Daniel Kuchenski

cisco

QoS DSCP/ToS Values

DSCP Class DSCP (bin) DSCP (dec) ToS (dec) ToS (bin) ToS Prec. (bin) ToS Prec. (dec) none 000000 0 0 00000000 000 0 cs1 001000 8 32 00100000 001 1 af11 001010 10 40 00101000 001 1 af12 001100 12 48 00110000 001 1 af13 001110 14 56 00111000 001

hp

HP Switch (ProCruve) QoS Guide

Coming from a Cisco QoS background, I wanted to get a good grasp on HP QoS with the ProCurve switches, but there isn't much information out there (besides the Advanced Traffic Management Guide by HP).  This post should should consolidate some of that information, and is based on the the

cisco

Cisco CBAC Firewall - FW-4-ALERT_ON: getting aggressive

Had an issue recently were the CBAC firewall on a Cisco 1811 was slowing down/blocking internet traffic.  My inspect policy was doing basic inspection (tcp, icmp - not http,https). The log showed: %FW-4-ALERT_ON: getting aggressive, cound (501/500) current 1-min rate: 216 Cisco explains this as the

cisco

DMVPN Firewall (Access-List) Ports

If you have a dedicated DMVPN router and want to apply a simple access list to the public interface to block all other traffic, this is what you need opened up: permit esp any any permit udp any eq isakmp any eq isakmp and if you have NAT-T, then you

cisco

DMVPN - Phase 1 with EIGRP

Here is a quick and clean DMVPN Phase 1 Configuration: Hub Router IPsec: HUB01(config)# crypto isakmp policy 10 HUB01(config-isakmp)# encr 3des HUB01(config-isakmp)# hash md5 HUB01(config-isakmp)# authentication pre-share HUB01(config)# crypto isakmp key CISCO address 0.0.0.0 0.0.0.0 HUB01(config)#crypto ipsec

shoretel

ShoreTel Phone Configuration Codes

From a ShoreTel phone, you can ping, view configuration, etc directly from the phone: For each operation, you press MUTE and then hit the number + #: PING: Press MUTE then 7464# (PING) CLEAR CACHED VALUES: Press MUTE then 25327# (CLEAR) RESET PHONE: Press MUTE then 73738# (RESET) EDIT CONFIGURATION: Press MUTE

cisco

ASA Implicit Rule "Permit all traffic to less secure networks" ACL

When adding a new network interface to the ASA, you must specific a security level. Based off this security level, the default ACL allows you to access "less secure" networks, and denies access to "more secure" networks. This default rule works great until you need to implement a security zone

cisco

Cisco Switch Security Best Practices

This is a summary and command reference for Cisco Switch Security Best Practices from the Cisco CCNP material. 1. Configure secure passwords * Use the enable secret command to set the enable password * Use external AAA servers for administrative access * Use the service password-encryption command to prevent casual observers from seeing

cisco

Cisco SPAN (Port-Mirror) Configuration

Example: On my Cisco switch I want to mirror port 10 to port 20 so I can plug in my laptop (into port 20) with wireshark and do packet captures (config) #monitor session 1 source interface fastethernet0/10 (config) #monitor session 1 destination interface fastethernet0/20 and then verify the

cisco

OSPF Neighbor Relationships

5 Requirements for OSPF to form a relationship with a neighbor: 1. Hello and Dead timers must match 2. Network mask must match 3. Area ID must match 4. Authentication password must match (if you are using OSPF authentication) 5. Stub Area Flag must match Also found a great wiki

cisco

IPv6 OSPF on a Cisco router

The big difference between IPv4 and IPv6 OSPF configuration on a Cisco router is that the initial configuration has moved to the interface level, instead of using the "network" statements to determine which interfaces will be part of the OSPF process. To get IPv6 OSPF up-and-running, here are the 4

shoretel

ShoreTel Least Cost Routing

NOTICE: Changing these settings can impact your ability to make/receive calls, do not change unless instructed by ShoreTel TAC. With that said, hopefully this information can be useful if you have a similar situation: I had two ShoreTel sites within the same area code, HQ site had the PRI,

cisco

Advertise Default Route with BGP

If you are used to using the "Default-Information Originate" command with OSPF or EIGRP to easily advertise a default route, you might be surprised to find that solely applying that command within BGP does not advertise a default route.  You must also use Redistribute Static in conjunction with Default-Information Originate.

