Configuration Example, Security

Configure VPN client on IOS router

René Jorissen on February 10, 2010 9 Comments • Tags: #access #cisco #client #configure #ios #remote #router #split #split-tunneling #tunneling #vpn

One way to remotely access a network is using the Cisco VPN client. Nowadays more and more implementations of SSL VPN are being done and Cisco stopped their development on their VPN client and pushes their Cisco AnyConnect client. Still the Cisco VPN client is often used to remotely gain access to a network. The … Read More

Configuration Example

Simply back to startup-config

René Jorissen on February 10, 2010 0 Comments • Tags: #configure #nvram:startup-config #replace

There are multiple ways to get back from the running-configuration to the startup-configuration on a Cisco router. One of the simplest ways is just rebooting the router, but this takes a couple of minutes. You can also issue a copy startup-config running-config, but that doesn’t actually replace the configuration, but merges both together. A very … Read More

Configuration Example, Security

MAB and MDA in an IP Phone environment

René Jorissen on February 5, 2010 26 Comments • Tags: #5330 #authenticate #bypass #cdp #cisco-av-pair #device-traffic-classvoice #domain #host-mode #lldp #mab #mac #mda #mitel #multi-domain #multiple #phone #radius #vsa

I blogged before about the MAC Authentication Bypass (MAB) feature in network environments. MAC Authentication Bypass can be used to secure the wired network by verifying MAC addresses to a central database. By using a radius server, like Microsoft IAS or FreeRadius, you can also redirect verified MAC addresses to a specific VLAN. Lately I … Read More

Switching

Cisco error message: %SYS-2-MALLOCFAIL

René Jorissen on February 1, 2010 1 Comment • Tags: #sys-2-mallocfail #allocation #failure #leak #leakage #memory

While looking through some logging on a switch (Cisco Catalyst 3550), I noticed the following messages popping up multiple times in the buffer logging. -Process= "Pool Manager", ipl= 0, pid= 5 -Traceback= 1A57D0 1A6DF4 161B3C 1B2BF0 1B2E38 1C6440 Jan 26 14:45:48.970 CET: %SYS-2-MALLOCFAIL: Memory allocation of 1680 bytes failed from 0x161B38, alignment 0 Pool: I/O  … Read More

IPSec / SSL VPN

Upgrade Juniper SA cluster

René Jorissen on January 26, 2010 0 Comments • Tags: #active #activepassive #activestandby #cluster #howto #ive #juniper #mag #passive #sa #standby #upgrade

Add On: This procedure also works for the new Juniper MAG appliances. But keep in mind during the upgrade of the second host (and also the first): BE PATIENT!! A Juniper SA cluster can be configured as active/active or active/standby cluster. An active/active cluster uses an external load balancer or DNS round-robin to enable load-sharing … Read More

Configuration Example

Cisco router: determine amount of memory/flash

René Jorissen on January 22, 2010 2 Comments • Tags: #cisco #determine #dram #flash #memory #retrieve #router

Somebody asked me how he could determine the amount of DRAM and flash memory on a Cisco router. I always thought that everybody would know how to determine this information, but since this isn’t matter, I will tell you how you can determine the values. You use the show version command to retrieve the requested … Read More