Recently had an external security scan done on my DIR 655 and scan results are stating I have an accessible TFTP Server running. i've been through all the settings, and even upgraded to the latest firmware. Yet security scans are telling me I've got a TFTP Server running. Why would one be showing on the external interface, and how can I stop it?
View 7 RepliesI have been trying to get a PIX 501 firewall reset and have been having the hardest time. Im a student and this is my first experience with a firewall. I have been going through the steps here URL,I cant seem to connect to the tftp server, I have several nic's on my computer and tried them both and even plugged the firewall to the router and tried to use the gateway to connect but it doesn't seem to want to even ping for me.
View 4 Replies View RelatedI've been trying to set up a customers security camera's for remote viewing. He has a HP running Vista, a netgear grt614 vs10 router, and a static IP address through Verizon. My problem is this. I set up port forwarding for port 80. All seems to work well sometimes and I can connect to his DVR no problem. Then other times I can't connect at all. I'll run a port checker and it will tell me port 80 is closed. Is it possible that Verizon will off and on block inbound port 80? I seem to only be able to connect during buisness hours. Is it possible that his PC needs to be on for the port to be open. The DVR is the server which is always on and the router is always on. I don't know why the computer would have to be on.
View 6 Replies View RelatedI wonder if dir825 with ddwrt firmware are able to set up additional tftp server? I try to serve dir825 both as tftp server and dhcp server to allow remote client to have pxe booting from it. ( the booting image file would be located in external HD attatched to dir825's usb port )
View 1 Replies View RelatedI boot up my computer. I close it over. come back later. open it. Computer will connect but with the small yellow triangle. Thing is though, it's only my computer that ever has issues with my internet connection. My sisters laptop has never had an issue with out internet. Yet my laptop is able to connect to the neighbors internet fine. The solution to my problem almost all of the time is to simply reboot my computer, which solves the problem(most of the time). But i'm getting so sick of having to do it. The other times when a reboot doesn't work I have to manually reset the internet. As i'm typing this I'm on my neighbors internet. my sister is connected fine to our internet but my laptop simply won't work with it so i'll have to reset it when i'm finished this Some useful information might be that this problem only started happening ever since my computer got wiped.I've tried updating the drivers but apparently they're up to date.
View 5 Replies View RelatedA company with 20 branches in Rio de Janeiro area. The main servers are in a datacenter located in downtown.Each branch has a RV042 router with firmware version 1.3.12.19-tm (Feb 13 2009 13:03:21) installed.All users in this network have a proxy configuration pointing to proxy.[blah].com.br port 3128.the HTTP/HTTPS traffic should go through proxy only. [code] Some "smart" users were caught using Ultrasurf application, which changes the proxy settings to go through port 9666 or even 443.In other machines, we've found some black proxies [for example: 212.46.27.142 port 8080].
My objective:
- To close all ports in Firewall -> Access Rules section and grant permission only to some selected and specified ports.
- To redirect all HTTP/HTTPS connections to go to proxy's IP address only.
Which Access Rules can I set in these RV042s in order to block and prevent these users to continue abusing this network?The users who were caught using Ultrasurf were fired.
I have several SGE2000 in production and every night I save the current configuration to a tftf server... from time to time I get the following error: [code] Can't open TFTP client.At this time, the only way to be able to save the config again is rebooting the switch, but this is not a solution I am comfort.
View 5 Replies View RelatedI put my laptop in safe mode w/ networking and started to run Microsoft safety scanner, then when the scan is almost finished the whole thing shuts down.
View 5 Replies View RelatedAs part of my business' PCI compliance regime, we are regularly scanned for vulnerabilities. Today we started getting notifications of failure on all of the QuickVPN ports (443, 60443) for the following:
Details: Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
06/11/12 CVE 2009-3555 Multiple vendors TLS protocol implementations are prone to a security vulnerability related to the session-renegotiation process which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context.
Cisco, will you be issuing a firmware update to address this anytime in the near future? Presumably it effects all the other RV routers as well.
I'm currently investigating an issue for one of our customers where one of their 3750 Core Switch Stacks crash / becomes unresponsive during a NESSUS Scan.
They've diabled DoS testing and have ensured that safe scanning is enabled. For the test they are port scanning all of their VLANs (around 600 internal addresses).
The network consists of 2x 3750 Switch Stacks connected via fiber, edge switches connect into these cores. Both cores are running HSRP, for VLAN gateway redundancy.
Issue Being faced is as follows:
During the scan, Core 1 becomes unreachable from Core 2. We can telnet to Core 2 and administer as necessary. However we cannot telnet to Core1, a console connection also fails - the switch stack is unresponsive, but does respond to pings.
On Core 2 I've performed a show proc cpu sorted and can see the IP Input process is running at around 60% and the CPU is highly utilised.
Once Core 1 becomes unreachable the network gradually grinds to a halt, almost mimicking some sort of broadcast storm or Spanning Tree loop.
Interestingly Core 1 HSRP is still active, so the hello packets are still being sent.
The only resolution to the issue is to perform a hard reset of the Core to restore service.
Logs from core 1 show the CPU becomes fully utilised. There is also an error logged indiciating:
%FIB-2-FIBDOWN: CEF has been disabled due to a low memory condition. It can be re-enabled by configuring "ip cef [distributed]"
Both cores are running IOS 12.2.(52) SE IPBASE. I've attempted to reproduce the issue in the office here and although a NESSUS scan does increase switch CPU utilisation I couldn't reproduce the failure scenario.
What may be causing the 1st core to become unresponsive? I've found some articles with regard to a 6500 switch rebooting during a NESSUS scan, and also some HP switches exhibiting similar behaviour but nothing that matches the exact scenario I'm investigating.
