SideJacked

Great ESX command

2010-10-06T10:50:00.003-08:00

Ran into a command new to ESX 4. console-setup from the command line will bring you into a menu based interface for configuring your service consoles. Turns out to be very helpful if you lock your self out by mistake.

SnapDrive 6.2 & Windows 2008 R2 Issue

2010-09-02T19:09:00.002-08:00

I'm running Windows 2008 R2 in an ESX virtual machine with Exchange 2010 loaded at one of my sites. I recently ran into an issue where SnapDrive was unable to mount a LUN during the SME snapshot process, specifically when trying to verify the snapshot that was just taken.

------------------------- SnapDrive Operation Start ---------------------------------
Disk connect operation on server - XXXX failed for reason
VDS volume object for the LUN s/n 'P3d/koYntsDA' has not been found
--------------------- The complete operation list is shown as

The fix for this is to patch SnapDrive with SnapDrive 6.2P1.

Which fixes this bug among others:

397462 |Windows 2008R2 120s Volume Arrival Timeout when connecting to LUN Clone on the same host

NDMP NetApp backup issue

2010-09-02T19:07:00.003-08:00

So apparently Backup Exec 2010 won't backup a NetApp Filer via NDMP if the root password that you are using has spaces in it.

"unable to authenticate with the ndmp server, or with the remote computer that ..."

Blah!

NCDA

2010-08-05T08:21:00.002-08:00

I had to take a break from the CCIE studying for awhile to get some certifications for work.

I just added NCDA to the list!

SMVI Snapshot fails on RDM LUNS

2010-07-23T12:12:00.003-08:00

I did a recent NetApp deployment where SMVI was installed. Snapshot's would work for every virtual machine except for the ones that were using RDM luns. There are several NetApp and VMware articles and KB's out there that states this is the way to go now for mounting Exchange, SQL, etc to virtual guests. After some troubleshooting I was able to determine that I was unable to take a snapshot just using VMware. After uninstalling the VMware tools and reinstalling without the VSS driver component it started working.

SnapManager for Exchange fails to create disk

2010-07-23T11:59:00.002-08:00

I had a recent SnapManager for Exchange installation. The Exchange server was a virtual guest on an ESX 4 host. The Exchange stores and logs were each on their own luns, each lun on it's own volume. The luns were connected via ISCSI to the esx host and added to the exchange guest as RDM's.

When trying to take a Snapshot it would fail and give me the following errors:

Failed to connect to LUN in a FlexClone. Failure in connecting to the LUN.

Error code : Failed to create disk in virtual machine, Failed to Map virtual disk: A general system error occurred: Failed to create disk: Error creating disk.

SnapManager backup finished with the following result:

*****BACKUP DETAIL SUMMARY*****
Backup group set #1:
Backup SG/DB [First Storage Group] Error: Failed to verify physical integrity of the databases.
Backup SG/DB [Second Storage Group] Error: Failed to verify physical integrity of the databases.

The issue ended up being an initiator group that had been added but not mapped to any luns. When SnapDrive would attempt to mount up the flexclone's for the SnapShot, it would for some reason try to use create the mapping to the flexclone's using this initiator group and fail. Once I deleted the initiator group, rescanned and refreshed the hosts iscsi storage adapter and restarted the Snapmanager for Exchange and Snapdrive services it began working again.

NetApp dedupe

2010-07-16T09:57:00.002-08:00

Space savings with ESX vmdk's on NetApp is amazing. Ran it, 76% savings.

NAS01> df -s /vol/vm
Filesystem used saved %saved
/vol/vm/ 34707032 109758560 76%
NAS01>

Frame Relay command

2010-04-18T11:30:00.003-08:00

Here's a cool command that I learned about this weekend:

no frame-relay inverse-arp (protocol) (dlci)

Basically you can use this interface command to limit which DLCI's you can use through the inverse arp process.

So if I have DLCI's 102,202,302,402,502 ect available, I could use this command to tell it never to use DLCI's 102 and 502, for whatever reason, for example if it was a requirement in the lab exam.

no frame-relay inverse-arp ip 102

no frame-relay inverse-arp ip 502

Frame Relay MultiLink on GNS3 and CCIE study update

2010-04-16T20:05:00.005-08:00

It's been awhile since I posted last. At this point I've pretty much been able to cover almost all of the relevant chapters in the Routing TCP/IP vol 1 book. Currently I'm going through a phase of review and mini labs to harden alot of this material into my brain and then I plan on reviewing the CCIE Written Exam book chapters. I hope to be done doing a solid review of the material I've covered so far in a few weeks. Then I will start in on the vol. 2 book. Originally I thought I was going to be able to take the written 3 months after starting to study. That isn't the case now as I haven't had as much study time with family and work as I thought/hoped I would. Nevertheless, I am still learning a ton and I am actually spending alot of time in GNS3. Hopefully that will shave some time off my lab studying.

Now onto the Frame Relay Stuff.

I was trying to do a lab for Frame Relay Multilink on GNS3 through the frame switch. I wasn't ever able to get it working. After double and checking the configuration I finally gave up and figured it wasn't something that the GNS3/Dynamips frame switch was meant to do.

I was able to get it working by going Back to Back Frame-Relay. Configs Below.

****R1****

interface MFR1

ip address 192.168.1.1 255.255.255.0

no keepalive

frame-relay map ip 192.168.1.1 101

frame-relay map ip 192.168.1.2 101

interface MFR1.1 point-to-point

ip address 192.168.2.1 255.255.255.0

frame-relay interface-dlci 102

interface MFR1.2 point-to-point

ip address 192.168.3.1 255.255.255.0

frame-relay interface-dlci 103

interface Serial1/0

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

interface Serial1/1

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

interface Serial1/2

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

end

****R1****

****R2****

hostname R2

interface MFR1

ip address 192.168.1.2 255.255.255.0

no keepalive

frame-relay map ip 192.168.1.1 101

interface MFR1.1 point-to-point

ip address 192.168.2.2 255.255.255.0

frame-relay interface-dlci 102

interface MFR1.2 multipoint

ip address 192.168.3.2 255.255.255.0

frame-relay map ip 192.168.3.1 103

interface Serial1/0

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

interface Serial1/1

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

interface Serial1/2

no ip address

encapsulation frame-relay MFR1

serial restart-delay 0

no arp frame-relay

****R2****

r1#sh int mfr1

MFR1 is up, line protocol is up

Hardware is Multilink Frame Relay bundle interface

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 4632 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation FRAME-RELAY, loopback not set

Keepalive not set

DTR is pulsed for 2 seconds on reset

LMI DLCI 1023 LMI type is CISCO frame relay DTE

FR SVC disabled, LAPF state down

Broadcast queue 0/64, broadcasts sent/dropped 13/0, interface broadcasts 0

Last input 00:00:52, output never, output hang never

Last clearing of "show interface" counters 00:11:27

Input queue: 0/75/6/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/120 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

32 packets input, 4580 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

38 packets output, 6821 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 output buffer failures, 0 output buffers swapped out

0 carrier transitions

r1#

Routing TCP/IP

2010-02-23T21:08:00.002-09:00

I started reading the Routing TCP/IP vol 1 book today. I've started with the OSPF chapter. This book is awesome. It is so detailed and yet written in a way that makes the technical informtation easy to digest. It's really bringing out the geek in me.

OSPF Priorities

2010-02-21T13:49:00.003-09:00

I wanted to see what would happen if two routers on an ethernet segment were both configured with a priority of 0. Each router also had a loopback interface with OSPF turned on. Basically the routers will only form the 2WAY/DROTHER relationship and no routing updates will be exchanged between the two.

CCIE Study Progress

2010-02-21T12:51:00.005-09:00

It's been a few weeks since I decided to begin the journey towards CCIE certification. I went on vacation to Maui shortly after my first post. Unfortunately I broke my leg while boogie boarding after a wave smashed me into the shore. After my surgery I'll be in a cast for 8 weeks. The only good that's really come of it is that now I have alot of time to study. I was originally going to begin with IPV6 but have switched gears to OSPF. After OSPF I'll hit frame relay in depth and then maybe move on to IPV6 and OSPF v3. I've watched a ton of videos and I have been reading the latest CCIE certification book from Cisco press. When I get back home I'll start reading the Routing TCP/IP vol 1 chapters on OSPF. I've also got dynamips and GNS3 installed on my laptop now and have setup a topology that I'm currently using for OSPF features, frame relay and EIGRP for redistribution into an NSSA area. I've gotten a little boost in confidence as I was able to configure the topology without too much hassle and much of the training from the CCNP track is coming back to me even though it's been awhile and I haven't touched OSPF since.

