Wednesday, 3 April 2013

Uninstalling Symantec Endpoint Protection without the uninstall password

First, go ahead and uninstall Symantec Endpoint Protection via the Add/Remove Programs. When the Uninstall password box comes up, right click on your task bar and open “Task Manager”. Go to the processes tab and look for msiexec.exe. There is probably more than one of them – one of them is for the password box. Just go ahead and pick one, and hopefully it will be for the password box (if not just restart the uninstall process). Once you kill the password box, the uninstall will continue as normal.

Of course, one wonders how “secure” the uninstall password really is since it can be “hacked” so easily.

Monday, 25 March 2013

How to create a ad-hoc network

Many times we need to connect two or more computers may be for gaming purposes or public data transfers for that we need a adhoc network i.e. the computer to computer network.

For creating a ad-hoc network simply follow the steps below:

1 Open network and sharing center in you computer.
2.click on set up a new connection or network.



3. now choose set up a wireless ad hoc network.
4. give a name to your network, and password if you want.
5. your ad-hoc is ready , and starts waiting for other users to connect.

Thursday, 21 March 2013

How to upgrade the IOS version in CISO switch/Router

Let's say we have one CISCO 2950 switch having IOS version

"c2950-i6q4l2-mz.121-22.EA4.bin"


Step 1
======

Upload the updated IOS image file on TFTP server

In our case we have upload the IOS image "c2950-i6q4l2-mz.121-22.EA8.bin" on our TFTP server.


Step 2
======

Establish the connectivity between TFTP server and your Switch.

In our case switch IP is 192.168.1.2  and TFTP server IP is 192.168.1.100


Step 3
======

Take the access of switch

switch>en
switch#copy tftp: flash:
Address or name of remote host []? 192.168.1.100
Source filename []? c2950-i6q4l2-mz.121-22.EA8.bin
Destination filename [c2950-i6q4l2-mz.121-22.EA8.bin]?

Accessing tftp://192.168.1.100/c2950-i6q4l2-mz.121-22.EA8.bin...
Loading c2950-i6q4l2-mz.121-22.EA8.bin from 192.168.1.100: !!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 3117390 bytes]

3117390 bytes copied in 1.892 secs (1647669 bytes/sec)
Switch#


Step 4
======

Now check weather your new IOS image is uploaded in flash memory or not?

switch#sh flash
Directory of flash:/

    1  -rw-     3058048          <no date>  c2950-i6q4l2-mz.121-22.EA4.bin
    2  -rw-     3117390          <no date>  c2950-i6q4l2-mz.121-22.EA8.bin

64016384 bytes total (57840946 bytes free)
Switch#


Step 5
======

Configure switch to boot with new IPS image next time

Switch#
Switch#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#boot system c2950-i6q4l2-mz.121-22.EA8.bin
Switch(config)#^Z
Switch#
%SYS-5-CONFIG_I: Configured from console by console

Switch#


Step 6
======

Reboot the switch and confirm that weather switch is booting from new image or still with old image?

Switch#reload
Proceed with reload? [confirm]
%SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.
yC2950 Boot Loader (C2950-HBOOT-M) Version 12.1(11r)EA1, RELEASE SOFTWARE (fc1)
Compiled Mon 22-Jul-02 18:57 by miwang
Cisco WS-C2950-24 (RC32300) processor (revision C0) with 21039K bytes of memory.
2950-24 starting...
Base ethernet MAC Address: 0001.9654.2413
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 2 files, 0 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 64016384
flashfs[0]: Bytes used: 6175438
flashfs[0]: Bytes available: 57840946
flashfs[0]: flashfs fsck took 1 seconds.
...done Initializing Flash.

Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4


Loading "flash:/c2950-i6q4l2-mz.121-22.EA8.bin"...
########################################################################## [OK]
              Restricted Rights Legend



That's it.........

Friday, 8 March 2013

How to Break CISCO Router Password

Step 1
======

Reboot  the router.

At the time of rebooting press Ctrl + Break keys
                                             
Step 2
======

rommon 1 >confreg 0x2142
rommon 2 >reset



Step 3
======

Now router will skip the startup-confg file and reload without the password

Now you can change the password of your  router  from below commands


Change Console Password
=======================

router>en
router#conf t
router(config)#line console 0
router(config-line)#password CCNA
router(config-line)#login
router(config-line)#exit
router(config)#



Change enable mode Password
===========================
router>en
router#conf t
router(config)#enable secret CCNA



Step 4
======

Save the running-config into startup-config

router#copy running-config startup-config


Step 5
=======

Again change the configuration register value.

router#conf t
router(config)#config-register 0x2102
router(config)#exit
router#reload



That's it.

Friday, 1 March 2013

How to configure SSH access in CISCO devices

Run the below mention commands on your CISCO device.

Router>enable
Router#conf t
Router(config)#line vty 0 4
Router(config-line)#transport input ssh
Router(config-line)#exit
Router(config)#ip domain-name ms.com
Router(config)#crypto key generate rsa
Router(config)#

(Note: we assume that we have already created user account in CISCO device. And you can chose different domain name in your configuration instead of ms.com)

How to configure Static IP in Linux

With the below commands you can configure the Static IP address in a Linux machine.

