About r.heitmann

r.heitmann · 11-14-2023

Cisco Nexus 3548 seems to have no possibility to configure a "storm-control action", I started reading the docs after I figured out that using CLI, running NXOS 9.3(12). According to https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3548...

r.heitmann · 09-21-2023

the manual is great for new clients/accounts - but I don't find any information how to handle existing accounts, especially how to move from US to EMEA. I'll assume, "almost any" account by european clients will be transferred sooner or later. Questi...

r.heitmann · 09-12-2023

Just porting some EEM-stuff from Nexus 5500/5600 to 9300 - seems to be impossible, or am I just blind? (config-applet)# action 20 ? cli Configure a VSH CLI action collect Collect debugging info using a yaml file counter ...

r.heitmann · 07-19-2023

I'm looking for official documentation about this, and possibilities to fine-tune it. client is using a ***Vendor X*** firewall cluster/pairwhen switching the active-role both cluster-members seem to be active for a short time in parallelduring this ...

r.heitmann · 07-10-2023

just noticed a critical error in a clients UCS-Manager. "[FSM:FAILED]: keyring configuration(FSM:sam:dme:PkiEpUpdateEp). Remote-Invocation-Error: Failed to copy certstore (rsync failed)" unlucky - it is not documented in https://www.cisco.com/c/en/us...

r.heitmann · 11-30-2023

looks like „sw 2“ is the root bridge. - just lower the STP root-priority of your cisco-stack conf t spanning-tree vlan 1 priority 4096 end …for example. - than sw1 will act as the root of the stp topology with active interfaces - the link between s...

r.heitmann · 10-19-2023

(this information is useless for WLC users, I apologize) but disabling the "session-modules" breaks the IOS-CA no CRLs can be downloaded afterwarda "HTTP 502" is returned instead

r.heitmann · 10-19-2023

but - when a) disabling the web-service is no option b) the access-class using standard-ACL is no option c) the router uses VRFs and there seems to be no possibility to limit the HTTP-server to the global-"VRF" or a specific VRF like possible with SS...

r.heitmann · 10-18-2023

you're right - but it's somehow weird, that a simple ip http active-session-modules none ip http secure-active-session-modules none didn't make it to "recommendations" in the Cisco document - Cisco states "workarounds available: no" ... so "disable h...

r.heitmann · 10-18-2023

I'd like to discuss this (request for comments) as a workaround to limit exposure, this is not solving the original issue. https://community.cisco.com/t5/wireless/cve-2023-20198-software-web-ui-privilege-escalation/m-p/4943060#M261828

Member Since	‎05-21-2004 05:17 AM
Date Last Visited	‎12-07-2023 09:52 AM
Posts	113
Total Helpful Votes Received	63

User Statistics

User Activity

Storm-Control Action @ Nexus 3548 - not implemented?

Rehost existing account from intersight-US to intersight-EMEA?

EEM @ Nexus 9000 (limited Feature-Set) Any timeline publicly viewable?

Catalyst: %SW_MATM-4-MACFLAP_NOTIF - official documentation?

UCSM: keyring configuration: Failed to copy certstore (rsync failed)

Re: Spanning-tree - Select alternate port

Re: CVE-2023-20198 Software Web UI Privilege Escalation Vulnerability

Re: CVE-2023-20198 Software Web UI Privilege Escalation Vulnerability

Re: CVE-2023-20198 Software Web UI Privilege Escalation Vulnerability

Re: CVE-2023-20198 Vulnerabilidade Crítica no IOS XE com Web UI ativad