Above is a picture of my current topology.

Below are Router configs from my lab. I plan to next include authentication for the the virtual links and change the point-to-multipoint OSPF topology to NBMA.

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R1

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 192.168.1.1 255.255.255.255

interface Serial1/0

no ip address

encapsulation frame-relay

serial restart-delay 0

interface Serial1/0.1 point-to-point

ip address 10.1.1.1 255.255.255.0

ip ospf network point-to-point

ip ospf priority 255

frame-relay interface-dlci 102

interface Serial1/0.2 multipoint

ip address 172.16.1.1 255.255.255.0

ip ospf network point-to-multipoint

ip ospf priority 255

frame-relay map ip 172.16.1.3 104 broadcast

frame-relay map ip 172.16.1.2 103 broadcast

interface GigabitEthernet2/0

ip address 10.11.11.1 255.255.255.0

ip ospf priority 255

negotiation auto

router ospf 1

router-id 1.1.1.1

log-adjacency-changes

area 1 virtual-link 5.5.5.5

network 10.1.1.1 0.0.0.0 area 0

network 10.11.11.1 0.0.0.0 area 1

network 172.16.1.1 0.0.0.0 area 0

network 192.168.1.1 0.0.0.0 area 0

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R2

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 192.168.2.1 255.255.255.255

interface Serial1/0

no ip address

encapsulation frame-relay

serial restart-delay 0

interface Serial1/0.1 point-to-point

ip address 10.1.1.2 255.255.255.0

ip ospf network point-to-point

ip ospf priority 0

frame-relay interface-dlci 201

interface GigabitEthernet2/0

ip address 172.17.0.1 255.255.255.0

ip ospf priority 255

negotiation auto

router ospf 1

router-id 2.2.2.2

log-adjacency-changes

area 2 stub

network 10.1.1.2 0.0.0.0 area 0

network 172.17.0.1 0.0.0.0 area 2

network 192.168.2.1 0.0.0.0 area 0

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R3

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 192.168.3.1 255.255.255.255

interface Serial1/0

ip address 172.16.1.2 255.255.255.0

encapsulation frame-relay

ip ospf network point-to-multipoint

ip ospf priority 0

serial restart-delay 0

frame-relay map ip 172.16.1.3 301 broadcast

frame-relay map ip 172.16.1.1 301 broadcast

no frame-relay inverse-arp

interface FastEthernet2/0

ip address 172.18.0.1 255.255.255.0

ip ospf priority 255

duplex auto

speed auto

router ospf 1

router-id 3.3.3.3

log-adjacency-changes

area 3 stub no-summary

network 172.16.1.2 0.0.0.0 area 0

network 172.18.0.1 0.0.0.0 area 3

network 192.168.3.1 0.0.0.0 area 0

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R4

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 192.168.4.1 255.255.255.255

interface Serial1/0

ip address 172.16.1.3 255.255.255.0

encapsulation frame-relay

ip ospf network point-to-multipoint

ip ospf priority 0

serial restart-delay 0

frame-relay map ip 172.16.1.1 401 broadcast

frame-relay map ip 172.16.1.2 401 broadcast

interface FastEthernet2/0

ip address 172.19.0.1 255.255.255.0

ip ospf priority 255

duplex auto

speed auto

router ospf 1

router-id 4.4.4.4

log-adjacency-changes

area 4 nssa default-information-originate no-summary

network 172.16.1.3 0.0.0.0 area 0

network 172.19.0.1 0.0.0.0 area 4

network 192.168.4.1 0.0.0.0 area 0

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R5

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 192.168.5.1 255.255.255.255

interface GigabitEthernet1/0

ip address 10.11.11.2 255.255.255.0

negotiation auto

interface GigabitEthernet2/0

ip address 10.11.12.1 255.255.255.0

ip ospf priority 255

negotiation auto

router ospf 1

router-id 5.5.5.5

log-adjacency-changes

area 1 virtual-link 1.1.1.1

network 10.11.11.2 0.0.0.0 area 1

network 10.11.12.1 0.0.0.0 area 5

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R6

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface GigabitEthernet1/0

ip address 172.17.0.2 255.255.255.0

negotiation auto

router ospf 1

router-id 6.6.6.6

log-adjacency-changes

area 2 stub

network 172.17.0.2 0.0.0.0 area 2

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R7

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface FastEthernet1/0

ip address 172.18.0.2 255.255.255.0

duplex auto

speed auto

router ospf 1

router-id 7.7.7.7

log-adjacency-changes

area 3 stub

network 172.18.0.2 0.0.0.0 area 3

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R8

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface Loopback1

ip address 18.208.193.4 255.255.192.0

interface FastEthernet1/0

ip address 172.19.0.2 255.255.255.0

duplex auto

speed auto

router eigrp 10

passive-interface FastEthernet1/0

network 18.208.192.0 0.0.63.255

no auto-summary

router ospf 1

router-id 8.8.8.8

log-adjacency-changes

area 4 nssa

redistribute eigrp 10 metric 50 subnets

network 172.19.0.2 0.0.0.0 area 4

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname R9

boot-start-marker

boot-end-marker

no aaa new-model

ip subnet-zero

ip cef

interface GigabitEthernet1/0

ip address 10.11.12.2 255.255.255.0

negotiation auto

router ospf 1

router-id 9.9.9.9

log-adjacency-changes

network 10.11.12.2 0.0.0.0 area 5

ip classless

no ip http server

no ip http secure-server

gatekeeper

shutdown

line con 0

exec-timeout 0 0

stopbits 1

line aux 0

stopbits 1

line vty 0 4

end

SecureCRT GNS3 and Windows 7 Console Issue

2010-02-20T12:48:00.002-09:00

I was having issues getting securecrt to work on Windows 7 with GNS3 as the telnet client. I found this link which helped me solve the problem:

http://www.gns3.net/phpBB/topic1246.html

My string for Terminal Command now looks like:

start C:\PROGRA~2\SecureCRT\securecrt.exe /T /telnet 127.0.0.1 %p

Apparently it was translating to the IPV6 address for local host. So replace %h with 127.0.0.1 and it works.

You also don't need the securecrt.vbs script in Windows 7 I guess.

Tabbed Console sessions for GNS3!

CCIE

2010-02-01T22:05:00.002-09:00

I've decided to begin studying for the CCIE R&S exam. During my studying most of my posts to this blog will be about the CCIE and what I'm studying for at the time. I've decided to tackle IPV6 first, since that was my weakest area when I was taking the CCNP tests. Alot more to come....

How to Import Mail from Mac Mail into Outlook 2003/2007

2009-12-07T14:04:00.001-09:00

From inside Mac Mail select all of the e-mail message you wish to export.
Select File > Save As
Change the format to "RAW Format"
Once the file is done saving, transfer it to a windows PC
Rename the file to mail.mbox
Download and Install IMAP Size - www.broobles.com/imapsize/download.php
From IMAPSIZE go to Tools > mbox2eml...
Select the location for the converted messages
Once the conversion is done Open Outlook Express

Select all of the converted messages in Windows explorer and drag them to the Outlook Express Inbox

Once the messages all appear in Outlook Express open Outlook 2003/2007
File > Import From another Program or File > Outlook Express ......

Walla, Mac Mail moved onto your Exchange Server

Removing GFI EndPointSecurity 3.0 Agent

2009-12-06T10:45:00.004-09:00

This program is intended to block the use of unauthorized USB devices on computers and servers.
http://www.gfi.com/endpointsecurity

I found this installed at a site with no management console available. There is no uninstaller for the program, and GFI contends that you must use the console. I tried several times to remove the program to no avail. The thing is worse than SpyWare.