Configure IP address and Subnetmask:

#sudo ifconfig eth0 192.168.1.2 netmask 255.255.255.0

Configure Default Gateway/Router:

#sudo route add default gw 192.168.1.2

Configure DNS addresses:

Under Linux / UNIX / BSD operating system, you need to edit the /etc/resolv.conf file and add the line:

#vi /etc/resolv.conf

Modify or enter nameserver as follows:

nameserver 4.2.2.2
nameserver 4.2.2.1


(Note in your network you should  use your ISP or your local DNS server addresses instead of 4.2.2.2 and 4.2.2.1)

Wednesday, 27 February 2013

How to create User Name in CISCO Devices

Create User Name and Unencrypted Password

Router>enable
Router#conf t
Router(config)#username admin password cisco
Router(config)#exit
Router#wr
Router#show running-config
Building configuration...

Current configuration : 508 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
!
!
!
!
username admin password 0 cisco
!
!
!
 --More-- 

Here your password is saved in clear text in your configuration file which is not a safer way to save password in your configuration file.


Create User Name and encrypted Password

Router>enable
Router#conf t
Router(config)#username admin secret cisco
Router(config)#exit
Router#wr
Router#show running-config
Building configuration...

Current configuration : 531 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
!
!
!
!
username admin secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0
!
!
!
 --More--

Here your password is saved in encrypted form in your configuration file which is a safer way to save password in your configuration file.

Sunday, 24 February 2013

How to configure DHCP server on CISCO Router

 Below are the commands to configure the DHCP server on your CISCO router.


Router>en
Router#conf t
Router(config)#interface fa 0/0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#ip dhcp pool MSLAB
Router(hdcp-config)#network 192.168.1.0 255.255.255.0
Router(hdcp-config)#default-router 192.168.1.1
Router(hdcp-config)#dns-server 4.2.2.2
Router(hdcp-config)#exit
Router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.5
Router(config)#

Note: In the above configuration we exclude the range of IP address 192.168.1.1 to 192.168.1.5 for the DHCP pool. And MSLAB is our DHCP pool name you can use the different name in your configuration. We use the 4.2.2.2 DNS server just for testing purpose you can configure your live DNS server in your real configuration.

Tuesday, 19 February 2013

How to Create NAT Rule on Router for Access the Internet

Before we get started, take a look at Figure A, this offers an illustration of what our example network looks like.

Figure A

If you're wondering why using NAT is necessary, it's because we choose the IP address scheme for the LAN from the blocks of private IP addresses. Because these IP addresses aren't usable on the Internet, we must translate these IP addresses into a real Internet IP address, such as one provided by an ISP.

So, we'll use NAT to provide the IP address translation from our LAN to our WAN. While most consumer-based routers refer to NAT as a ubiquitous term, there are a few different kinds of NAT, including static NAT, pooled NAT, and NAT overload (also called port address translation, or PAT).

Consumer-based routers typically use NAT overload, which is what we'll use for this example. NAT overload involves using a single Internet IP address and multiple inside IP addresses.

Let's look at the step-by-step process for configuring NAT overload. The router needs to be in Global Configuration Mode, and the prompt should look like this: Router(config)#

Create a pool of Internet IP addresses

For this example, we're going to overload a single Internet IP address. Since this is the only IP address we have, we'll create a pool with only one IP address in it.


Router(config)# ip nat pool mypool 1.1.1.1 1.1.1.1 prefix 30

Create an access list

Next, we must determine who the router allows to use NAT to access the Internet using our NAT pool, which we can accomplish by creating an access list. For this example, we'll allow the entire internal network to use NAT to access the Internet.


Router(config)# access-list 1 permit 192.168.1.0 0.0.0.255
 
 

Create the NAT source list

Now, we must connect the pool and the list of users. We can accomplish this by telling the router that we want to use NAT from the inside (using the access list to define our possible source IP addresses) and go to the outside using the pool that contains our single Internet IP address. In addition, we want to overload this single Internet IP address using PAT.

Router(config)# ip nat inside source list 1 pool mypool overload
 
 

Define the inside and the outside NAT interfaces


Next, we need to tell the router which interface is the inside and which is the outside.
Router(config)# interface ethernet 0/0
Router(config-if)# ip nat inside
Router(config-if)# exit
Router(config)# interface serial 0/0
Router(config-if)# ip nat outside
Router(config-if)# exit 

That's it.
 

Monday, 7 January 2013

Route Precedence

Few days back one of my friend ask me, if we have three routes

10.10.10.0/24 via bgp
10.10.10.0/24 via ospf
10.10.0.0/16 via eigrp

which route will take for 10.10.10.1??

Then I start searching  the  answers on net and luckily find a solution.  

Now the basic funda is,

Route selection precedence is as follows

1. Most Specific route
2. AD value
3. Metric


Now here most specific routes are

10.10.10.0/24 via bgp
10.10.10.0/24 via ospf

Now AD value will come in the picture as tie breaker....

Take a look at the following Table for AD values

Default Administrative Distances
Connected 0
Static 1
eBGP 20
EIGRP (internal) 90
IGRP 100
OSPF 110
IS-IS 115
RIP 120
EIGRP (external) 170
iBGP 200
EIGRP summary route 5


Now the Answer is a question, Which BGP route was that, EBGP or IBGP??

If it is IBGP (AD value: 200), OSPF routes will get precedence…. Else it gonna take BGP routes (AD Value: 20)