Thursday, January 19, 2012
Cisco VPN Broken
conf t
no ip cef
Monday, October 10, 2011
Default Interface Cisco Command
A 10 second change has now taken 2 minutes and increased my frustration level unnecessarily.
Default
default
default fa0/1
http://blog.ioshints.info/2007/06/default-interface-configuration-command.html
http://www.cisco.com/en/US/docs/ios/12_2t/inter/command/reference/irftdce.html#wp1081863
Friday, September 23, 2011
Cisco - CUE - Show Voicemail Email Notification Settings for a User from CLI
Tuesday, June 21, 2011
Cisco Config Archive and Replace
http://www.fryguy.net/2011/06/06/cisco-archive-and-configure/
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtrollbk.html#wp1066709
Thursday, February 3, 2011
Cisco Command Tricks - Monitoring Performance
Show the list of tasks running sorted by CPU usage and excluding any that are using 0%
sh proc cpu sorted | ex 0.00Show spanning tree changes
show spanning-tree detail | inc ieee|occur|from|is execShow interface counter errors
sh interface counters errors
sh int | i line|errorShow interface queue statuses and drops
sh int | in Input|line
Thursday, October 28, 2010
Cisco - ISDN Plan Map
interface Serial0/2/0:23
isdn map address 011.* plan isdn type unknown
Reference:
http://www.cisco.com/en/US/docs/ios/dial/command/reference/dia_i2.html
isdn map
Syntax Description
Command Default
Command Modes
Command History
Usage Guidelines
Examples
interface serial1:23
isdn map address 123 plan isdn type unknown
interface serial1:23
isdn map address 12.* plan data type subscriber
interface serial1:23
isdn map address .*7 plan data type subscriber
interface serial1:23
isdn map address transparent
Related Commands
Tuesday, October 12, 2010
Cisco NTP Setup
NTP Server to Use: time-a.nist.gov - 129.6.15.28
Other NTP Servers
http://www.cisco.com/en/US/docs/ios/12_1/configfun/configuration/guide/fcd303.html#wp1001151
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00807ca437.shtml#configs
Thursday, July 1, 2010
Cisco IP Communicator
Now if I can just find a way to create profile files/shortcuts so I don't need to keep reconfiguring CIPC for every customer/site.
PS, doesn't seem to work in eyeBeam/X-Lite.
Friday, May 21, 2010
Cisco Regex and CLI Filters Misc
http://www.cisco.com/en/US/docs/ios/12_0t/12_0t1/feature/guide/cliparse.html#wp5286
http://hackathology.blogspot.com/2007/04/cisco-ios-cli-regular-expressions-part.html
http://hackathology.blogspot.com/2007/02/basic-cisco-ios-router-management-to.html
http://www.handsomeplanet.com/archives/7
Cisco VPN PSK Decryption
I can reset their PSK easily, but then the other computers that are already deployed with the existing PSK will need to be reconfigured.
The Group Name, IP and PSK are all stored in a profile file (.pcf) on computers that are already configured. The PSK is encrypted. However, the encryption used for the PSK is very easily crackable.
Here's How:
1) Locate the profile (.pcf) file for your connection entry. This should be located at C:\Program Files\Cisco Systems\VPN Client\Profiles\ENTRYNAME.pcf.
2) Open the profile with a text editor.
3) Look for the line that begins with enc_GroupPwd=
4) Grab the string of characters that follow the = sign.
5) Input the characters into the Encrypted User/Group Password: field on this website.
6) Hit decode. Use the retrieved password to setup the remaining machines.
Here is an example of the encrypted password:
enc_GroupPwd=B54080BC72B142E7F537A9A2080C940D4B953BA6AE47C952C42C60C4C0EF69D6D8FA1E3E76038450E27724D29D851301CE97DF962667FD7A
Links:
http://coreygilmore.com/projects/decrypt-cisco-vpn-password/
Thursday, May 13, 2010
Cisco CLI - Show Command Section Filter and Other CLI Shortcuts
! awesome. Now I don't have to filter through the config looking for the ephone 12 config.When I first start working on a router, I'll usually grab a copy of the running config and throw it into a txt file. Then I search through it for whatever I want. Once I find the relevant pieces, I'll copy them over to a new text file and prep the changes I want to make. Then I'll apply the changes to the router.