This is how I finally got rid of it:

Download Process Explorer - http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

Download HijackThis - http://free.antivirus.com/hijackthis/

Go into the service, change the service properties to not restart. Stop the service, you may have to do this several times. Once the service is stopped open a command window and type: sc delete "Service Name"

Open Process Explorer, Change the Priority of the process, eppsver.exe (or something close to that) to the lowest possible.

Open up the properties from process explorer and kill each thread.

Once all the threads are killed delete the Program Files Folder that contains eppsvr.exe, I think it was GFI.

Run Hijack This and delete the startup Hook. Reboot and make sure the thing is gone.

Cisco SSL VPN's and DFS

2009-12-04T16:36:00.002-09:00

If you want VPN clients that are a different subnet than your other LAN's, to be able to access a DFS share, then the VPN subnet needs to be associated with an AD Site.

Dell PowerConnect 6200 Stack, Updated!

2009-11-04T08:50:00.004-09:00

I had some further conversation's with Dell and they were able to provide me with documentation to further verify the Cross Stack 802.3ad Functionality:

Here's an example show command from a Dell Support Page that illustrates Ports spanning multiple switches that are active in a Port Channel:

Example

Console#show interfaces port-channel

Channel Ports Hashing-mode

------- --------------------------------------- ------------

ch1 Active: 1/e1, 2/e2 1

ch2 Active: 2/e2, 2/e7 Inactive: 3/e1 2

ch3 Active: 3/e3, 3/e8 3

ch4 No Configured Ports 5

ch5 No Configured Ports 6

ch6 No Configured Ports 4

ch7 No Configured Ports 3

ch8 No Configured Ports 3

I still need to get some Demo switches. You would think that Dell would be advertising this feature way more since Cisco is the only other vendor that does this, that I know of.

Updated Dell PowerConnect 6200 Stack

2009-10-29T13:03:00.004-08:00

***Update***

A colleague of mine has tested this and verified that it in fact does work. He did note that you cannot enable flow control on a per interface basis it has to be done for the entire switch. This is a little bit of an issue because it is recommended that this is enabled on the NetApp interfaces but not for VMWARE hosts. So it's a bummer if you have your storage and virtualization systems connected to the same stack.

Apparently Dell makes a stackable switch that provides functionality close to Cisco's Stackwise.

http://www.dell.com/downloads/global/products/pwcnt/en/PC_6200Series_proof1.pdf

Like the Cisco 3750 series switches, with the Dell PowerConnect 6200 series you can have a Port-Channel span multiple physical switches. Cisco calls this Cross-Stack EtherChannel, I haven't quite figured out what Dell calls it yet.

While the performance isn't as robust as some of the 3750 switches, the price is way lower.

From Dell's site it was hard to determine whether or not the PowerConnect did support this type of configuration. I confirmed with two different people at Dell that it did. I am waiting on a couple to test.

Symantec Endpoint Protection Migration and Deployment Wizard SBS 2008

2009-10-29T12:49:00.005-08:00

I was unable to use the Migration and Deployment wizard with SBS 2008. When I got to "Specify the name of a new group that you wish to deploy clients to" the wizard would go to "Loading" for a second and then return to the previous screen. The Built in Administrator account is disabled in SBS 2008 by default. There are to ways around this issue:

1) Enable the Built in Administrator account, log on, and run the Wizard from that account.

2) Go to the Start Menu, Right click the command Prompt and Select "Run as Administrator"

Command Prompt:

Microsoft Windows [Version 6.0.6002]

C:\Windows\system32>cd C:\Program Files (x86)\Symantec\Symantec Endpoint Protect

ion Manager\bin

C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\bin>firstuse.bat

SQL Server 2008 Setup requires Microsoft .Net framework 3.5 to be installed

2009-10-04T23:25:00.002-08:00

I was installing SQL 2008 the other day and kept getting the following error:

"SQL Server 2008 Setup requires Microsoft .Net framework 3.5 to be installed"

I tried running the .NET Cleanup and reinstalling with no luck. It turns out that this error was being cause by a bad download of the SQL 2008 Standard Media from the MS Site. I downloaded the product again without issue.

802.3ad MultiMode Dynamic VIF and an HP Procurve Switch

2009-09-21T15:12:00.007-08:00

These are the configs to get LACP and 802.1q working between a NetApp and HP Procurve. An HP "Trunk". There are other ways to configure this, but after an e-mail to NetApp and phone call to HP, it sounds like this is the "preferred" way to configure the two devices together.

You will notice that VLAN 1 is tagged on the HP Procurve Trunks. VLAN 1 must be tagged or the NetApp will not communicate over it. By default it is not tagged on HP or Cisco switches.

IP addresses, VLAN Numbers and Hostnames have been changed.

/ETC/RC

hostname NAS01

vif create lacp vif0 e0a e0b

vlan create vif0 1 10

ifconfig vif0-1 `hostname`-vif0-1 netmask 255.255.255.0 wins

ifconfig vif0-10 `hostname`-vif0-10 netmask 255.255.255.0 wins

route add default 192.168.1.1 1

routed on

options.dns.enable on

options.nis.enable off

savecore

/ETC/HOSTS

127.0.0.1 localhost

192.168.1.2 NAS01 NAS01-vif0-1

10.0.0.2 NAS01 NAS01-vif0-10

Below is the HP config. Before you run the Trunk (ports) (trunkname) lacp command for the ports connected to the Filer, you need to drop down to each interface and run "lacp passive". I know it doesn't show up in the config, but if you run the trunk command without the LACP passive command it will place "LACP Active" in the configuration. I was unable to get the Trunk to come up properly when this was in place. Also, you'll want to turn Flow Control on for the ports the NAS is using.

Running configuration:

; J9022A Configuration Editor; Created on release #N.11.15

interface 25

name "NAS01e0a"

flow-control

exit

interface 26

name "NAS01e0b"

flow-control

exit

trunk 25-26 Trk1 LACP

vlan 1

name "Production"

untagged 1-20,27-36,Trk4-Trk6

ip address 192.168.1.3 255.255.255.0

tagged Trk1

no untagged Trk2-Trk3

exit

vlan 10

name "Storage"

untagged Trk2-Trk3

no ip address

tagged Trk1

exit

Backup Exec System Recovery, Can't Map Drive to Restore Server

2009-09-19T11:57:00.004-08:00

I was trying to map the machine that needed to be recovered to a network share from the Symantec Backup Exec System Recovery Bootable Recovery CD.. The interface would map the drive but never let me get into it. It also wouldn't ask me for credentials.

I found a way around this, if you go back to the screen where you select the file image to use, click browse. Double Click Computer. Select your C drive, but don't double click it. Hold Down Shift + F10. A menu should come up with an option to go to the command line.

Map your share from the command line:

net use r: \\server\sharename /user:domain\username password

I was then able to get back to the browse window and select the image to restore from the share.

Hyper-V no VHD Mount?

2009-09-18T22:00:00.002-08:00

Apparently you can't mount VHD's straight to your OS anymore in Hyper-V. I remember being able to do this in VS2005. Lame.

Free Wifi Survey Tool

2009-08-11T10:42:00.001-08:00

I found a great free wireless survey tool that works with Windows 7.

The tool is Covers and it can be found here:

http://www.celtrio.com/download/

Cisco Aironet 1252 AP and N Data rates

2009-08-04T16:00:00.002-08:00

I was having an issue getting Netbooks to connect to the Cisco Wireless AP's with "N" Data rates. Standing 10 feet away I'll I could get was 54 MBPS. I spoke with TAC and apparantely Cisco only supports the "N" rates if you are using Open Authentciation or WPA2-AES at the moment. Good to Know.

Cisco Aironet 1252 and IPHONE Wireless Not Working

2009-08-04T15:37:00.004-08:00

I deployed a few Cisco 1252 AP's and ran into an issue getting the IPHONE to connect to them over the wireless network. It would not connect using WPA-PSK TKIP or even just plain open authentication. Cisco TAC was unable to come up with a solution. So I procceded to systematically change options on the radio one by one. I was able to get the iphone connected after disabling the Cisco Aironet Extensions on the radio interface. I haven't had issues in the past with 1242 AP's and iphones, but with the 1252 there does seem to be a problem. My AP's were also deployed autonomously.

