Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Rajeshpvk3
06-04-2019
Stats
Member since
09-28-2007
650
Posts
58
Helpful
3
Solutions
05-31-2019
05:21 AM
Hi All, I have wide range of routers and switches in various models and versions running snmp version 2. I am planning to migrate to snmpv3, so as a first path, how to check what all are the devices that supports snmpv3 like ios ? In ios feature navigator, different snmpv3 filters are there and when I select multiple fields it gives error, so confused on how to check what is the best version for a router and if that router/switch model supports it or not ? kindly assist. regards SecIT
... View more
- Tags:
- snmpv3
Labels:
08-21-2017
10:01 PM
Dear Team, We had ASA with 8.2 version and the egress interface was determined by routing table. Post upgrading to 9.x egress interface is determined from xlate table now. When I shift link from one ISP to another ISP (segment1,segment2) or vice versa I have to manually change the position of the Nat rules, else we are unable to access the network servers through these segment1&s from dmz network. Is there any work around to fix this issue. As per cisco this is by design and route-lookup is possible only for static and not for dynamic NAT. I agree with this, but looking for some alternate options or work around. https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/nat_objects.html nat (dmz, segment1) source dynamic any interface destination static obj1 obj2 nat (dmz, segment2) source dynamic any interface destination static obj1 obj2 regards SecIT
... View more
Labels:
06-08-2017
10:37 PM
Hi Julio,
From the attached screenshot of the Cisco Feature Navigator, when filtered with "Netflow V9 Export Format", could not see Cisco 7600 series router in the list.
Pls confirm if I have selected the right search field as "V9".
Pls find the below URL.
http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/nfexpfv9.html#wp1069711
Feature Specifications for NetFlow Version 9 Data Export
Feature History
Release
Modification
12.0(24)S
This feature was introduced.
12.3(1)
This feature was integrated into Cisco IOS Release 12.3(1), and output of the debug ip flow export command was modified to show NetFlow version 9 information.
12.2(18)S
This feature was integrated into Cisco IOS Release 12.2(18)S.
Supported Platforms
Cisco 2600 series, Cisco 3600 series, Cisco 7100 series, Cisco 7200 series, Cisco 7300 series, Cisco 7400 series, Cisco 7500 series, Cisco 12000 series
I do not find Cisco 7600 series router here.
Regards
Rajesh
... View more
06-08-2017
03:59 AM
Hi All, Does Netflow version 9 supported in CISCO7606-S having RSP720-3C-GE module ? Current version is adventerprisek9-mz.122-33.SRE8 and planning to upgrade to 12.3(11)T to support ip flow egress. So kindly advice on this.
regards
SecIT
... View more
Labels:
05-18-2017
10:36 PM
Agreed for the point that Return traffic is not sent Unless NAT. So Spoof is possible
Thanks :) a lot
Is there any tool available which can convert my ip to private while sending packet out. kali linux ?
... View more
05-18-2017
06:58 AM
An user or attacker when it has to reach a destination server, will always have public ip as source (either by modem or router or firewall will do nat) and destination as public.
As per my knowledge if any of these fields are Private, then it will never reach the destination.
If any source ip is private and it reaches the public without nat, then what is the use of PAT/Hide NAT concepts ?
More over as you said, ISP will look into only destination and not the source address to pass the traffic to internet, then you are indirectly saying that ISP is going to do a NAT on the source ip. ? If its going to do a NAT, then again the source ip will be changed to another public ip and Spoofing attack needs the same ip address to be shown as a Servers address (either public or private), then only after reaching the firewall it will detect as a spoofed ip address and will block it if configure properly. Else the firewall will send sync ack to the Server thinking that this is the server who has sent a syn request and finally land up in DOS attack
Sorry to say that i am still not clear on what you have said earlier.
... View more
05-17-2017
11:12 PM
I still wonder how ISP will send a packet when its source ip is Private
( That ISP always can route a private ip-range to your network)
To travel thru internet your ip should be public right
im concerned about only source ip.
