journey to CCNA VOICE - 2 - building the home lab

Remember my goal is to build the jeremy cioara home lab.

I bought the CISCO 2801 on craigslist for $900.00 from MARK in California. The cisco 2801 will be my CME - (Cisco CallManager Express).

I will be using my old cisco 2610 as DHCP server.

My friend Heath has donated 2 phones ( a cisco 7941G and cisco 7911). I will be using also the CISCO CIPC installed on my laptop as my 3rd phone.

I will be using the cisco switch 2950 as switchA (see cioara book - page 76).
so, stay tune for the configuration.

Also, I ordered from ebay for $70.00 the Cisco Switch 3524 (POE)- But I am sending the unit back for reimbursement. This switch doesn't work. so, meanwhile, I am going to use my cisco ASA 5505 that has 2 poe ports to connect both phones.


So, Right now, My lab will be little be different from CIOARA lab until I get the CISCO SWITCH 3524.

Here is my top.




here is the spec of the router :

CME#sh version
Cisco IOS Software, 2801 Software (C2801-ADVENTERPRISEK9-M), Version 12.4(15)T1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Wed 18-Jul-07 07:03 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)T9, RELEASE SOFTWARE (fc1)

CME uptime is 18 hours, 49 minutes
System returned to ROM by reload at 14:42:20 pacific Thu Dec 25 2008
System restarted at 14:44:03 pacific Thu Dec 25 2008
System image file is "flash:c2801-adventerprisek9-mz.124-15.t1.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

--More-- A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 2801 (revision 6.0) with 179200K/17408K bytes of memory.
Processor board ID FHK1044F2QH
2 FastEthernet interfaces
1 Virtual Private Network (VPN) Module
2 Voice FXO interfaces
2 Voice FXS interfaces
1 DSP, 8 Voice resources
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
62720K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102

CME#

Journey to CCNA voice - 1

I am going to blog my journey to CCNA VOICE. I believe I can pass this exam my march 2009.

Background: I am a MCSA, CCNA (routing and switching) and I have no experience with VOICE OR TELECOM).

Study plan :

I am going to be using JEREMY CIOARA, CCIE # 11727 as my lead instructor. I bought his VIDEO BOOTCAMP training cd (CBTNUGGETS) and his book (CCNA VOICE, THE OFFICIAL exam certification guide).

I am also going to build a VOICE HOME LAB identical to the one JEREMY use in the bootcamp training (see page 63 in his book)


So, please stay tune.

How to configure the ASA 5500 for port forwarding

I have the CISCO ASA 5505 with the base license and I would like to telnet to my access-server from starbuxx.

Yes, I know, I should ssh or vpn to the access-server instead of use the insecure telnet. But I have to study for my CCNA VOICE today and accessing my VOICE LAB is more important than security.

I am going to setup the VPN server this weekend and post the result.

My access-server IP address is : 192.168.3.201 and is located in the inside vlan 2.

Here are the command I entered to have access to telnet to my internal access-server.

static (inside,outside) tcp interface telnet 192.168.3.201 telnet netmask 255.255.255.255

access-list outside_access_in extended permit tcp any any eq telnet
access-group outside_access_in in interface outside


Now, I can use putty to telnet to my access-server.

BRAVO to me.

Please contact me if you have any problem with port forwarding with cisco ASA .

tititech@#gmail.com



My cisco asa :
Licensed features for this platform:
Maximum Physical Interfaces : 8
VLANs : 3, DMZ Restricted
Inside Hosts : 10
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Enabled
VPN Peers : 10
WebVPN Peers : 2
Dual ISPs : Disabled
VLAN Trunk Ports : 0
Advanced Endpoint Assessment : Disabled

How to recovery the administrator password in windows vista

Whaooo, I am happy today. I was able to recover a windows vista admin password.

My customer brought a laptop Gateway with windows vista- The administrator account was disabled and the only user admin account "bert" has a strong password. So, I called bert to ask for the password. But bert couldn't remember his password-

So, I have in front of me a windows vista laptop with no way to access it.


Here is what I did to recover the lost password.

1 - download trinity Rescue kit iso file.

2- burn the iso file using ISO RECORDER V3

3- boot the computer from the new trinity CD.

4- choose the default setting (the first one)

5- at the prompt,type winpass -u bert

6- choose option 1 for clear password

7- remove the cd

8- reboot the computer

and voila! bert user has a blank password and I have 100% access to the system


Thanks a lot to the techs a trinity rescue. I am going to send them a paypal donation today. They made my job easy.

CONFIGURE CISCO ASA AS A SSH SERVER

Here are the step

1) username congo password brazzaville


2) passwd pointenoire


3) ssh x.x.x.x x.x.x.x {inside/outside}
Example : conf t
ssh 0.0.0.0 0.0.0.0 outside (I want to accept the ssh connection from any external ip - It means, I will be able to access my ssh server from anywhere in the world)

if I just want to access from a specific place like my central office, I will type :
ssh 72.142.124.25 255.255.255.248 (72.142.124.25 being my central office IP address)



4) crypto key generate rsa modulus 1024

5) aaa authentication ssh console LOCAL

How to capture text, backup configuration WITH PUTTY

It is so easy to capture your configuration file with putty.

Here is what you need to do:

1- launch putty and connect to your cisco router

2- Enter the user exec mode (router> enable)

3- Issue the terminal length 0 command (router# terminal length 0) in order to force the router to return the entire response at once, rather than one screen at a time.
This allows you to capture the configuration without extraneous −−more−− prompts generated when the router responds one screen at a time.

4- Right-click on the menubar (of the putty screen) and select "change Settings"

5- Click logging under Session, select "Log all session output"

6- choose the location and name of the file (I like to place my conf on my desktop)

7- clic apply

8- issue the show run command (router# show run)

loggout and see the output on your desktop (or the location you chose).


I will post the video very soon.

switchport port-security sticky

So, for example, to allow two MAC Addresses (1111.1111.1111 and 2222.2222.2222) at FastEthernet 0/6 (configured as an access-port), and, if any violation to that rule occurs, the port should be placed in ERRDISABLE state, recovering itself after 1hour without any intervation. The MAC Address MUST appear in the running-configuration.

How can we solve that!? Not that difficult, right!? Here´s the answer:

conf t
!
errdisable recovery cause psecure-violation
errdisable recovery interval 3600
!
interface fastethernet 0/6
switchport mode access
switchport port-security violation shutdown
switchport port-security maximum 2
switchport port-security mac-address sticky 1111.1111.1111
switchport port-security mac-address sticky 2222.2222.2222
exit







source :
http://cauew.blogspot.com/2008/09/switchport-port-security-what-we-must.html