I found this wiki article about Aironet Extensions which I have never used:

http://supportwiki.cisco.com/ViewWiki/index.php/Is_it_possible_to_use_Aironet_extentions_in_a_mixed_environment_with_Cisco_and_non-Cisco_clients%3F

I'm not sure if this is a new thing that these are on by default now.

Cisco AP, Microsoft IAS, PEAP Issues

2009-07-29T21:45:00.005-08:00

I had a recent PEAP deployment for a client go south this week. It was supposed to be a simple reconfiguration from LEAP to PEAP, no big deal....

3 Cisco 1231 AP's running 12.4, Microsoft IAS server, Windows 2003 Server, self signed certificate, Cisco Aironet Cards and Windows XP/Vista Clients.

After everything was configured I could not get the wireless to work. I looked into many potential causes and had a Cisco and Microsoft Call going with no luck. I also had the configuration mirror Microsoft and Cisco documents to the letter and had ruled out all solutions I could find online. I was recieving several errors in my event logs related to IAS:

- Event 2, Reason-Code=8, Reason=the specified user account does not exist.

- Reason-Code = 16, Reason = Authentication was not successful because an unknown user name or incorrect password was used.

- Reason-Code = 260, Reason = The message or signature supplied for verification has been altered

I accidently discovered what I believe the problem to be after trying to install a hotfix. The hotfix failed with this error:

The Service Pack 2 \i386\update\update.inf file is not correct.

Which led me here: http://support.microsoft.com/kb/946938

Which then led me to this KB from Microsoft stating the fact that this change is unsupportable and will cause system instability: http://support.microsoft.com/kb/933700

"Microsoft does not support changing the location of the Program Files folder by modifying theProgramFilesDir registry value. If you change the location of the Program Files folder, you may experience problems with some Microsoft programs or with some software updates."

As far as I can tell the issue was caused due to the registry change or potential corruption of installed windows components/hotfixes after such change.

I reinstalled IAS on another server, mirrored the configuration and updated the cert on clients and AP configs. My wireless clients began working immediatly with no further issues.

This issue was rather difficult to pin point so I hope it saves someone else some headaches.

New Cisco 1252 AP's

2009-07-23T11:21:00.003-08:00

The Cisco 1252 Wireless N AP's don't come with an external power supply out of the box like the others int eh 1200 series do. So if you don't plan on using POE or a power injector you'll need this part: AIR-PWR-SPLY1=

Also with the AP's there are three 2.4 GHz Dipole part numbers listed in the ordering guide:

AIR-ANT2422DG-R
AIR-ANT2422DW-R
AIR-ANT4941

The "DG" part number is a gray antenna that does not pivot and is shorter than the other two. The only place I was able to find the clarification on Cisco's site was here:

http://cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/at_a_glance_c45-513837.pdf

Hailing in Anchorage

2009-06-24T15:46:00.000-08:00

Passed Wireless# !!!

2009-03-31T23:15:00.005-08:00

I passed the Wireless# (sharp) test last week. It wasn't to bad, all of the information needed was provided by the Wireless# self study guide that you can get from the CWNP website. I've moved on to studying for the CWNA. The newest study guide for the 104 test is available on the CWNP website as well.

Backing Up Exchange 2007 on Windows 2008 with Backup Exec 12.5

2009-03-19T15:34:00.003-08:00

This process is so annoying:

Follow this Symantec Article:

http://seer.entsupport.symantec.com/docs/287937.htm

Then Make sure the information store is the first item in the job's selection list:

http://seer.entsupport.symantec.com/docs/306830.htm

Then you have to install Exchange System Tools on your BE media server, you probably have a 32 bit media server so you have to do this:

http://seer.entsupport.symantec.com/docs/292480.htm

http://support.microsoft.com/kb/555841

Obnoxious but my Mail backup works now.

SSLStrip

2009-02-28T15:15:00.003-09:00

MITM attack for stealing login credentials and such.

http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=214502801

Home Wireless Video Phone where are you?

2009-02-28T14:07:00.005-09:00

I was thinking about getting a wireless video phone. I was surprised to find out that there does not seem to be much out there for the home market. D-Link has has a model, but you need to plug it into your TV. I was thinking of one whole unit.

ASUS makes a Skype Video Phone that is wireless:

http://www.skype.com/allfeatures/videophones/

You have to have a Skype account for that one. I don't think that you can call by IP address.

The Verizon Hub is the "Home Phone Reinvented" No Video though, but this is sort of what I am envisioning:

http://www.verizonwireless.com/b2c/vzhub/overview.jsp?lid=//global//phones+and+accessories//verizon+hub

I am really surprised that the market is not flooded with these types of devices yet for the home user.

Some cool features would be:

SD card and USB slot so that it would double as a digital picture frame
The ability to connect an antenna for longer range
Touch Screen
Wall Mountable
Voice Activation
A Remote

One of these days I guess

Hide Ubuntu Panels with Shortcut!

2009-02-26T15:40:00.001-09:00

Here is a great script and instructions on how to create a shortcut key combination to hide the panels on your desktop.

http://reachbeyondgrasp.blogspot.com/2007/04/hide-and-show-panels-with-keyboard.html

This is great because I've got a small screen.

You can rename a Windows 2008 Domain, Unless you have Exchange

2009-02-25T15:49:00.003-09:00

You can do this in 2008 with Rendom.exe, which is supposed to come bundled with 2008 now. It doesn't work if you want to rename the domain after Exchange has been installed. Apparently once you run forest and domain prep, the domain is embedded into the schema and cannot be changed. Same story as 2003.

Unconnected Sockets not implemented

2009-02-25T15:43:00.003-09:00

So I ran into an issue where I can no longer connect to an ASA using ASDM on my laptop. It appears that a java update is the culprit.

I found my answer here:

http://www.techexams.net/forums/ccnp/38038-java-update-breaks-asdm.html

It looks you can update ASDM to a newer version to fix.

Terminal Services 2008 Gateway, No Change Password?

2009-02-25T15:19:00.004-09:00

I did my first MS TS 2008 Deployment the other day with the TS Gateway. The published application feature is really nice. If you don't want users to have access to the desktop on your TS server this feature is a must. However I ran into one major limitation, they can't change their password. Their is currently no way for users to change their password through the TS Gateway alone. I heard they may be releasing this functionality with R2 for 2008. In the meantime I've come up with a not so perfect but semi workable solution. I copied the issadmpwd directory from an Exchange 2003 server and imported onto one of my 2003 servers with IIS for this network. I then created a link to the published web page and added it through the TS 2008 remote app manager. Users now at least have a link to a web page that they can launch to change their password.

There's some scripts out there that you can edit to notify user by e-mail before their password is set to expire. I haven't implemented any of them yet, but that seems like it may be a good way to handle the notification process.

Here's the MS link to getting the IISADMPWD site up and running:

http://support.microsoft.com/kb/555071

Symantec Mail Security failed to enable asp.net web extensions

2009-01-22T08:53:00.003-09:00

I was installing Symantec Mail Security 6.0 on with Exchange 2007 on a Windows 2008 64 bit host today and ran into the error:

Symantec mail security failed to enable asp.net web extensions......

To resolve this error you need to install the IIS6 Scripting Tools under the IIS 6 Management and Compatibility Section of the IIS Server role.

The installation should go smoothly after that.

Cisco IPS

2009-01-17T00:08:00.002-09:00

Cisco IPS - VMWARE

2009-01-16T23:42:00.003-09:00

The Next Exam I am going to take will be the IPS exam. I know little to nothing about Cisco IPS and have just general knowledge of what IPS is. I will be doing a series of postings on the topic.

I found a tutorial for loading Cisco IPS in VMWARE:

http://7200emu.hacki.at/viewtopic.php?t=3095

Passed SNRS

2009-01-14T14:44:00.002-09:00

I passed the Cisco SNRS test last Thursday, Cisco IOS Security Specialist.

