Literatura:
- Cisco Configuring Port ACLs and VLAN ACLs
- Securing Networks with Private VLANs and VLAN Access Control List
interface fa0
ip ddns update hostname example.dyndns.org
ip ddns update example_dyndns
!
ip ddns update method example_dyndns
HTTP
add https://username:password@members.dyndns.org/nic/update?system=dyndns&hostname=<h>&myip=<a href="">
interval maximum 28 0 0 0
interval minimum 28 0 0 0
!
crypto pki trustpoint example
revocation check none
enroll term pem
!
crypto pki certificate chain example
certificate ca 35DEF4CF
30820320 30820289 A0030201 02020435 DEF4CF30 0D06092A 864886F7 0D010105
0500304E 310B3009 06035504 06130255 53311030 0E060355 040A1307 45717569
...
2AA72349 01048642 7BFCEE7F A21652B5 6767D340 DB3B2658 B228773D AE147761
D6FA2A66 27A00DFA A7735CEA 70F19421 65445FFA FCEF2968 A9A28779 EF79EF4F
AC077738
quit
Switch# traceroute mac ip 2.2.66.66 2.2.22.22 detail
Translating IP to mac .....
2.2.66.66 => 0000.0201.0601
2.2.22.22 => 0000.0201.0201
Source 0000.0201.0601 found on con6[WS-C2950G-24-EI] (2.2.6.6)
con6 / WS-C560-12T / 2.2.6.6 :
Gi0/1 [auto, auto] => Gi0/3 [auto, auto]
con5 / WS-C2950G-24-EI / 2.2.5.5 :
Fa0/3 [auto, auto] => Gi0/1 [auto, auto]
con1 / WS-C3550-12G / 2.2.1.1 :
Gi0/1 [auto, auto] => Gi0/2 [auto, auto]
con2 / WS-C3550-24 / 2.2.2.2 :
Gi0/2 [auto, auto] => Fa0/1 [auto, auto]
Destination 0000.0201.0201 found on con2[WS-C3550-24] (2.2.2.2)
Layer 2 trace completed.
The Cisco Nexus™ 1000V virtual machine access switch is an intelligent software switch implementation for VMware ESX environments. Running inside of the VMware ESX hypervisor, the Cisco Nexus 1000V supports Cisco® VN-Link server virtualization technology.
This document describes how to recover a lost or unknown password on a Catalyst 4500/4000 switch with a Supervisor Engine II-Plus (WS-X4013+), Supervisor Engine II-Plus-TS (WS-X4013+TS), Supervisor Engine II-Plus-10GE (WS-X4013+10GE), Supervisor Engine III (WS-X4014), Supervisor Engine IV (WS-X4515), Supervisor Engine V (WS-X4516), Supervisor Engine V-10GE (WS-X4516-10GE) module, Cisco Catalyst 4948, Cisco Catalyst 4948 10GE, and Cisco Catalyst 4900M switches.
Note: In Catalyst 4500/4000 Series Switches, Supervisor Engines II+, II+10GE, II+TS, III, IV, V, and V-10GE support only Cisco IOS® Software and Supervisor Engines I and II support only the Catalyst OS Software. In order to recover the password on the Supervisor Engines I or II, refer to Password Recovery Procedure for the Catalyst 1200, 1400, 2901, 2902, 2926T/F, 2926GS/L, 2948G, 2980G, 4000, 5000, 5500, 6000, 6500 Running CatOS.
Akasha:~ root# port install dynamips
---> Fetching libelf
---> Attempting to fetch libelf-0.8.10.tar.gz from http://www.mr511.de/software
---> Verifying checksum(s) for libelf
---> Extracting libelf
---> Configuring libelf
---> Building libelf with target all
---> Staging libelf into destroot
---> Installing libelf 0.8.10_0
---> Activating libelf 0.8.10_0
---> Cleaning libelf
---> Fetching dynamips
[...]
---> Building dynamips with target all
---> Staging dynamips into destroot
---> Installing dynamips 0.2.7_1+idle_pcs
---> Activating dynamips 0.2.7_1+idle_pcs
---> Cleaning dynamips
Akasha:bin root# ls -l /opt/local/bin/dynamips
-rwxr-xr-x 1 root admin 1241232 Jun 18 19:13 /opt/local/bin/dynamips
Akasha:bin root# ls -l /opt/local/bin/nvram_export
-rwxr-xr-x 2 root admin 13412 Jun 18 19:13 /opt/local/bin/nvram_export
Ja tenim instal·lada la versió antiga del dynamips amb les dependencies.
Ara descomprimim la darrera versió dels fonts de dynamips descarregats.
Obrim el Makefile i l'editem:
ifeq ($(shell uname -s), Darwin)
PCAP_LIB=/opt/local/lib/libpcap.a
CFLAGS+=-I/opt/local/include -mdynamic-no-pic -D_FILE_OFFSET_BITS=64
# CFLAGS+=-I/usr/local/include -mdynamic-no-pic -D_FILE_OFFSET_BITS=64
LIBS=-L/opt/local/lib -L. -lelf -lpthread
# LIBS=-L/usr/local/lib -L. -lelf -lpthread
El que estem fent es canviar el path de les llibreries necessaries per compilar, per les que ens ha instal·lat el MacPorts.
Guardem els canvis i compilem:
Akasha:dynamips-0.2.8-RC2 marck$ make
Linking rom2c
Extracting ROM from ELF file 'mips64_microcode'...
Extracting ROM from ELF file 'ppc32_microcode'...
Compiling mempool.c
Compiling registry.c
Compiling rbtree.c
Compiling hash.c
[...]
Compiling gen_eth.c
Linking dynamips
Linking nvram_export
Ja tenim els 2 binaris: dynamips i nvram-export. Ara toca substituir els antics:
Akasha:~ root# cd /opt/local/bin/
Akasha:bin root# cp ~kcraam/dynamips/dynamips-0.2.8-RC2/dynamips ./
Akasha:bin root# cp ~kcraam/dynamips/dynamips-0.2.8-RC2/nvram_export ./
PD. Problemes al conectar amb l'anfitrió. Sembla que hi ha algun problema de privilegis al crear una conexió amb l'anfitrió (el Mac) i nomes funciona si ens logem com Root (o System Administrator). No funciona ni el su ni el sudo.
Enllaços interessants: