.c.d
Not equal to ne != udp.dstport != 53
less than lt < ip.ttl < 45
greater or equal ge >= tcp.analysis.bytes_in_flight >= 1000
contains contains dns.resp.name contains "google"
AND && (udp) && (dhcp)
or || (dns) || (http.response.code == 404)
Rigth click on packet details (host,src port, dst port) and click "Apply as column"
### How to generate ACLs,iptabes,Windows Firewall,IPFirewall Commands:
Select any Packet -> Click Tools -> "Firewall ACL Rules"
### Start Capturing At Open Wireshark:
Add -i # -k to the end of the shortcut, replacing # with
the number of the interface you want to use. The -i option
specifies the interface, while the -k option tells Wireshark
to start capturing immediately.
"C:\Program Files\Wireshark\wireshark.exe" -i 2 -k
### Configure Remote capturing:
services.msc ->
Remote Packet Capture Protocol v.0 (START)
Click the Capture Options link in Wireshark, then select "Remote"
Enter the address of the remote system and 2002 as the port
### How to change Mac resolv (c4:7d:4f:11:11:11 to cisco_11:11:11)
C:\Program Files\Wireshark\manuf (change this file)
### How to change Port Name (22 to ssh)
C:\Program Files\Wireshark\services (change this file)
### Capture in Terminal: (as administrador)
C:\Program Files\Wireshark>tshark.exe -i 2 (Real Time Without saving any capture)
C:\Program Files\Wireshark>tshark.exe -i 2 -w c:\capture-01
Capturing on Microsoft
431
Note: (-i [interface number]) (-w [directory where save captured file])
### Download Files From Capture:
File -> Export Objects -> HTTP
### Download FTP data
Search ftp data conversation after 3 way handshake -> open first packet and click "save as" (pic1.jpg)
### Start Graphs Monitor:
Click "Statistics" -> IO Gaphs
Configure Filters
###Display filter:
#Hide Protocol (s)
!(ipv6)
!(dns) && !(dhcp)
#Capture Network
net 192.168.1.0/24
ip.addr == 172.16.0.0/16
vlan.id==10
#Adding Simple Regular expressions:
"[aA][bB][cC]" or "(?i)abc" - Abc,ABC,AbC
"(?i)(abc|xyz)" - ABc,AbC or xyz,XyZ,XYz | = or
"(?i)(a.c|x..)" - AxC,AGc or Xhu,xgr,xJi . = any single character
Ejample :
frame matches "pass"
frame matches "(?i)pass"
frame matches "(?i)(pass|success)"
frame matches "(?i)(pa.s|su..ess)"
frame matches "(?i)(go{2}e)"
Equal to eq == ip.dst == a.b.c.d
Not equal to ne != udp.dstport != 53
less than lt < ip.ttl < 45
greater or equal ge >= tcp.analysis.bytes_in_flight >= 1000
contains contains dns.resp.name contains "google"
AND && (udp) && (dhcp)
or || (dns) || (http.response.code == 404)
09 November, 2013
Find Physical Location via MAC Address
C:\Users\Test> netsh wlan show networks mode=bssid
Nombre de interfaz : Conexión de red inalámbrica
Actualmente hay 1 redes visibles.
SSID 1 : Root
Tipo de red : Infraestructura
Autenticación : WPA2-Personal
Cifrado : CCMP
BSSID 1 : 00:13:xx:xx:xx:xx
Señal : 100%
Tipo de radio : 802.11n
Canal : 11
Veloc básicas (Mbps) : 1 2 5.5 11
Otras velocidades (Mbps): 6 9 12 18 24 36 48 54
Search on google
https://maps.googleapis.com/maps/api/browserlocation/json?browser=firefox&sensor=true&wifi=mac:[00:13:xx:xx:xx:xx]|ssid:[Root]|ss:[100]&wifi=mac:[00:13:xx:xx:xx:xx]|ssid:[Root]|ss:[100]
Output is location Info:
Nombre de interfaz : Conexión de red inalámbrica
Actualmente hay 1 redes visibles.
SSID 1 : Root
Tipo de red : Infraestructura
Autenticación : WPA2-Personal
Cifrado : CCMP
BSSID 1 : 00:13:xx:xx:xx:xx
Señal : 100%
Tipo de radio : 802.11n
Canal : 11
Veloc básicas (Mbps) : 1 2 5.5 11
Otras velocidades (Mbps): 6 9 12 18 24 36 48 54
Search on google
https://maps.googleapis.com/maps/api/browserlocation/json?browser=firefox&sensor=true&wifi=mac:[00:13:xx:xx:xx:xx]|ssid:[Root]|ss:[100]&wifi=mac:[00:13:xx:xx:xx:xx]|ssid:[Root]|ss:[100]
Output is location Info:
{
"accuracy" : 12xxxx,
"location" : {
"lat" : 41.xxxxxx, <--
"lng" : 2.xxxxxx <--
},
"status" : "OK"
}
Shearch Again: [lat] [lng]
25 September, 2013
Save and transfer your PuTTY settings between computers
1. Click Start->Run and type "regedit" in the "Open" dialog.
2. Press "Ctrl+F" to bring up the Find dialog. Enter the name of the key, "SimonTratham" in the "Find What" field, and make sure only "Keys" is checked in the "Look At" section of the dialog. Finally, click "Find Next".