Two more to go for the CCSP!!!

https://cisco.hosted.jivesoftware.com/community/certifications/ccsp/snrs?view=overview

Ubuntu, Web Cam works out of the box with aMSN

2009-01-14T12:30:00.002-09:00

Back to Ubuntu

2009-01-14T11:13:00.003-09:00

I bought a new laptop a few months back. It shipped with Vista and I became so annoyed with it I had to do something. Turns out that Ubuntu supports all of the hardware on my laptop, even the embedded HP web cam was picked up.

I still need windows for some applications so I installed VMWARE server 2 on Ubuntu 8.04. I could not get that version of server to work reliably though between reboots and other application installs so I back revved to server 1.0.6. That worked perfectly.

I installed my XP Guest and began installing software. I have an IPOD touch and quickly found out that this was not going to work with Ubuntu. VMWARE server 1.0.6 doesn't support USB 2.0 so my XP Guest would blue screen when I attached the IPOD. Upon further research I found that VMWARE workstation 6.5 does support USB 2. I downloaded the bundel from VMWARE and the install went alot smoother than VMWARE server. There's even a nice GUI interface.

I ran into my bomgar installation issue again, this time the commands to get it working were a little different:

robert@SideJacked:/usr/lib$ ls libpng*
libpng12.so.0 libpng12.so.0.15.0
robert@SideJacked:/usr/lib$ sudo ln -s /usr/lib/libpng12.so.0 /usr/lib/libpng.so.3
robert@SideJacked:/usr/lib$ sudo ldconfig
robert@SideJacked:/usr/lib$ cd /home/robert/
robert@SideJacked:~$ sudo ./bomgar-rep-installer.desktop

I did start having trouble with my Wifi. My card is an AR5007. I found a tutorial here that seems to have fixed the issue:

http://my.opera.com/williamn/blog/2008/08/30/enabling-atheros-ar5007-based-wireless-on-ubuntu-8-04

I am still having trouble with some wpa networks where I don't recieve DHCP once authenticated. I am still working on resolving this, but it works at home at least and with WEP everywhere else.

I managed to get office 2007 installed through wine, but the word and excel fonts and interface looked garbled in some areas. I decied to just install office into my XP Guest and I use a samba share and a mapped drive to access my shared doc's and mp3's for itunes.

These links helped me with the Samba and original VMWARE server setup:

http://ubuntuforums.org/showthread.php?t=296668
http://ubuntuforums.org/showthread.php?t=183209&highlight=vmware

I wanted a one note replacement that I could run from my host, I found that the software Baset is a pretty good replacement.

For screenshots I am using the Compiz screenshot utiltiy which is working great.

Another issue I still need to resolve is pasting into remote desktop. I use Terminal Services to manage clients and connec to the office at work and this is still posing me a problem.

I also manage alot of Cisco devices. Ubuntu picked up my usb to serial adapter right away and I am able to connect with minicom. It's not Secure-CRT, but it will work for my purposes and the tabbed Terminal windows are a good replacement for my favorite Secure-CRT feature.

That's all I have for now. I am up and 95% operational with Ubuntu. It took 4 days to get here, but DAMN it feels good to have dumped Vista and my laptop is performing so much faster!

RapidSSL CA Impersonation

2008-12-30T10:48:00.001-09:00

If you can't break SSL, just impersonate...

http://www.washingtonpost.com/wp-dyn/content/story/2008/12/30/ST2008123001136.html

Atheros AR5007 & Ubuntu

2008-12-29T09:22:00.002-09:00

I found a link to get your wifi working on Ubuntu 8.04:

http://blog.linuxoss.com/2008/05/ubuntu-804-enabling-atheros-ar5007-based-wireless/

If this works I may finally do my full conversion and be Vista Free!

Successful Quantum Key Distribution - ie: the Unbreakable VPN

2008-12-23T08:18:00.002-09:00

Apparently since Quantum Particles are "aware" that you are observing them, that renders this system unbreakable. If they "sense" you eavesdropping, they abort.

http://w3.antd.nist.gov/qin/recordKey.shtml

Portable Hardware Network Sniffer

2008-11-26T11:51:00.002-09:00

They have all of those portable hardware based key loggers out there, why not something for network traffic? Something inconspicuous that you could just plug and let sit for a few days.

I'm searching around right now but haven't found much yet.

Here's a cool site where the guy makes his own Ethernet tap:

http://www.enigmacurry.com/articles/building-an-ethernet-tap/

Is your Voice Network Secure?

2008-11-25T16:47:00.002-09:00

VOIP Hopper allows you to spoof a Cisco phone and operate over the Voice VLAN. So if the voice network is allowing all traffic......

http://voiphopper.sourceforge.net/

Google Chrome UID

2008-11-21T19:24:00.002-09:00

Apparently Google Chrome builds a UID into the installation. Get rid of it with this utility: http://www.abelssoft.net/unchrome.php

My VMWARE ASA

2008-11-20T15:50:00.002-09:00

Anonymous Proxy Tool

2008-11-20T11:02:00.001-09:00

Charon is an Awesome tool for finding Anonymous Proxies to Connect to. It will also test them to verify that they are in fact anonymous.

http://www.project2025.com/charon.php

Mighty Seek, Security Podcast

2008-11-18T11:25:00.003-09:00

Here's a good security podcast that I found:

http://www.mightyseek.com/

Cisco ASA Emulation

2008-11-18T10:30:00.003-09:00

I downloaded an ASA VMWARE image from this site:

http://asa_project.gromnet.net/?p=51

It works great!

You add more interfaces to your ASA, just as if you were adding them to a VM. It was much easier to configure then Qemu was. E0, VMNET1, E1, VMNET2, ect...

All of the commands were there, the one thing is that you can't use ASDM with it yet.

Who needs that though?

I then bound the outside VMNET's to GNS3 clouds and walla, full blown WAN simulations running on my laptop, Sweet.

BackTrack 3 for VMWARE

2008-11-13T18:29:00.001-09:00

Has been posted as a virtual appliance on VMWARE's site. VM Tools have been installed.

http://vmware.com/appliances/directory/47794

Maximum VMDK Files sizes with ESX / VMFS

2008-10-14T08:53:00.003-08:00

ESX 3.5 supports up to 2 TB VMDK’s. But, you have to have VMFS formatted with the correct block size first. If you take the default then you are stuck with 256 GB VMDK’s

Block size Maximum disk capacity

1Mb 256Gb

2Mb 512Gb

4Mb 1 024Gb

8Mb 2 048Gb

http://www.applicationdelivery.co.uk/blog/leew/vmware-esx-3-maximum-storage-size-details-a-quick-reminder/

http://www.vmweekly.com/ask_an_expert/what-is-the-maximum-size-of-virtual-disk-on-vmfs-i-can-create/1/

Cisco SSL VPN and Remote Desktop Plugin

2008-10-13T14:51:00.005-08:00

I installed the Remote Desktop Plug in from Cisco today for an SSL VPN setup.

The Plug in works great, and the ASA version 8 for SSL VPN's is way better then its predecessors More intuitive and less buggy. There's also a plug in for VNC as well.

Download the plug in from Cisco's site and import it to your asa using this command:

 myASA#import webvpn plug-in protocol rdp tftp://10.10.10.5/rdp-plugin.jar

More instructions Here:

https://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c0603.shtml

Funny...

2008-10-08T16:33:00.001-08:00

Linquist Wedding First Dance

2008-10-06T17:45:00.000-08:00

VP Debate

2008-10-02T20:37:00.003-08:00

My boy and I watch the debates

MAKE A STATEMENT

2008-10-01T22:39:00.004-08:00

Please join me in making your voices heard!

I've sent the following letter to the local newspaper:

"Alaskans Need to Make a Statement

Senator Stevens voted in favor of the $700B Bailout bill this past Wednesday evening, despite unprecedented mass public opposition to this Bill that was expressed through thousands of letters, e-mails and faxes. Elected officials are in office for one reason and one reason only and that is to represent the views of their constituency. Please join me in making a statement to Senator Stevens and all other elected officials by voting against him in this coming election."

