Voice VLAN in 3COM switch

"IP phone cannot get IP Address from Voice VLAN in PoE  3COM switch"

---------
This note is just highlighting the error, and how  3COM voice vlan work and its behavior. Future more info need to surf the internet.
---------

In order to get ip address for the IP phones. Voice VLAN need to be pre-configured add the MAC address of ip phone. If not ip phone will not get the ip address from Voice VLAN.

Below is the sample of pre-configured MAC address of ip phone.
First 6 digit is the batch of the Phone Model.
The last 6 digit need not to be configure. It can be vary. Will add dynamically.

#
 voice vlan mac-address d057-4c00-0000 mask ffff-ff00-0000 description Cisco IP Phone
 voice vlan mac-address 0000-7300-0000 mask ffff-ff00-0000 description Avaya IP Pone 9640



Thank You.


Cheers! :)
Yan Linn Aung

Accessing to Avaya Cajun Switch

Avaya Cajun Switch

Since it is a Cajun switch, we can't do much config. This note is just sharing how to access to the Cajun switch especially without having the proper serial console cable and converter. All you need is a RJ45 cable and plug it to the cajun sw. Assign your PC to that below ip range 149.49.32.100/24.

It is very useful when you don't have console cable to connect that Cajun Switch.
telnet 149.49.32.134

C360 default IP address is 149.49.32.134 255.255.255.0

default login

usr: root
psw: root

--------------------------------
show l2-module-config
show l2-stack-config
show port
show system
show module
show powerinline
show serial-number
sh ip route
sh interface
show device-mode
show image version
show vlan
sh cam
sh boot
show utilization
show trunk
show queuing scheme
show license
show dev log file
show log


Thank You.


Cheers! :)
Yan Linn Aung

Multicast Lab using VLC as a multicast stream server and client

Multicast Lab using VLC as a multicast stream server and client 

Follow the step by step on-screen guide below. Thanks.

if you found some jitter video. Kindly amend the below script at
VLC. default ttl is 1. make it accordingly base on your Stream Server and Client network hop count.


:sout=#duplicate{dst=display,dst=std{access=udp{ttl=64},mux=ts,dst=multicsat-ip:port}}

Thank You.


Cheers! :)
Yan Linn Aung

How to configure windows 7 as a Telnet Server

How to configure windows 7 as a telnet server

 Checking telnet server state. Now is stopped.

• 1.       Enable telnet server at Turn windows feature on or off
• 2.       Start the telnet services at services.msc
• 3.       Create a user account and password for telnet access at lusrmgr.msc
• 4.       Access to telnet from Cmd

SOP for Resetting Fortigate admin password

Resetting the Fortigate admin account’s password

       

The default administrator account, named admin, initially has no password.

Unlike other administrator accounts, the admin administrator account exists by default and cannot be deleted. This administrator account always has full permission to view and change all FortiRecorder configuration options, including viewing and changing all other administrator accounts. Its name and permissions cannot be changed.

‘maintainer’ account is enable by default.

The special hidden “maintainer” user login, which is used for password recovery. When enabled, the “maintainer” account can log in from the console after a hard reboot (power off, power on) using the password “bcpb” followed by the FortiGate unit serial number. eg. bcpbFG900A83901645649. You have limited time (15 to 30 seconds) to complete this login.

After changing admin password it will only take affect the admin password of the current configuration and the rest of your configuration file should be the same as before it reboot. FortiGate system configuration is automatically save the configuration after every change. By default is automatic save config.


How to reset lost admin password in Fortigate


Requirements:

The following equipment were used to test this scenario.

·         FortiGate Firewall

·         Console cable

·         Putty.exe

NOTE : This process will require the hard reboot (power off & on) of the FortiGate.


You have limited time (15-30 sec) to complete this login as user “maintainer” after the boot process. If you take too much time you have to hard reboot the device again.

While it is rebooting you can get the Serial Number from Putty. Just copy and paste it on the Notepad. Prepare username login (maintainer) and password (bcpd+SerialNumber) (eg. bcpbFG900A83901645649)  in the notepad for time saving.
Instead of typing it in just do it quickly copy & paste it from notepad. This will prevent the login from timing out.

admin Passoword Changing Procedure Steps 1 to 7

1.         Power off the FortiGate. Wait for at least 10 sec and then Power On the FortiGate.  (if power off and on very fast, there might be power trip or corrupt the system)

2.         Direct connect your Laptop to a serial console port using Putty.

3.         Wait until the Firewall name and login prompt to appears.

4.         Username login is maintainer                          

            Prepare user name and password in the notepad for time saving.

5.         Password is bcpb+SerialNumber (eg. bcpbFG900A83901645649)

Instead of typing it in just do it quickly copy & paste it from notepad that you have prepared. This will prevent the login from timing out.

6.         Press Enter to login. Now you will be connected to firewall. 

7.         Finally change the admin password. execute reboot (optional)

In a unit where vdoms (Virtual domains (VDOMs)) are not enabled:

config system admin

edit admin

set password <psswrd>

end

In a unit where vdoms are enabled:

config global

config system admin

edit admin

set password <psswrd>

end

By default FortiGate system configuration is automatically save the configuration after every change.

