topic Re: TCP reset in Network Security https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081890#M78910 <HTML><HEAD></HEAD><BODY><P>Please see the span configuraiton, </P><P></P><P>monitor session 1 source interface Gi1/0/1</P><P>monitor session 1 destination interface Gi1/0/5</P><P></P><P>now when i try to give the ingress keyword it gave me error of incomplete command error.</P><P></P><P> dot1q ingress forwarding using dot1q encapsulation</P><P> isl ingress forwarding using isl encapsulation</P><P> untagged ingress forwarding using untagged encapsulation</P><P> vlan Set default VLAN for untagged ingress traffic</P><P></P><P>I have only one VLN 1 and 13 as native VLAN on my switch.</P><P></P><P>All switch ports are member of VLAN 1.</P><P></P><P>Switch is trunk with other switch</P><P></P><P>PDC-OUT-3750-1#sh interfaces trun</P><P>PDC-OUT-3750-1#sh interfaces trunk</P><P></P><P>Port Mode Encapsulation Status Native vlan</P><P>Po1 on 802.1q trunking 13</P><P></P><P>Port Vlans allowed on trunk</P><P>Po1 1-4094</P><P></P><P>Port Vlans allowed and active in management domain</P><P>Po1 1,13</P><P></P><P>Port Vlans in spanning tree forwarding state and not pruned</P><P></P><P>Please let me know which option to select after ingress.</P><P></P><P>I will be very greatful to you.</P><P></P><P></P></BODY></HTML> Sat, 30 Aug 2008 13:24:25 GMT wasiimcisco 2008-08-30T13:24:25Z TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081888#M78906 <P>I am unable to configure the TCP Reset on my IPS 4255 in Promiscous mode.</P><P></P><P>I have declare one interface of 0/0 IPS as tcp reset, for interface gig 0/1.</P><P></P><P>but still not working. Please tell me how to configure and how to verify the configuration. </P> Sun, 10 Mar 2019 11:16:43 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081888#M78906 wasiimcisco 2019-03-10T11:16:43Z Re: TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081889#M78908 <HTML><HEAD></HEAD><BODY><P>Did you add the ingress keyword on the switch? Can you post your SPAN configs?</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Fri, 29 Aug 2008 19:02:07 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081889#M78908 Farrukh Haroon 2008-08-29T19:02:07Z Re: TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081890#M78910 <HTML><HEAD></HEAD><BODY><P>Please see the span configuraiton, </P><P></P><P>monitor session 1 source interface Gi1/0/1</P><P>monitor session 1 destination interface Gi1/0/5</P><P></P><P>now when i try to give the ingress keyword it gave me error of incomplete command error.</P><P></P><P> dot1q ingress forwarding using dot1q encapsulation</P><P> isl ingress forwarding using isl encapsulation</P><P> untagged ingress forwarding using untagged encapsulation</P><P> vlan Set default VLAN for untagged ingress traffic</P><P></P><P>I have only one VLN 1 and 13 as native VLAN on my switch.</P><P></P><P>All switch ports are member of VLAN 1.</P><P></P><P>Switch is trunk with other switch</P><P></P><P>PDC-OUT-3750-1#sh interfaces trun</P><P>PDC-OUT-3750-1#sh interfaces trunk</P><P></P><P>Port Mode Encapsulation Status Native vlan</P><P>Po1 on 802.1q trunking 13</P><P></P><P>Port Vlans allowed on trunk</P><P>Po1 1-4094</P><P></P><P>Port Vlans allowed and active in management domain</P><P>Po1 1,13</P><P></P><P>Port Vlans in spanning tree forwarding state and not pruned</P><P></P><P>Please let me know which option to select after ingress.</P><P></P><P>I will be very greatful to you.</P><P></P><P></P></BODY></HTML> Sat, 30 Aug 2008 13:24:25 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081890#M78910 wasiimcisco 2008-08-30T13:24:25Z Re: TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081891#M78912 <HTML><HEAD></HEAD><BODY><P>ingress vlan 1</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sat, 30 Aug 2008 15:03:05 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081891#M78912 Farrukh Haroon 2008-08-30T15:03:05Z Re: TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081892#M78914 <HTML><HEAD></HEAD><BODY><P>Thanks for the reply, but please let me know how the verify that the tcp reset is working. I have signature that has action configured to rest tcp connection. </P><P></P><P>but how can i verify that tcp rest is working. </P></BODY></HTML> Sat, 30 Aug 2008 17:02:31 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081892#M78914 wasiimcisco 2008-08-30T17:02:31Z Re: TCP reset https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081893#M78916 <HTML><HEAD></HEAD><BODY><P>Make a custom STRING TCP signature direction 'to server' for Telnet (Port 23). Match on any string like 'abcd'. Now telnet on the SPANNED vlan, and then try to type abcd. as soon as you type 'd' (the last letter) your telnet connection will get stuck <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sat, 30 Aug 2008 17:16:48 GMT https://community.cisco.com/t5/network-security/tcp-reset/m-p/1081893#M78916 Farrukh Haroon 2008-08-30T17:16:48Z