I've sent the following letter to Senators Stevens and Murkowski and Representative Young:

Senator Stevens and Senator Murkowski,

It is unfathomable to me that both of you voted in favor of the bailout. You were elected to represent the views of your constituents and you have blatantly ignored them. Senator Stevens I have taken your sign out of my yard and will be voting against you in this election. Senator Murkowski when you come up for reelection I will be voting against you as well and will donate time and money to your opposition. It is a grave day for democracy. I hope you both lose your offices so that future elected officials know the consequences of ignoring the electorate. I was under the impression you were both conservatives.

Representative Young,

I highly commend your opposition to this bill and your support for Alaskans. I will be voting for you in this election and for elections to come. I ask for your continued opposition to this bill if it comes to the house. You are a true supporter of Democracy and a true opponent against the socialization of America."

SENATE PASSES BAILOUT

2008-10-01T17:21:00.002-08:00

Throw the BUMS OUT!!! In spite of mass public dissatisfaction with the bill they passed it.

74 - 25

This has to be stopped at the House NOW!!! Email your REP!!! Call them, Fax them!!!

They are up for reelection and are more likely to be persuaded by public opinion. They've killed this bill once, let's kill it for GOOD NOW!!!

I'm Watching CSPAN coverage of the Senate Floor on the Bailout right Now....

2008-10-01T16:46:00.016-08:00

Live Updates of Senate Floor Bailout Vote as it happens!

"They became drunk on Greed and Now I believe they should foot the bill" - referring to Wallstreet

Senator Bernie Sanders - I - Vermont - Good Speech Against the Bailout!!! He also has a petition signed by 48,000 of his constituents. He's proposing an amendment that would put the cost of the bailout with the top 1.5% of Americans, the benefactors.

The amendment was just overwhelmingly opposed.

Pro Bailout Speech - "This is the kind of vote we were sent here by our people to cast"

Senator Mitch McConnell - R - Kentucky - Minority Leader

My Comments: No it's not, the people are still overwhelmingly opposed to this bill. You are confused sir.

Pro Bailout Speech - "We rejected the easy and chose the right..."

Senator Harry Reid - D - Nevada - Majority Leader

My Senators:

Senator Murkowski voted Yes

Senator Stevens voted Yes

Stevens I'm not voting for you Now this Election!

Votes so far:

Yes:74 No:25

More Updates as they happen....

FED Gives Congress the Middle Finger

2008-09-30T20:28:00.002-08:00

"Sept. 29 (Bloomberg) -- The Federal Reserve will pump an additional $630 billion into the global financial system, flooding banks with cash to alleviate the worst banking crisis since the Great Depression.

The Fed increased its existing currency swaps with foreign central banks by $330 billion to $620 billion to make more dollars available worldwide. The Term Auction Facility, the Fed's emergency loan program, will expand by $300 billion to $450 billion. The European Central Bank, the Bank of England and the Bank of Japan are among the participating authorities.

The Fed's expansion of liquidity, the biggest since credit markets seized up last year, came hours before the U.S. House of Representatives rejected a $700 billion bailout for the financial industry. The crisis is reverberating through the global economy, causing stocks to plunge and forcing European governments to rescue four banks over the past two days alone."

http://www.bloomberg.com/apps/news?pid=20601087&sid=a9MTZEgukPLY

It's official, the Senate is Voting Tommorow on the Bailouts

2008-09-30T20:01:00.003-08:00

Contact your senators at congress.org

http://www.reuters.com/article/vcCandidateFeed2/idUSSP36107820081001

Oh, and the house website has been essentially DDoS'd by everyone hitting it to write their rep's:

http://blog.wired.com/27bstroke6/2008/09/house-web-site.html

Another Expert Against the Bailouts

2008-09-30T19:02:00.000-08:00

No Bailouts Elephant Video Clip!!!

2008-09-30T12:00:00.002-08:00

Elephant Made the News!!!

2008-09-30T11:09:00.002-08:00

Here's the KTUU Web Link!!!

http://www.ktuu.com/Global/story.asp?S=9095695

Don't let the media scare you, Don't Buy the Hype

2008-09-30T01:25:00.005-08:00

It's started, the media will be bombarding everyone with Pro Bailout Spin. DON'T BUY IT!!!

I just flipped to CNN, Anderson Cooper is asking how the politicians that voted no could be so irresponsible, only worrying about reelection. Because they work for us Bozo!!! Get your news from other sources, it appears the media will be repeating the shameless blind support they exhibited when the Administration was convincing people to go to war in Iraq. Don't Forget!!!!

They will make the issue about "what failed" "what went wrong" instead of talking about the real issues of the bill and exploring both sides, they've sided with Wallstreet.

Nothing went wrong!!! Don't believe their hype,

http://www.americanthinker.com/blog/2008/09/no_bailout_necessary.html

http://www.afterdowningstreet.org/node/36424

http://journals.aol.com/skip3366/TheMaverickConservative/entries/2008/09/16/anderson-cooper-cnn-liar-and-idiot/4750

http://noquarterusa.net/blog/2008/09/29/a-perfect-example-of-media-bias/

http://michellemalkin.com/2008/09/24/kill-the-bailout-the-big-lies/

http://www.scoop.co.nz/stories/HL0809/S00329.htm

http://colorado.indymedia.org/node/1227

http://www.tvoneblogs.com/primary-colors/2008/09/do-you-need-a-government-bailout/

http://www.infowars.com/?p=4892

http://phillyimc.org/en/node/75309

http://www.niemanwatchdog.org/index.cfm?fuseaction=ask_this.view&askthisid=372

http://www.iranian.com/main/node/40363

No Bailout's Elephant Made the News!!!

2008-09-29T18:08:00.003-08:00

I'm going to try and get a copy of the video for the blog! It just played on the KTUU Channel 2 News hour.

Still Against the Bailout

2008-09-29T17:38:00.004-08:00

The house will be working on this bill again come Thursday. Call, e-mail, write and fax your representatives. This thing needs to stay squashed.

http://globaleconomicanalysis.blogspot.com/2008/09/how-voter-fury-stopped-bailout.html

http://globaleconomicanalysis.blogspot.com/2008/09/205-yes-228-no-we-won.html

http://globaleconomicanalysis.blogspot.com/2008/09/bailout-failed-whats-next.html

Another Ron Paul Video

2008-09-29T17:25:00.001-08:00

This one's from the floor today:

Bailouts Rejected!!!!!!!!!! 228 to 205!

2008-09-29T13:08:00.005-08:00

The Bailout failed to pass today 228 to 205. Sweet!!!

An Excellent Bailout Explanation Here:

http://www.cnn.com/2008/POLITICS/09/29/miron.bailout/index.html

House Rep's voting records here:

http://spreadsheets.google.com/ccc?hl=en&key=pApPz05jDYTSx21k2R1HNDQ

from http://www.stopthehousingbailout.com/

Ron Paul Rules

2008-09-28T23:36:00.001-08:00

My GOP, No Bailouts Elephant is on the roof!!!

2008-09-28T15:57:00.004-08:00

I moved my Elephant to the roof since we're putting up a fence in the front yard. You can see it from pretty far away now though!

Mad as Hell

2008-09-27T14:10:00.002-08:00

This applies so well today:

Symantec Backup Exec System Recovery Rules!!!

2008-09-27T12:57:00.003-08:00

I was recently faced with moving a healthy SBS server to new hardware. I didn't want to go through a painful SBS migration so I was toying with the idea of just doing a Physical to Virtual move and being done with it. Then I ran accross Symantec Backup Exec System Recovery. Symantec claimed that it could do physical to physical moves.

The server I was migrating from was a Windows SBS 2003 SP2 server. 32 bit HP hardware. I went to a Dell Poweredge 2900 III, 64 bit. The backup of my old, 70 GB system took 2 hours to an external usb drive. The restore took 1 hour. When all was said and done all I had to do was reactivate windows. No issues, no driver prompts, no insert this cd, ect. It even reconfigured one of my nic's to match the old HP's NIC configuration.

The program will also convert the server into a VMDK for you and it will do granular restores of files as well.

Check it out Here:

http://www.symantec.com/business/backup-exec-system-recovery-server-edition

I'm very impressed. It saved me a good amount of work.

Wall Street Contributions to Congress

2008-09-27T12:06:00.003-08:00

I found a blog post that outlines contributions made by Wall Street to members of congress:

http://rongstad.blogspot.com/2008/09/no-bailouts-under-any-conditions.html

The information from the link above was taken from this site:

http://www.opensecrets.org/

Tis the Season

2008-09-26T16:25:00.009-08:00

I ordered a 9 foot elephant from ebay.

Here's some more No Bailouts links:

http://globaleconomicanalysis.blogspot.com/2008/09/take-back-america.html

http://www.latimes.com/business/la-fi-voxpop26-2008sep26,0,3246836.story?track=rss

http://www.bloomberg.com/apps/news?pid=20601087&sid=aNKGD.bJwmRA&refer=home

http://www.onebigdog.net/stop-the-bail-out-now/

http://patrick.net/housing/contrib/nobailout.html

http://www.freerepublic.com/focus/f-news/2088761/posts

http://www.nobailout.org/do_something.php

http://www.washingtontimes.com/news/2008/sep/24/no-bailout/

http://www.votenobailout.org/

http://polipundit.com/index.php?p=20216

http://www.indybay.org/newsitems/2008/09/25/18541330.php

No to Bailouts!

2008-09-24T18:06:00.008-08:00

Normally this blog would be related to technology, security particularly, but this topic is just too important. Please read the links below, there are several petitions to sign. No to Socialism!!

http://nowallstreetbailout.com/why.php

http://sanders.senate.gov/petitions/?petition=financial_crisis_1

http://www.congress.org/congressorg/officials/congress/?district=01&lvl=C&azip=99501&state=AK

It's working!!!

http://www.nytimes.com/2008/09/25/business/25voices.html?_r=1&oref=slogin

http://www.stopthehousingbailout.com/

http://www.petitiononline.com/bailout/petition.html

http://www.petitiononline.com/Bailout/petition.html

http://blogmaverick.com/2008/09/22/700billion-bailout-ebay-it/

http://www.upi.com/Business_News/2007/11/19/Forecast_US_dollar_could_plunge_90_pct/UPI-48761195499806/

http://www.campaignforliberty.com/blog/?p=7

WTF

2008-09-24T17:56:00.000-08:00

Banking establishments are more dangerous than standing armies.
-Thomas Jefferson

A wise and frugal government, which shall leave men free to regulate their own pursuits of industry and improvement, and shall not take from the mouth of labor and bread it has earned - this is the sum of good government.
-Thomas Jefferson

I believe that banking institutions are more dangerous to our liberties than standing armies. If the American people ever allow private banks to control the issue of their currency, first by inflation, then by deflation, the banks and corporations that will grow up around [the banks] will deprive the people of all property until their children wake-up homeless on the continent their fathers conquered. The issuing power should be taken from the banks and restored to the people, to whom it properly belongs.
-Thomas Jefferson, Letter to the Secretary of the Treasury Albert Gallatin (1802)

We must not let our rulers load us with perpetual debt. We must make our election between economy and liberty or profusion and servitude. If we run into such debt, as that we must be taxed in our meat and in our drink, in our necessaries and our comforts, in our labors and our amusements, for our calling and our creeds…[we will] have no time to think, no means of calling our miss-managers to account but be glad to obtain subsistence by hiring ourselves to rivet their chains on the necks of our fellow-sufferers… And this is the tendency of all human governments. A departure from principle in one instance becomes a precedent for[ another]… till the bulk of society is reduced to be mere automatons of misery… And the fore-horse of this frightful team is public debt. Taxation follows that, and in its train wretchedness and oppression.
-Thomas Jefferson

Dumbass!

2008-09-23T10:18:00.003-08:00

A good illustration of why not to use real answers for your "security" questions, because any moron can get in with a little research! Did this guy actually think he wouldn't get caught from his apartment though?

ESXi & vmware converter

2008-09-23T10:03:00.002-08:00

ESXi supports using vmware converter for P to V moves:

"Can I run virtual machines created by Microsoft Virtual Server, Microsoft Virtual PC, VMware Server on VMware ESXi?
Yes. You can use the free VMware Converter to import virtual machines that were created using VMware Server, Microsoft Virtual Server, or Microsoft Virtual PC version 7 or higher. VMware Converter also supports conversions from sources such as physical machines and certain 3rd party disk image formats. View the VMware Converter FAQs for further details."

http://www.vmware.com/products/esxi/uses.html

I should be trying this in 2 months or so.

Sonic Wall Login

2008-09-23T09:04:00.003-08:00

When you Google the following Sonic Wall Version: 6.1.1.9685, you get about 6 login pages for different organizations Sonic Wall E-mail Security Logins. I'm sure this would work with other firmware versions as well......

CCIE & CCSP Studying

2008-08-11T14:24:00.003-08:00

I'm starting my studying for the CCIE Security Exam's. I've passed 2 tests toward the CCSP certification, so it makes sense to study for the CCIE Security at the same time. This blog will probably be mostly about that for awhile, resources, labs ect.

Here's my current library list for studying for these exam's, all books are from Cisco Press:

Cisco ASA, PIX and FWSM Firewall Handbook - Hucaby
The Complete Cisco VPN Configuration Guide - Deal
Security Threat Mitigation and Response: Understanding Cisco MARS - Tesch & Abelar
Intrusion Prevention Fundamentals - Carter & Hogue
Penetration Testing and Network Defense - Whitaker & Newman
Lan Switch Security: What Hackers Know About Your Switches - Vyncke
CCIE Professional Development: Network Security and Solutions - Bhaiji

Guest Wireless between an HP 1800 & Cisco Aironet 1240 AG

2008-07-30T07:17:00.003-08:00

Here's the configuration for the Cisco and the HP 1800. I haven't been impressed in the least with the 1800 switches, but it does do 802.1Q at least.

The examples illustrate a Production Network in VLAN 1 using WPA-PSK and a Guest Network on VLAN 2 using 40 bit WEP. The guest network has it's own firewall interface.

The AP is plugged into port 21 on the switch.

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname mywifi
!
enable secret 5 ##############33###3
!
no aaa new-model
ip domain name mydomain.lan
!
!
dot11 vlan-name Guest vlan 2
dot11 vlan-name Production vlan 1
!
dot11 ssid Guest
vlan 2
authentication open
no ids mfp client
!
dot11 ssid Production
vlan 1
authentication open
authentication key-management wpa
wpa-psk ascii 7 ###############
!
power inline negotiation prestandard source
!
!
username admin privilege 15 password 7 ###############
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 mode ciphers tkip
!
encryption vlan 2 key 1 size 40bit 7 ############# transmit-key
encryption vlan 2 mode wep mandatory
!
ssid Guest
!
ssid Production
!
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
!
encryption vlan 1 mode ciphers tkip
dfs band 3 block
channel dfs
station-role root
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
ip address 192.168.0.15 255.255.255.0
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
!
interface BVI1
ip address 192.168.0.15 255.255.255.0
no ip route-cache
!
ip http server
ip http authentication local
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
no cdp run
bridge 1 route ip
!
!
banner login
###########

!
line con 0
line vty 0 4
login local
!
end

Cisco IOS HTTP Vulnerabilities

2008-07-25T01:00:00.003-08:00

Today I used my installation of Backtrack 3 to perform 2 Cisco IOS exploits that are present with the HTTP server in IOS 11.1 - 12.1.

The router I ran the attacks against was a 1604 running IOS 12.0(3)T. I used the Metasploit 3 framework to execute the attacks.

I was alarmed at the results, one attack completely crashed the router while the other gave me the ability to circumvent the authentication portion of the web server before running commands against it.

The screen shots above illustrate the success of these attacks.

China Disaster SPAM

2008-06-26T18:07:00.005-08:00

I rarely get SPAM in my G-mail inbox but recently some has managed to slip in. They contain messages about disasters in China. Apparently if you click the link inside it will take you to a website that attempts to install a Trojan Horse on your Windows based PC.

