About MichaelBorg91237

MichaelBorg91237 · 02-19-2024

Hi,I am trying to grant the on site IT staff access to our Cisco 8540 WLC but only want them to have AP provisioning access, not full access. I can only see the users ReadOnly, ReadWrite or LobbyAdmin which doesn't fit my need.We do have an ISE serve...

MichaelBorg91237 · 08-16-2022

Hi,I have a Cisco WS-C3750G-24PS stack running a very old version of code 12.2(35)SE5 C3750-IPSERVICES-M. I am looking to upgrade this to 122-55.SE12 c3750-ipservicesk9-mz.We did upgrade a switch earlier in the year from a IPSERVICES-M image to an ip...

MichaelBorg91237 · 01-13-2022

Hi, I am currently working on an NTP penetration test resolution task. Many of our Cisco switches got flagged up as having a NTP vulnerability. The pen test results advises to upgrade to 4.2.8p9 or "add 'disable monitor' to the 'ntp.conf' configurati...

MichaelBorg91237 · 04-01-2021

Hi Everyone, I am driving myself a little bit mad on this one. I am planning an IOS 16.12.04 upgrade (from 16.12.02) on two stacked Catalyst 9200 switches. These switches are located in Germany (I am located in England) so I need to make sure nothing...

MichaelBorg91237 · 08-17-2022

Hi Balaji,Many thanks for that info. The upgrade we formed a while ago that broke the switch must have been some kind of hardware fault or something like that.

MichaelBorg91237 · 01-19-2022

Hi Seb, Thanks for your reply again. I am now not able to load that link but thanks anyway. I am applying an NTP ACL on the switches to only allow NTP traffic from our NTP server IPs. Fingers crossed this resolved the vulnerability.

MichaelBorg91237 · 01-18-2022

Hi Seb, Many thanks for your quick reply again. OK, I'm glad I didn't just miss something obvious and that Cisco IOS doesn't have ntp-4.2.8p9 available. Just so I understand you correctly, the only way I can resolve this vulnerability is to apply ACL...

MichaelBorg91237 · 01-17-2022

Hi,I believe the CVE is CVE-2016-4953. It is this NTP vulnerability - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpdRegarding the NTP configuration, all I can see is the 'NTP server' IP and some 'NTP peer...

MichaelBorg91237 · 01-17-2022

Hi again Seb, Thanks again for your help last week. I am however stuck again and was wondering if you can help? As far as I can see, Cisco Catalyst switches only has NTP versions 1-4 available. The pen test results advises to upgrade NTP to NTP 4.2.8...

Member Since	‎04-01-2021 06:44 AM
Date Last Visited	‎03-06-2024 12:10 AM
Posts	21
Total Helpful Votes Received	15

User Statistics

User Activity

Cisco WLC AP-Provisioning only access

Can I upgrade from C3750-IPSERVICES-M to ipservicesk9-mz?

Update Catalyst switch NTP version

Stacked Catalyst 9200 upgrade to 16.12.04

Re: Can I upgrade from C3750-IPSERVICES-M to ipservicesk9-mz?

Re: Update Catalyst switch NTP version

Re: Update Catalyst switch NTP version

Re: Update Catalyst switch NTP version

Re: Update Catalyst switch NTP version