shoretel

ShoreTel Active Directory Integration

ShoreTel AD integration is pretty simple, just a couple of important steps to remember: 1. To use AD integration, check "Enable AD Integration" under System Parameters -> Other 2. ShoreTel is a top-level LDAP reader, so you do not need to specify certain OUs.  Your LDAP string should look like

shoretel

ShoreTel TMSNcc Log Info

Great informational article regarding ShoreTel TMSNcc logs: http://www.netdungeon.com/articles/how-decipher-tmsncclog Call Code Parameters: C-CE Call Creation Event Call Initiation. L-CE Leg Create Event Follows a C-CE; Internal Transfers L-IE Leg Info Event Provides information on other parties in the call. C-SE Call State Event State of call

hp

Setting up OSPF on HP Switches

To run OSPF on HP Procurve switches, you will most likely need the "Premium" software license.  Once you have that, configuring OSPF is fairly easy, although different from the Cisco approach: For example, I want to enable OSPF in area 0 on my HP core switch (HP 5406): 1. Enter

windows

Verify Windows Server 2008R2 Time/NTP Settings

From the cmd prompt: For current time: Time /T For configuration: w32tm /query /configuration For status: w32tm /query /status To set your 2008R2 server as an NTP server, edit the following two reg keys: 1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags and change to Value 5 2.

windows

Windows Update Failed on Server 2008R2

If you are having issues with Windows Update failing, try running the Microsoft System Update Readiness Tool here: http://support.microsoft.com/kb/947821 This tool has fixed Windows Update issues for me on Server 2008R2 installs.

shoretel

ShoreTel V-Switch Commands

To connect to a V switch, you do not need to enable telnet from the Director server, but you do need to connect via SSH.  If you connect directly to the console, remember to set your speed to 19200. Login with username/password: root | ShoreTel Enter svccli and then getsvcstatus

cisco

Understanding VLAN Membership

The topic of how VLANs work and untagging/tagging ports has come up, so I am attempting to write a simplified post based off some of the questions I have received: VLANs are typically assigned to a single subnet.  This is done to limit the broadcast domain and to implement

shoretel

ShoreTel Backup - Release 12.1

These are the recommended backup steps when performing a backup on ShoreTel 12.1 1. Open the cmd prompt 2. Type: cd c:\Program Files\Shoreline Communications\Shoreware Server\MySQL\MySQL Server 5.0\Examples 3. Type backupconfig.bat and press enter 4. Verify the backup is complete by opening

hp

LACP Trunk on HP Procurve Switch

To create a LACP trunk on an HP 2910 switch, follow these commands: On both switches: 1. Log into the HP switch CLI, and enter configure mode 2. Identify the interfaces you want to use for the trunk and type: trunk 25-26 trk1 lacp "25-26" are the interfaces used in

shoretel

ShoreTel Communicator Outlook Integration "Grayed Out"

Came across a user that wanted to install the ShoreTel 13.2 Communicator Outlook Integration, but the option was grayed out under Communicator Tools --> Options --> Outlook. 1. Uninstall Communicator and then reinstall by right-clicking and "Run as Administrator". The integration buttons can sometimes be grayed out due to

shoretel

ShoreTel Switch Burnflash

If your ShoreTel switches are acting weird, sometimes a burnflash can fix a bug.  These commands are for the non-V switches, and will restart the switch at the end, so do not do this during production hours.  Network settings will be retained. 1. On the ShoreTel Director server, open CMD

shoretel

How to enable debugging for ShoreTel Communicator

When you need to look at advanced options or enable debugging of the Communicator for troubleshooting, use the following steps: 1. Open ShoreTel Communicator and hover your mouse cursor over "Enter a name or number" 2. Hold CTRL and press F12 3. A new window with open with debugging options