... View more
05-17-2017
10:23 PM
Dear All,
As per my Understanding any attacker from outside world cant change their source ip to Private ip address as it is not routable.. Hence they will find out any NATed server in any organization and will assign that NAT Public ip as Source and will try to do Dos attack and Spoof.. Please correct me if i am right... I am thinking from Attacker's point of view. Im sure that most of the firewalls will block such traffic by ip verify urf and antispoofing in ASA and checkpoint respectively.
regards
Rajesh P
... View more
05-15-2017
10:09 PM
Dear All,
IP address spoofing can be defined as the intentional misrepresentation of the source IP address in an IP packet.
My question here is that, If an attacker is spoofing an address that belongs to an organizations Private ip segment, then how the packet will travel over the internet if the header contains Private ip address. Or is that an attacker spoof only a public ip address that belongs to an organizations server which has a public ip ???
regards
Rajesh
... View more
Labels:
04-11-2017
06:39 AM
Hello All,
I have few queries here with regards to Digital Certificates used in site to site vpn.
1. What is the need for Identity certificate along with CA certificate ?
2. In PSK auth, the hash of it will be exchanged in Message 5 & 6 with Ack., In case of Digital certification where does it come ?
3. How the public key is handed over to remote peer and vice versa ?
regards
SecIT
... View more
Labels:
04-03-2017
07:18 AM
Hi All,
Found Cisco Bug ID CSCvd78303 under Field Notice: FN - 64291, affected with 9.1(7.8) and its fixed in 9.1(7.16), but this fix is listed in the download list. Please let me know when this new code will be available (7.1.7.16)? if not, how to get this image ? Any interim or non-interim version lower than this (9.1.7.x) is affected ? so downgrading to 9.1.6 or 9.1.5 or 9.1.4 will fix the problem ?
regards
Rajesh
... View more
Labels:
02-03-2017
03:59 AM
Hi,
My Standby ASA5520-AIP20-K9 is faulty, Cisco suggested alternate part as ASA5520-K8 ^^^ASA 5520 Appliance with SW, HA, 4GE+1FE, DES ; Please Note: ASA5520-K8 ship from Service does come with ASA5500-CF-256MB=
My query is, will the alternate part work in HA, where my Active model is ASA5520-AIP20-K9
... View more
Labels:
01-24-2017
11:00 PM
Hi All,
In SSL CLient less vpn, do we use pool ip address ? or it will be pool less ?
regards
Rajesh
... View more
Labels:
05-31-2019
Hi All,I have wide range of routers and switches in various models and
versions running snmp version...
08-21-2017
Dear Team, We had ASA with 8.2 version and the egress interface was
determined by routing table.Post...
06-08-2017
Hi Julio, From the attached screenshot of the Cisco Feature Navigator,
when filtered with "Netflow V...
06-08-2017
Hi All,Does Netflow version 9 supported in CISCO7606-S having
RSP720-3C-GE module ?Current version i...
05-18-2017
Agreed for the point that Return traffic is not sent Unless NAT. So
Spoof is possible Thanks :) a lo...
05-18-2017
An user or attacker when it has to reach a destination server, will
always have public ip as source ...
05-17-2017
I still wonder how ISP will send a packet when its source ip is Private
(That ISP always can route a...
05-17-2017
Dear All, As per my Understanding any attacker from outside world cant
change their source ip to Pri...
05-15-2017
Dear All, IP address spoofing can be defined as the intentional
misrepresentation of the source IP a...
04-11-2017
Hello All, I have few queries here with regards to Digital Certificates
used in site to site vpn. 1....
04-03-2017
Hi All, Found Cisco Bug ID CSCvd78303 under Field Notice: FN - 64291,
affected with 9.1(7.8) and its...
02-03-2017
Hi, My Standby ASA5520-AIP20-K9 is faulty, Cisco suggested alternate
part as ASA5520-K8^^^ASA 5520 A...
Public Statistics
| Date Registered | 09-28-2007 02:48 AM |
| Date Last Visited | 06-04-2019 01:56 AM |
| Total Messages Posted | 650 |
| Total Helpful Votes Received | 58 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 2 | |
| 9 | |
| 2 | |
| 1 | |
| 5 |
.jpg "Hall of Fame Guru"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 19 | |
| 1 | |
| 3 |