2821#sh run | s i ephone 12
ephone 12
device-security-mode none
description Ryan IP Communicator
video
mac-address 0023.AE7F.0000
type CIPC
button 1:2 2:10
2821#
! term len 0 sets the terminal length to no pauses so you can get the complete config at once.
Rtr#term len 0
Rtr#sh run
! now do a copy all to clipboard from putty and paste into a text document.
Verifying the changes is where the section filter can really be helpful. Rather than getting a complete new copy of the config and sifting through it, just do a sh run | s i whatever I'm looking for
So overall, the section command filter is a great shortcut. However, if you are looking for data on an interface, you should use show run interface
! annoying because I had to type this all the way out and even capitalize it correctlyShow Section Command Filter Links
2821#sh run | s i interface GigabitEthernet0/0
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
bridge-group 1
! less annoying - just do sh run int and use tab completion or abbreviations like you normally would.
2821#sh run int gigabitEthernet 0/0
Building configuration...
Current configuration : 92 bytes
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
bridge-group 1
end
2821#
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtshfltr.html
http://www.techexams.net/forums/ccna-ccent/37408-show-run-section.html
http://cciepursuit.wordpress.com/2007/07/17/must-use-command-filtering-output-with-the-section-command/
http://www.nil.com/C1256F0A00429755/html/EnhanceIOSUI/
Cisco Documentation:
Command Reference
show section
Syntax Description
Command Modes
Command History
Usage Guidelines
Examples
Router# show running-config | include interface
interface Ethernet0/0 interface Ethernet1/0 interface Serial2/0 interface Serial3/0
Router# show running-config | section include interface
interface Ethernet0/0 shutdown no cdp enable
interface Ethernet1/0 shutdown no cdp enable interface Serial2/0 shutdown no cdp enable interface Serial3/0 shutdown no cdp enable
Related Commands
Information About the Show Command Section Filter
Thursday, May 6, 2010
Wednesday, April 28, 2010
Cisco CME - SIP Providers
The problem is that by default, Cisco CME does not use a static source port; it uses a random unassigned source port. This resulted in outgoing calls not working. Their device was specifically responding with a 404 not found error (which is not very helpful). To get this to work properly, we had to configure the UC540 to use port 5060 for the source port.
conf t
sip-ua
connection-reuse
end
Additional information from Cisco:
1. By default the source port for SIP messages that the UC500 sends is ephemeral or random which is per the spec. You can force this to always be UDP 5060 by looking at section 4.4.12 on guide below
If the provider requires that SIP traffic always be sourced from the UC520 using TCP or UDP port 5060, this can be changed at a system level as below:
sip-ua
connection-reuse
https://www.myciscocommunity.com/docs/DOC-1520#Inbound_calls_from_SIP_Trunk_on_UC520_fail_when_configured_using_CCA_19_or_higher
https://www.myciscocommunity.com/message/5595#5595
Wednesday, March 24, 2010
Cisco CME Basic Call Debugs
debug isdn q931 - see live calling / called numbers on PRI
debug voip ccapi inout - This is hard to read but you will see something on the screen if calls come in / out of the FX0 / POTS lines.
debug ccsip messages - debug sip messages
debug ccsip all - debug all sip traffic - CAREFUL
term mon - see debugs on the screen
u all - disable all debugging
Wednesday, February 10, 2010
Cisco KATE
After some digging around, it looks like KATE stands for "Keyboard Alphanumeric Text Entry" and deals with Cisco localization settings and etc.