Stay Smart Online Lists some other common messages that have been seen:

A new deadly catastrophe in China
A new massive quake struck China
A new powerful disaster in China
China is paralyzed by new earthquake
China's most deadly earthquake
Chinese government keeps back the real number of earthquake victims
Countless victims of earthquake in China
Deadly catastrophe in Chinese capital
Deadly earthquake shook China again
Death toll in China exceeds 1000000
Death toll in China is growing
Dozens killed in China earthquake
Earth tremors in China is going on
Great Wall of China damaged by earthquake
Million dead in Chinese quake
Recent china earthquake kills million
The capital of China were collapsed by earthquake
The list of Chinese victims is growing
The most powerful quake hits China
Toll mounts in China earthquake
Unprecedented earthquake in China

Installing Dell Open Manage on VMWARE ESX Server

2008-06-09T11:46:00.000-08:00

Here is a link with a good matrix for supported versions of the Dell Open Manage Software to VMWARE ESX Version and Dell Server Hardware Platform. It also contains instructions for installing and accessing Dell OPen Manage on the Various Platforms.

DHCP Server Freeware

2008-06-09T11:22:00.003-08:00

Here's a link to a free DHCP Server you can run on Win XP. This can come in handy if you need to setup a device such as an Aironet Access Point that needs an IP for the initial configuration.

Create Bootable BackTrack CD

2008-06-04T19:12:00.003-08:00

So I downloaded the BackTrack 3 Beta From: http://www.remote-exploit.org/backtrack_download.html

The file I downloaded was the extended USB version which is a little short of 1 GB. I wanted to create a Bootable CD but ran into a few issues with the files included in the download.

I found some instructions here and then edited them to work with Beta 3:
http://forums.remote-exploit.org/archive/index.php/t-8112.html

Do the following to make a working ISO in Windows XP that you can burn or mount to a VM:

Once you get the file downloaded extract the RAR to c:\backtrack\
Go To c:\backtrack3\bt3\ and edit the make_iso.exe file

Replace all of the text inside with the following and save:

@ECHO OFF

REM ----------------------------------------------------
REM Batch file to create bootable ISO in Windows
REM usage: make_iso.bat c:\new-slax.iso
REM author: Tomas M.
REM ----------------------------------------------------

if "%1"=="" goto error1
cd ..
set CDLABEL=SLAX

REM slax\tools\WIN\mkisofs.exe @slax\tools\WIN\config -o "%1" -A "%CDLABEL%" -V "%CDLABEL%" .

REM edited for BackTrack3
bt3\tools\WIN\mkisofs.exe @bt3\tools\WIN\config -o "%1" -A "%CDLABEL%" -V "%CDLABEL%" .
goto theend

:error1
echo A parameter is required - target ISO file.
echo Example: %0 c:\target.iso
goto theend

:error2
echo Can't recreate isolinux.bin, make sure your current directory is writable!
goto theend

:theend
echo.
echo New ISO should be created now.
pause

Now go to C:\backtrack\BT3\tools\WIN and edit the config file

Replace the contents with this and save:

-v
-J
-R
-D
-no-emul-boot
-boot-info-table
-boot-load-size 4
-b "boot/isolinux/isolinux.bin"
-c "boot/isolinux/isolinux.boot"

Now open a command prompt:

C:\backtrack\BT3>make_iso.bat c:\backtrack.iso

And You're Ready to Roll

Video in Powerpoint Presentation Projection

2008-06-04T09:23:00.002-08:00

My soon to be wife was having an issue with a Powerpoint presentation at work. She had an embedded video that would play on her laptop but not through the projector onto a screen, it would only show up as a black window.

A quick google search turned up an answer.

If you turn down the hardware acceleration on advanced properties of you display settings in XP for your card then it should work, and it did.

Goodbye Ubuntu!

2008-06-04T09:12:00.005-08:00

I had to put XP back on my laptop. I really liked Ubuntu, but wireless is a must have and I don't have the time to continually wrestle with my card.

I will be installing and evaluating BackTrack, a security/auditing/penetration testing distribution, inside of a vmware session.

I'll be posting comments and tips as I go through the evaluation.

View .CHM on Ubuntu

2008-06-01T22:29:00.002-08:00

I downloaded a bunch of books of the net but they were all in .chm format, Microsoft Compiled HTML Help Files.

To View these on Ubuntu you can install and use GNOCHM Viewer.

robert@ubuntu:~/Desktop$ sudo apt-get install gnochm

Ubuntu libpng.so.3

2008-05-28T10:31:00.003-08:00

I tried to install bomgar, a remote access/Desktop Support application, onto Ubuntu 8.04.
While running the install I received an error about a missing package, libpng.so.3.

I was able to fix this error by linking libpng.so.3 to libpng.so

robert@ubuntu:/tmp/bomgar$ sudo ln -s /usr/lib/libpng.so /usr/lib/libpng.so.3
robert@ubuntu:/tmp/bomgar$ sudo ldconfig

After this I ran the install again and bomgar successfully installed. I believe you can use this fix with other applications that produce a similar error.

SideJacked

Great ESX command

SnapDrive 6.2 & Windows 2008 R2 Issue

NDMP NetApp backup issue

NCDA

SMVI Snapshot fails on RDM LUNS

SnapManager for Exchange fails to create disk

NetApp dedupe

Frame Relay command

Frame Relay MultiLink on GNS3 and CCIE study update

Routing TCP/IP

OSPF Priorities

CCIE Study Progress

SecureCRT GNS3 and Windows 7 Console Issue

CCIE

How to Import Mail from Mac Mail into Outlook 2003/2007

Removing GFI EndPointSecurity 3.0 Agent

Cisco SSL VPN's and DFS

Dell PowerConnect 6200 Stack, Updated!

Example

***Updated*** Dell PowerConnect 6200 Stack

Symantec Endpoint Protection Migration and Deployment Wizard SBS 2008

SQL Server 2008 Setup requires Microsoft .Net framework 3.5 to be installed

802.3ad MultiMode Dynamic VIF and an HP Procurve Switch

Backup Exec System Recovery, Can't Map Drive to Restore Server

Hyper-V no VHD Mount?

Free Wifi Survey Tool

Cisco Aironet 1252 AP and N Data rates

Cisco Aironet 1252 and IPHONE Wireless Not Working

Cisco AP, Microsoft IAS, PEAP Issues

New Cisco 1252 AP's

Hailing in Anchorage

Passed Wireless# !!!

Backing Up Exchange 2007 on Windows 2008 with Backup Exec 12.5

SSLStrip

Home Wireless Video Phone where are you?

Hide Ubuntu Panels with Shortcut!

You can rename a Windows 2008 Domain, Unless you have Exchange

Unconnected Sockets not implemented

Terminal Services 2008 Gateway, No Change Password?

Symantec Mail Security failed to enable asp.net web extensions

Cisco IPS

Cisco IPS - VMWARE

Passed SNRS

Ubuntu, Web Cam works out of the box with aMSN

Back to Ubuntu

RapidSSL CA Impersonation

Atheros AR5007 & Ubuntu

Successful Quantum Key Distribution - ie: the Unbreakable VPN

Portable Hardware Network Sniffer

Is your Voice Network Secure?

Google Chrome UID

My VMWARE ASA

Anonymous Proxy Tool

Mighty Seek, Security Podcast

Cisco ASA Emulation

BackTrack 3 for VMWARE

Maximum VMDK Files sizes with ESX / VMFS

Cisco SSL VPN and Remote Desktop Plugin

Funny...

Linquist Wedding First Dance

VP Debate

MAKE A STATEMENT

SENATE PASSES BAILOUT

I'm Watching CSPAN coverage of the Senate Floor on the Bailout right Now....

FED Gives Congress the Middle Finger

It's official, the Senate is Voting Tommorow on the Bailouts

Another Expert Against the Bailouts

No Bailouts Elephant Video Clip!!!

Elephant Made the News!!!

Don't let the media scare you, Don't Buy the Hype

No Bailout's Elephant Made the News!!!

Still Against the Bailout

Another Ron Paul Video

Bailouts Rejected!!!!!!!!!! 228 to 205!

Ron Paul Rules

My GOP, No Bailouts Elephant is on the roof!!!

Mad as Hell

Symantec Backup Exec System Recovery Rules!!!

Wall Street Contributions to Congress

Updated Dell PowerConnect 6200 Stack