Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
cisco [2009/05/25 00:35] 127.0.0.1 external edit |
cisco [2013/09/07 09:45] zagi |
||
---|---|---|---|
Line 55: | Line 55: | ||
login | login | ||
password xxx | password xxx | ||
+ | | ||
+ | | ||
+ | === Corrupt/ | ||
+ | |||
+ | * set BAUD 115200 | ||
+ | * upload vix Xmodem | ||
+ | |||
+ | ==== Cisco security tips ==== | ||
+ | **Disable: | ||
+ | |||
+ | * BOOTP server | ||
+ | * Cisco Discovery Protocol (CDP) | ||
+ | * HTTP Configuration and Monitoring | ||
+ | * Domain Name System (DNS) | ||
+ | * Packet Assembler / Disassembler (PAD) | ||
+ | * Internet Control Message Protocol (ICMP) Redirects | ||
+ | * IP Source Routing | ||
+ | * Finger Service | ||
+ | * Proxy ARP | ||
+ | * IP Directed Broadcast | ||
- | ==== Cisco tips ==== | + | ==== Cisco config |
** Cisco PIX *** | ** Cisco PIX *** | ||
Line 220: | Line 240: | ||
neighbor 145.2.2.2 remove-private-AS | neighbor 145.2.2.2 remove-private-AS | ||
- | **DHCP** | + | ==DHCP== |
+ | ip dhcp excluded-address 192.168.10.1 | ||
ip dhcp pool my.lan | ip dhcp pool my.lan | ||
| | ||
Line 227: | Line 247: | ||
| | ||
| | ||
+ | lease 14 0 | ||
**OSPF** | **OSPF** | ||
Line 239: | Line 260: | ||
| | ||
| | ||
+ | |||
+ | == ACL renumbering == | ||
+ | |||
+ | Router(config)# | ||
+ | |||
+ | == vlan up/ | ||
+ | |||
+ | no autostate | ||
+ | no keepalive | ||
+ | |||
+ | == Wireless == | ||
+ | dot11 ssid TEST1 | ||
+ | mbssid guest-mode | ||
+ | |||
+ | dot11 ssid TEST2 | ||
+ | mbssid guest-mode | ||
+ | |||
+ | Then you have to enable mbssid globally on your radio-interface: | ||
+ | |||
+ | interface Dot11Radio0 | ||
+ | mbssid | ||
+ | ssid TEST1 | ||
+ | ssid TEST2 | ||
+ | | ||
+ | interface Dot11Radio1 | ||
+ | mbssid | ||
+ | ssid TEST1 | ||
+ | ssid TEST2 |