Error Messages:
2010-02-10 08:49:16 Local3.Debug 192.168.1.9 KATE_tftp {
2010-02-10 08:49:16 Local3.Debug 192.168.1.9 KATE_tftpInit {
2010-02-10 08:49:16 Local3.Debug 192.168.1.9 }<010>
2010-02-10 08:49:16 Local3.Debug 192.168.1.9 KATE: finished waiting on EVENT_INIT_CNF_PARSED
2010-02-10 08:49:16 Local3.Debug 192.168.1.9 kate Name: English_United_States/525G-kate.xml
I was only able to find 2 pages in Cisco that defined KATE directly. Both are release guides that mention this in passing.
Source3.3 No Keyboard Alphanumeric Text Entry Support
3.3.1 Asian Locales
There is currently no localised Keyboard Alphanumeric Text Entry (KATE) support for the following Asian locales:
Chinese (China)
Chinese (Hong Kong)
Chinese (Taiwan)
Japanese (Japan)
Korean (Korea Republic)
The default English (United States) KATE will be presented to the user instead.
3.3.2 Cisco Unified IP Phone 3951"
KATE is not internationalised on this device and therefore cannot be localised. KATE is only used for local administation purposes only.
Another Mention of KATE in another context.
Thursday, January 14, 2010
Cisco IOS Bundles
Cisco IOS Packaging
Cisco IOS Packaging consists of eight packages for Cisco routers and five packages for Cisco switches. (See Figure 6.)
Figure 6—Cisco IOS Packaging for Cisco Routers and Switches
Four packages are designed to satisfy requirements in four typical service categories:
-
IP data
-
Converged voice and data
-
Security and VPN
-
Enterprise protocols
Three additional premium packages offer new Cisco IOS Software feature combinations that address more complex network requirements. All features merge in the Advanced Enterprise Services package that integrates support for all routing protocols with Voice, Security, and VPN capabilities.
Feature inheritance is another powerful aspect of Cisco IOS Packaging. After a feature is introduced, it is included in the more comprehensive packages. The feature inheritance facilitates migration by clarifying the feature content of the different packages and how they relate to each another.
Cisco IOS Packaging also simplifies image naming. Each name is designed to effectively convey the high-level feature content of, and the inheritance characteristics for the new packages.
These categories summarize the new naming convention:
-
Base—entry level image (IP Base, Enterprise Base)
-
Services—addition of IP Telephony Service, MPLS, Voice over IP (VoIP), Voice over Frame Relay (VoFR), and ATM (SP Services, Enterprise Services)
-
Advanced—addition of VPN, Cisco IOS Firewall, 3DES encryption, SSH, Cisco IOS IPsec and Intrusion Detection Systems (IDS) (Advanced Security, Advanced IP Services)
-
Enterprise—addition of multi-protocols, including IBM, IPX, AppleTalk (Enterprise Base, Enterprise Services)
These packages are new:
-
IP Base
-
IP Voice
-
Enterprise Base
-
Advanced Security
-
SP Services
-
Advanced IP Services
-
Enterprise Services
-
Advanced Enterprise Services
Wednesday, January 13, 2010
Alias for CLI Access to the CUE
rtr#conf t
Tuesday, January 5, 2010
Rebooting Cisco Phones
Note that when resetting or restarting phones, the phone will not be rebooted immediately if it is currently in use. Instead, it will be rebooted once the phone call is over. Thus, resetting or restarting should both be safe to do during business hours as long as call traffic is not high at that point in time.
reset (ephone)
To perform a complete reboot of a single phone associated with a Cisco CallManager Express (Cisco CME) router, use the reset command in ephone configuration mode.
reset
Syntax Description
This command has no arguments or keywords.
Command Default
No reset is performed.
Command Modes
Ephone configuration (config-ephone)
Command History
Cisco IOS Release | Cisco Product | Modification |
|---|---|---|
12.1(5)YD | Cisco ITS 1.0 | This command was introduced |
12.2(8)T | Cisco ITS 2.0 | This command was integrated into Cisco IOS Release 12.2(8)T |
Usage Guidelines
After you update information for one or more phones associated with a Cisco CME router, the phone or phones must be rebooted. There are two commands to reboot the phones: reset and restart. The reset command performs a "hard" reboot similar to a power-off-power-on sequence. It reboots the phone and contacts the Dynamic Host Configuration Protocol (DHCP) server and the TFTP server to update from their information as well. The restart command performs a "soft" reboot by simply rebooting the phone without contacting the DHCP and TFTP servers. The reset command takes significantly longer to process than the restart command when you are updating multiple phones, but it must be used after updating phone firmware, user locale, network locale, or URL parameters. For simple button, line, or speed-dial changes, you can use the restart command.
