Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I am trying to grant the on site IT staff access to our Cisco 8540 WLC but only want them to have AP provisioning access, not full access. I can only see the users ReadOnly, ReadWrite or LobbyAdmin which doesn't fit my need.We do have an ISE serve...
Hi,I have a Cisco WS-C3750G-24PS stack running a very old version of code 12.2(35)SE5 C3750-IPSERVICES-M. I am looking to upgrade this to 122-55.SE12 c3750-ipservicesk9-mz.We did upgrade a switch earlier in the year from a IPSERVICES-M image to an ip...
Hi, I am currently working on an NTP penetration test resolution task. Many of our Cisco switches got flagged up as having a NTP vulnerability. The pen test results advises to upgrade to 4.2.8p9 or "add 'disable monitor' to the 'ntp.conf' configurati...
Hi Everyone, I am driving myself a little bit mad on this one. I am planning an IOS 16.12.04 upgrade (from 16.12.02) on two stacked Catalyst 9200 switches. These switches are located in Germany (I am located in England) so I need to make sure nothing...
Hi Balaji,Many thanks for that info. The upgrade we formed a while ago that broke the switch must have been some kind of hardware fault or something like that.
Hi Seb, Thanks for your reply again. I am now not able to load that link but thanks anyway. I am applying an NTP ACL on the switches to only allow NTP traffic from our NTP server IPs. Fingers crossed this resolved the vulnerability.
Hi Seb, Many thanks for your quick reply again. OK, I'm glad I didn't just miss something obvious and that Cisco IOS doesn't have ntp-4.2.8p9 available. Just so I understand you correctly, the only way I can resolve this vulnerability is to apply ACL...
Hi,I believe the CVE is CVE-2016-4953. It is this NTP vulnerability - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpdRegarding the NTP configuration, all I can see is the 'NTP server' IP and some 'NTP peer...
Hi again Seb, Thanks again for your help last week. I am however stuck again and was wondering if you can help? As far as I can see, Cisco Catalyst switches only has NTP versions 1-4 available. The pen test results advises to upgrade NTP to NTP 4.2.8...