Or Just Go HKEY_CURRENT_USER\Software\SimonTatham
4. We're done! Save the putty.reg file somewhere safe. The file doesn't contain any passwords or actual SSH key values so, it's relatively safe from prying eyes. Still, it does contain your configuration and that kind of data is a private matter.
19 June, 2013
Some Tricks On Windows
### Remove Control Panel From Windows
Run -> gpedit.msc
Configuracion Usuario ->
Plantillas Administrativas ->
Panel de Control ->
Prohibir el accesso al Panel de control.
### Remove Task Manager
Run -> gpedit.msc
Configuracion Usuario ->
Plantillas Administrativas ->
Sistema ->
Opciones de ctrl+alt+sup ->
Quitar Administrador de Tareas.
### Ocultar el elemento "Administrar" Del menu MI PC (Manage)
Run -> gpedit.msc
Configuracion Usuario ->
Plantillas Administrativas ->
Componentes de Windows ->
Explorador de Windows ->
Ocultar el elemento "Administrar"
### Change Start Menu Options
Run -> gpedit.msc
Configuracion Usuario ->
Plantillas Administrativas ->
Menu Inicio y barra de tareas ->
### Desabilitar CMD (Command Line)
Run -> gpedit.msc
Configuracion Usuario ->
Plantillas Administrativas ->
Sistemas ->
Impedir el acceso al simbolo del sistema
### Remove Games From Start Menu (W7)
Control panel --->
Programas y caracteristicas ---->
Activar o desactivar las caracteristicas de Windows
##########################################################################################################
24 April, 2013
CCNP T-Shoot Checking Resources And CPU Monitor
#Phase 1: Checking Resources
*To Show Info About Cards
RCS3600#show inventory
NAME: "c3660 Motherboard with Fast Ethernet", DESCR: "c3660 Motherboard with Fast Ethernet"
PID: Leopard-2FE , VID: , SN: JAB050304T8
RCS3600#show diag
Slot 0:
C3600 Mother board 2FE(TX) Port adapter, 2 ports
Port adapter is analyzed
Port adapter insertion time unknown
EEPROM contents at hardware discovery:
PCB Serial Number : JAB050304T8
Processor type : 34
Top Assy. Part Number : 800-04737-04
Board Revision : A0
Fab Part Number : 28-3234-02
Deviation Number : 65535-65535
Manufacturing Test Data : FF FF FF FF FF FF FF FF
Unknown Field (type 00A1): FF FF FF FF
RMA Test History : FF
RMA History : FF
Field Diagnostics Data : FF FF FF FF FF FF FF FF
Product (FRU) Number : Leopard-2FE
EEPROM format version 4
-------------------------------------------------------------
#Phase 2: CPU Monitor
RCS3600#show processes cpu
CPU utilization for five seconds: 3%/0%; one minute: 2%; five minutes: 2%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
1 4 3 1333 0.00% 0.00% 0.00% 0 Chunk Manager
2 8828 2537 3479 0.00% 0.06% 0.07% 0 Load Meter
3 16 440 36 0.00% 0.00% 0.00% 0 CEF Scanner
4 4 1 4000 0.00% 0.00% 0.00% 0 EDDRI_MAIN
***---Lines Omitted--***
*Only shows utilized processes
RCS3600#show processes cpu | exclude 0.00%__0.00%__0.00%
CPU utilization for five seconds: 2%/0%; one minute: 3%; five minutes: 3%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
2 8852 2545 3478 0.00% 0.05% 0.07% 0 Load Meter
5 10392 1530 6792 0.24% 0.06% 0.06% 0 Check heaps
11 8328 12706 655 0.00% 0.04% 0.05% 0 IPC Periodic Tim
***---Lines Omitted--***
***Note: Make Alias
RCS3600(config)#alias exec cpu show processes cpu | exclude 0.00%__0.00%__0.00%
(Where cpu Is Name of Alias)
Example:
RCS3600#cpu
CPU utilization for five seconds: 2%/0%; one minute: 3%; five minutes: 3%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
2 9720 2786 3488 0.00% 0.06% 0.07% 0 Load Meter
5 11416 1680 6795 0.08% 0.10% 0.09% 0 Check heaps
11 9364 13908 673 0.24% 0.07% 0.06% 0 IPC Periodic Tim
12 1140 13908 81 0.00% 0.03% 0.01% 0 IPC Deferred Por
RCS3600#show processes cpu | include IP Input
65 2836 4732 599 0.00% 0.00% 0.00% 0 IP Input
***Note:
Key: 1) upper-case and lower-case have effects
Example:
Wrong: ip input
Correct: IP Input
Subscribe to:
Posts (Atom)