Enables or disables the special hidden “maintainer” user login, which is used for password recovery. Enable by default.

set admin-maintainer {enable | disable}

To clear the current admin password: Not for this scenario. Just for info.

(this is only for clear / no password for admin you need to know the old password)

config system admin

edit admin

unset password <old password>

end



Thank You.


Cheers! :)
Yan Linn Aung

DHCP Reservation, DHCP Exclusion and Static IP

Detect and Avoid IP Address Conflicts

From DHCP Server set the conflict detection to a value greater than 0.

https://technet.microsoft.com/en-us/magazine/ff606371.aspx

Fix duplicate IP address conflicts on a DHCP network

https://support.microsoft.com/en-us/kb/133490

DHCP Reservation, DHCP Exclusion and Static IP

http://www.tomshardware.com/faq/id-1932491/difference-dhcp-reservation-dhcp-exclusion.html

DHCP Reservation 

Client use DHCP request and DHCP server assign that reserved IP address.

Client MAC address have to Map with IP address in the DHCP server Reservation List.

DHCP Exclusion

Client use Static IP address (Server, AD, DNS,..). and DHCP server is never assign that IP address to the DHCP request clients.

IP address or Range of IP are excluded in the DHCP server Exclusion list.

 Many applications require a static IP. If the server is configured to use DHCP, the application has no way of knowing that a reservation exists and may refuse to install. Also some applications tie their license to an IP address and therefore must be static as well.

 Laptops, phones, and any "mobile" devices should be reserved not static.

It requires no set up on the device and the server will reserve that address for that device.

 If you're referring to network devices like IP cameras and printers, reservations are definitely the way to go because you can add a comment in the reservation as to what the device is and where it's located. Depending on the device, this may be your only means of documenting that information within the system.

HOW TO - DHCP Reservation

This scenario IP address is already using as a DHCP client. Then assign it to Reserved.

DHCP reservation required to know Client MAC address to MAP with IP address.

Step 1:   Unique ID = MAC address

Step 2: Checking after reserved

Step 3: Adding Description for Management purpose

HOW TO - DHCP Exculsion

DHCP excluded IP address or IP range. It will never assign auto to DHCP client.

When client is Manually assign Static IP. DHCP server cannot see from Address Lease for that IP Address.

Step 1:   Exclusion the IP Address (only 1 IP address, just add in at Start IP only)

Step 2:   From Address Pool can see the excluded IP address

Step 3:   DHCP server cannot see Excluded IP Address from Address Lease

Step 4:   Ping to that Excluded IP address and test connectivity  

Multi-Layer Switching (MLS) & EIGRP LAB

"MLS and EIGRP LAB"
Multi-Layer Switching (MLS) & Enhanced Interior Gateway Routing Protocol (EIGRP)
------------------------------------------------------

Configure the Multilayer Switch so that PCs from VLAN  2 and VLAN 3 can communicate with the Server.
 


Command explanation
"Layer 3 Switch"
conf t
int gi0/1
no switchport    # By default switchport က layer 2 မွာပဲ အလုပ္လုပ္ သည္
ip address 10.10.10.2 255.255.255.0  # no switchport လုပ္ထားမွ IP ေပးလို႔ရသည္
no shutdown
exit

## VLAN creating and IP assign
int vlan 2  
ip address 190.200.250.33 255.255.255.224
no shutdown
exit
int vlan 3
ip address 190.200.250.65 255.255.255.224
no shutdown
exit

## Interface Port ကို VLAN assign ခ်ထား
int fa0/10
switchport mode access
switchport access vlan 2
no shutdown
exit
int fa0/11
switchport mode access
switchport access vlan 3
no shutdown
exit

ip routing    # Layer 3 routing ကို enable လုပ္သည္။ 

## EIGRP creating and announcement of connected network
router eigrp 650  
network 10.10.10.0 0.0.0.255
network 190.200.250.32 0.0.0.31
network 190.200.250.64 0.0.0.31
no auto-summary   # auto-summary လုပ္ထားရင္ 190.200.250.x network class b အေနနဲ႔end                   # ျမင္မည္။ subnetmask ခြဲထားတာကို မသိေတာ့ဘဲ class A, B or C ပဲ သိေနမည္.
                        # no auto-summary လုပ္ထားမွာ Subnet mask /27 ခြဲထားတဲ့အတိုင္းသိမည္။

" Router "
conf t
int gi0/0
ip address 10.10.10.1 255.255.255.0
no shutdown
exit
int gi0/1
ip address 172.18.1.1 255.255.255.252
no shutdown
exit

router eigrp 650
network 10.10.10.0 0.0.0.255
network 172.18.1.0 0.0.0.3
no auto-summary
end
copy running-config startup-config

Server နဲ႔ PC ေတြမွာ IP ေပး Subnet ေပး Default Gateway ေပးပါ.

----------------------------------  END  --------------------------------------

Study more -- link...
http://www.certprepare.com/mls-and-eigrp-sim#more-50

Have a nice day! Thanks!

Best Regards,
Yan Linn Aung