Use the reset (ephone) command to perform a complete reboot of an IP phone when you are in ephone configuration mode. This command has the same effect as a reset (telephony-service) command that is used to reset a single phone.
This command has a no form, but the no form has no effect.
Examples
The following example resets the SCCP phone with a phone-tag of 1:
Router(config)# ephone 1
Router(config-ephone)# reset
Related Commands
reset (telephony-service)
To perform a complete reboot of one or all phones associated with a Cisco CallManager Express (Cisco CME) router, use the reset command in telephony-service configuration mode. To interrupt and cancel a sequential reset cycle, use the no form of the command with the sequence-all keyword.
reset {all [time-interval] | cancel | mac-address | sequence-all}
no reset {all [time-interval] | cancel | mac-address | sequence-all}
Syntax Description
Command Default
No reset is performed.
Command Modes
Telephony-service configuration (config-telephony)
Command History
Usage Guidelines
After you update information for one or more phones associated with a Cisco CME router, the phone or phones must be rebooted using either the reset command or the restart command. The reset command performs a "hard" reboot similar to a power-off-power-on sequence and contacts the Dynamic Host Configuration Protocol (DHCP) server and the TFTP server for updated information as well. The restart command performs a "soft" reboot by simply rebooting the phone without contacting the DHCP and TFTP servers. The reset command takes significantly longer to process than the restart command when you are updating multiple phones, but it must be used after you make changes to phone firmware, user locale, network locale, or URL parameters. For simple button, line, or speed-dial changes, you can use the restart command.
When you use the reset command, the default time interval of 15 seconds is recommended so that phone reset operations are staggered in order to avoid all phones attempting to access router system resources at the same time. A shorter interval may be used on systems with only a small number of phones or for cases where a simple reset of the phones is desired that does not result in the phones downloading updates to the phone firmware (using the router's TFTP service).
When you use the reset sequence-all command, the router waits for one phone to complete its reset and reregister before starting to reset the next phone. The delay provided by this command prevents multiple phones from attempting to access the TFTP server simultaneously and therefore failing to reset properly. Each reset operation can take several minutes when you use this command. There is a reset timeout of 4 minutes, after which the router stops waiting for the currently registering phone to complete registration and starts to reset the next phone.
If the router configuration is changed so that the eXtensible Markup Language (XML) configuration files for the phones are modified (changes are made to user locale, network locale, or phone firmware), then whenever you use the reset all or restart all command, the router automatically executes the reset sequence-all command instead. The reset sequence-all command resets phones one at a time in order to prevent multiple phones from trying to contact the TFTP server simultaneously. This one-at-a-time sequencing can take a long time if there are many phones. To avoid this automatic behavior, use the reset all time-interval or the restart all time-interval with an explicit argument that is not equal to the default 15-second time interval; for example, set a time interval of 14 seconds. If a reset sequence-all command has been started in error, use the reset cancel command to interrupt and cancel the sequence of resets.
The restart command allows the system to perform quick phone resets in which only the button template, line information, and speed-dial information is updated. See the documentation for the restart command for more information.
The no form of this command has an effect only when used with the all or sequence-all keyword, when it interrupts and cancels the sequential resetting of phones.
Examples
The following example resets all IP phones served by the Cisco CME router:
Router(config)# telephony-service
Router(config-telephony)# reset all
The following example resets the Cisco IP phone with the MAC address CFBA.321B.96FA:
Router(config)# telephony-service
Router(config-telephony)# reset CFBA.321B.96FA
The following example resets all IP phones in sequential, not-overlapping order:
Router(config)# telephony-service
Router(config-telephony)# reset sequence-all