Q: I bought 34 switches with Smartnet. How do I get the Smartnet tied to my CCO ID?
Tuesday, May 24, 2005
Q: How do I restrict a switchport or VLAN to a list of valid MAC addresses?
(c)#mac access-list extended myfriends (c-e-m)#permit host 1234.5678.90AB any (c-e-m)#permit host AB12.3456.7890 any (c-e-m)#deny any any (c-e-m)#endNote the
deny any any
. On testing I found that this type of access-list does not include an implicit deny.
To apply it to an interface (you would have to do all interfaces on the switch to be fully protected) to the following:
(c)#int ran f1/0/1 - 48 , f2/0/1 - 48 (c-i)#mac access-group myfriends inOr, you create a vlan access-map with
action forward
for matches to that access list. Then you use the vlan filter
command to apply that access-map to a VLAN or list of VLANs.
(c)#vlan access-map wksta 10 (c-a-m)#match mac address myfriends (c-a-m)#end (c)#vlan filter wksta vlan-list 20-23,51Here's another possibility: VMPS. One guy says:
There is a tool I use called VMPS that is in with the IOS of every Cisco Switch. VMPS means VLAN Membership Policy Server. This is a text file that lives on my Linux box that one of my Primary VMPS Switches queries at the time I configured on it. Then, all my other switches ask the Primary switch for the same info (a lot faster since they have a gig link to my Primary and the VMPS file lives in RAM). Now, in that file, I can group what switches belong to a group or what MAC address belong to a group (i.e., accounting) and say that port 1-18 are only accessible for accounting.After some research, I have concluded that VMPS is a CATOS-only featrue, so doesn't apply to my situation.
Monday, May 09, 2005
Q: How do I reverse telnet out my aux port?
reverse telnetto connect to the other device's console via your aux port. Here's how to set it up.
- Connect your router's aux port to another device's console port using a Cisco flat crossover cable.
- TELNET to your router, enable, and set the aux port up as follows:
# conf t # line aux 0 (config-line)# modem InOut (config-line)# transport preferred all (config-line)# transport input all (config-line)# transport output all ^z
- Make sure you have an address on your lo0 interface, and the interface is up.
- Back in enable mode, find out the line number of your AUX port with
#show line
. It will look something like this:Tty Typ Tx/Rx A Modem 0 CTY - - * 97 AUX 9600/9600 - inout * 98 VTY - - 99 VTY - - 100 VTY - - 101 VTY - - 102 VTY - -
On this router it is line 97. It's different from router to router but I've never seen it change. - Now all you need to do is add 2000 to the line number, and telnet to your lo0 address, port 2097.
- I like to set up two aliases to save time:
(c)# alias exec auxup telnet 127.0.0.11 2097 (c)# alias exec auxdown clear line 97
With the setup above, you just connect the router's aux port to the target device. Then from the command line on the router, type auxup
. This gives you a console connection to the target device. To end the connection, hit [<shift><ctrl>6] x, then type auxdown
.
Update: it looks like the disconnect
command (entered after the [<shift><ctrl>6] x) might be the proper way to end the telnet session.