Splunk Configuration for Windows Event Logs

Cisco Aironet 1200 Series Configuration

My previous process in resetting Cisco Aironet 1200 Series AP in which resetting is done using Hyper terminal and pressing the reset button then checking the dump data on hyper terminal for the default IP address which is normally 10.0.0.1 then accessing the admin page via HTTP using the default IP address. . . In some versions of Cisco Aironet 1200 Series this doesn’t work anymore.

This is the new process in assigning a new IP address to an access point that has been reset to default factory settings.

Run hyper terminal. Be sure you have the settings for the hyper terminal which is Speed=9600 bits per second (bps) Data bits=8 Stop bits=1 Parity=None Flow Control=Xon/Xoff

NOTE: if the flow control Xon/Xoff does not work, try using the flow control none.

Plug the console cable on the Cisco Aironet 1200 Series AP

Hold the Mode/Reset button of the Cisco Aironet 1200 then plug the power adapter

Hold down the reset/Mode button for 5 seconds then release.

This will provide you a dump on hyper terminal

As you can see on the dump this will provide a default IP address of 10.0.0.1

Just let it run and continue with the dump process

When it's finish press on enter

This will give you the prompt ap>

On ap> prompt enter this command

ap> enable

This will ask for a password in which the default is Cisco

Configuration mode is now enabled

ap#

Enter the following command to configure the terminal

ap# config term

The new prompt would be something like this

ap(config)#

Enter the following command to assign a new IP address to the access point

ap(config)# int bvi 1
ip address a.b.c.d sub.net.ma.sk

Where a.b.c.d is the IP address to be assigned on the device and the equivalent subnet mask

You may run the end command to exit the configuration

ap(config)# end

Verify the assigned IP address

ap# show interface bvi 1

This will provide some information on this interface including the assigned IP address

ap#show interface bvi 1
BVI1 is down, line protocol is down
Hardware is BVI, address is 001c.58a6.0ae3 (bia 0007.0e66.f000)
Internet address is 192.168.1.17/24
MTU 1500 bytes, BW 54000 Kbit, DLY 5000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
48 packets output, 29664 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out



Plug the UTP cable on the ethernet port then ping the device to verify the new assigned IP address

Now configuration process can be continued via HTTP access on the assigned IP address.

Cisco Catalyst 3560 Loopback Error Recovery

Recently we encountered an issue on Cisco Catalyst 3560 switch in which ports Fa0/10 and Fa0/22 has been disabled automatically by the IOS Software due to an error.

First thing to do is determine the cause of the error. This topic can be found on the Cisco website on this link.

IOS commands issued to determine the error.

In my case I always utilize putty in accessing Cisco IOS.

Login to Cisco IOS (telnet) using putty then enter the equivalent password for Cisco IOS

Run enable command then enter the equivalent password

Then run this command to determine the status of the port

Switch26# show interface Fa0/10 status
Port Name Status Vlan Duplex Speed Type
Fao/10 err-disabled 1 auto auto 10/100BaseTX


To determine the cause of the error run the following command
# show log

This command will dump a log on all the ports. Check specifically the logs on the port that encountered the issue.
In our case its interface Fa0/10

The log would show up something like this

%PM−4−ERR_DISABLE: loopback error detected on Fa0/10, putting Fao/10 in
err−disable state

So the error encountered was a loopback.

Cisco Catalyst 3560 Switch loopback issue

A loopback error occurs when the keepalive packet is looped back to the port that sent the keepalive. The switch sends keepalives out all the interfaces by default. A device can loop the packets back to the source interface, which usually occurs because there is a logical loop in the network that the spanning tree has not blocked. The source interface receives the keepalive packet that it sent out, and the switch disables the interface (errdisable). This message occurs because the keepalive packet is looped back to the port that sent the keepalive:

The suggested workaround is to disable keepalives and upgrade to Cisco IOS Software Release
12.2SE or later.

Run the following command to disable keepalive on a particular port

Switch26#configure terminal
Switch26 (config) #interface Fa0/10
Switch26 (config) #no keepalive
Switch26 (config)end

Run this command to check the current configuration
Switch26#show running-config interface Fa0/10
Building configuration...

Current configuration : 48 bytes
!
interface FastEthernet0/10
no keepalive
end

Copy the running configuration to the startup configuration

Switch26#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
Switch26#

Now we need to enable the new settings to the port by resetting the port

Run the following command shutdown and no shutdown


Switch26#
Switch26#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch26(config)#interface Fa0/10
Switch26(config-if)#shutdown
Switch26(config-if)#end
Switch26#show running-config interface Fa0/10
Building configuration...

Current configuration : 58 bytes
!
interface FastEthernet0/10
no keepalive
shutdown
end

Switch26#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch26(config)#interface Fa0/10
Switch26(config-if)#no shutdown
Switch26(config-if)#end
Switch26#show running-config interface Fa0/10
Building configuration...

Current configuration : 48 bytes
!
interface FastEthernet0/10
no keepalive
end

Switch26#

That’s all folks . . .

Proxy Configuration for Internet Explorer

Proxy Configuration for Firefox

Configuring vlan on Cisco Catalyst 3560

The objective to create 2 vlans. Vlan 151 as the port that will connect to the netmodem and vlan 90 as the port that connects to Cisco IP Phone 7940.

Telnet into Cisco Catalyst 3560 by using putty or any telnet tool of your choice. Enter the IP address (192.168.1.25 in my case) of the switch then click on open.

Enter the administration password for Cisco Catalyst 3560 (assuming that the switch has already been configured)

Once you have the prompt for the switch type enable then hit enter.

Enter the password for IOS to enter the configuration mode.

From this point you may enter the IOS commands below for the configuration.

To return an interface to its default configuration, use the default interface interface-id interface configuration command.
This example shows how to configure a port as an access port in VLAN 2:
Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)# interface gigabitethernet0/1

Switch(config-if)# switchport mode access

Switch(config-if)# switchport access vlan 2


Switch(config-if)# end