About Frank27

Frank27 · 12-27-2022

Hi,I have a problem with a CISCO 5548 switch . I cannot find the login-block command.System version: 7.0(2)N1(1)In global configuration mode there is no login-block command, neither under system login block-for or in the aaa subsystem menu.As per ex...

Frank27 · 12-16-2022

HW : Cisco ASA 5525 asa912-smp-k8.bin Problem :I would like to limit the amount of repeating connection for a host in the back-end and for a specific port that is mapping to SSH. While on the server there is SSHGUARD dropping in timeout from Brute-...

Frank27 · 05-06-2022

I have this network configuration : cisco 7201 router --> Nexus N5k --> ASA5525 --> Host they are running at 1Gbps speed. I would like to improve the overall performance of the network.So It came to my mind to higher the MTU size for example.Makes s...

Frank27 · 04-24-2022

I'm trying to find how to mitigate IP TTL Expiry Attack on Cisco ASA 9.1 any idea?

Frank27 · 03-27-2022

As per title. I would like to collect ALL message from a machine and dumping them inside a syslog file of 10 MB size that will overwrite it once it is reaching the size limit. Is that possible and how?

Frank27 · 12-28-2022

Workaround: Replace "login block-for" and "login quiet-mode" with "system login block-for" and "system login quiet-mode", respectively. Use "show system login ..." for relevant show outputs.Nothing, these commands are not implemented .

Frank27 · 12-19-2022

Now using SSHGUARD i shunned manually those "bad IP" on the ASA using the shun command.But would be nice to have something automated as IPS to specific TCP ports, when you have a web server hosting thousand of connection to 443,80 how can I manage it...

Frank27 · 12-19-2022

Thank You for the reply,The problem with TCP intercept is that the target host is a web server, and risk to block also nonthreatening TCP traffic as it is a commercial website. THAT was the main problem with TCP intercept..Need something that blocks...

Frank27 · 04-24-2022

Hi all , I solved this upgrading to the latest IOS version available for the 7201 series router.No more problems detected as the configuration has not been changed since the IOS update.Thanks for help!

Frank27 · 03-31-2022

HI @paul driver @MHM Cisco World , thank you for you replies. Well yes the actual topology is 7201-->>N5k-->>ASA-->>HOST Regarding the ssh port it is an "escamotage" or work-around for avoiding leaving port 22 open on the router itself and redirect ...

Member Since	‎12-05-2021 07:58 AM
Date Last Visited	‎01-04-2023 02:25 AM
Posts	38
Total Helpful Votes Received	40

User Statistics

User Activity

CISCO NEXUS 5548 (5K) Login-Block command not found

Preventing TCP access from Brute-force attack

Jumbo frames over 1Gbps link and speed tweak

TTL Expiry Attack for ASA 9.1

How to dump ALL console message to a syslog file

Re: CISCO NEXUS 5548 (5K) Login-Block command not found

Re: Preventing TCP access from Brute-force attack

Re: Preventing TCP access from Brute-force attack

Re: 7201 dropping NAT rules unexpectedly

Re: 7201 dropping NAT rules unexpectedly