When restarting my PC after a short power failure the D-Link connection wizard autostarts trying to connect to my wlan. After a short while I have a connection and is able to access the internet. The connection wizard, however does not register that a connection has been established and continues to attempt to connect for two minutes, then shuts down and immediately starts for another two-minute try....and so on. If I shut it down it just pops up again.This has never occured before. I run Windows 7 on an HP with an AMD processor.
View 3 Replies View RelatedWe have a LMS 4.2 installed. And I see the tftp port is open on it. however, every time, i tried to "copy running tftp" to the LMS from a switch, it says the Trying to connect to tftp server Connection to Server Established.TFTP put operation failed:Access violation
i seem not be able to find where to configure the tftp server.
I am trying to implement a small VoIP LAN (you can see the lan in attachments)for a personal project. I am using:
- 2 x XP (on which i installed Cisco IP Communicator 7.0.3.0)
- 1 x Ubuntu (running GNS3 with a c3600 Router)
The problem is that the phone which is not in the same LAN with the tftp server cannot register.
1) Can a phone register to a tftp server from another LAN ?
2) If the answer for 1) is yes, what am i doing wrong (you can see the details in the attachments)? I mention that the ping works well anywhere in the LAN.
I have a questions on an Ip phone when getting the firmware from the TFTP server (e.g. CME) after bootup,- After the registration with CME, the IP phone will getting an auto config file which is the Default.xml file. - The CME will acts a a TFTP server which contains all the IP phone's firmware for different models like 7970 and 7640 in different directories.- The CME have configured with the directory path for all the IP phone when the IP phone come to TFTP and acquired the firmware.Let say I have a phone registered is 7970 and what is the mechanism that governs that my 7970 is not downloading the wrong firmware from the TFTP? Let say it might wrongly downloaded the 7640 firmware? Who take care of this? The phone itself? or the CME will tell the IP phone to take only the 7970 firmware via the Default.xml file?
View 1 Replies View RelatedI added some files to the hard drive which is connected to EA4500 by USB. I went to the Storage--Media Server Tab and clicked Scan All. I turned on the TV and pointed the DLNA Media Server at the hard drive.
The new files did not show up. They did show up a few hours later. Does the Scan button do anything?
I work at a hospital and one of our department uses specialized software created by Varian Medical Systems. It has been brought to my attention that one of those applications has trouble opening during the day. I had the users demonstrate the issue and from what they explained to they are supposed to be able to open the application, log in, and be presented with a list of radiology images to choose from. Unfortunately, during the day this fails often and they have to try 3 or 4 times before it actually works. It behaves differently after 4 pm, and seems to work after the 1st or 2nd time at that time of the day. According to what I've been told this has been an issue as long as they can remember.
Varian has told me that they have done a number of things on their side to rule out their software and they think it is a network issue. We used Solar winds Engineer's Tool set (specifically the Network Performance Monitor) to monitor their switch and it is reporting no errors and the utilization graphs show that the ports involved have very little utilization. The most heavily utilized port is hovering between 10 and 5 person (Fa0/40). I've included a network diagram, but basically we have 1 10/100 Cisco 3350 switch (c3550-ipservices-mz.122-25.SEB4.bin), 4 clients, and 2 servers involved. They all are connected to the same switch at A-Full/A-100mbps. Although the Network Performance Monitor doesn't show any errors or over utilizaton of the ports in the the CLI I do see 35 output buffer failures and 35 under runs on the port connected to one of the servers (Fa0/40). They were a little higher and I cleared them about two weeks ago and then rebooted the switch, because I found that it could alleviate these types of errors.
They say the software use ports 5000, 55000, 55010, and 55020. We tried a packet capture, but I didn't have enough experience/knowledge to get anything useful out of it. I also checked the event logs on the clients and servers and nothing there indicates a issue in the software. They want us to replace the switch with a gigabit switch, but we have a REALLY limited budget and I would rather not if it isn't necessary. What I could try in order to rule out the network?
Is there a way to backup the configuration file to a tftp server? I've tried "copy start tftp" and copy run tftp". No luck, I get an error message.
View 1 Replies View Relatedow to backup Cisco ASA-5510 from a Linux server via TFTP?I do know how to backup a switch or a router. Basically creating an access list such as:
access-list 55 remark PERMIT hosts requesting TFTP access
access-list 55 permit host 172.16.0.27
and allowing access to
tftp-server nvram:startup-config 55
all this inside the router or the switch. From the Linux box just running a simple command such as:
tftp 172.16.0.3 -c get startup-config newbackup.conf
where 172.16.0.3 is the IP address of the switch and newbackup.conf is the name of the config file stored on the Linux machine.So, how do I do that with an ASA box? how to backup ASA from inside it.
I need to do one Catalyst 5500 as a TFTP server.Can I do it?Is the catalyst available to be a tftp server?
View 4 Replies View RelatedHow do i go about setting up a TFTP server from laptop to Cisco ws-C3750 48P Switch, I need to pull the image off the switch and place it on an other switch that has a corrupt image, The switch which is corrupted is the same as above Cisco ws-C3750 48P.
View 1 Replies View RelatedI am trying to convert two Aironet 1141n access points to autonomous stand-alone units. I have connected the console cable and I can see the unit giving information in the console window, but I cannot type any commands. When I try to get the unit to upload the c1140-k9w7-tar.default file by holding the mode button in for 20-30 seconds, it shows it is examining the file, and then states that the connection to the tftp server has timed out. My windows firewall is off, the interface is configured as 10.0.0.2 255.255.255.0 and the tftp server is showing that.
View 15 Replies View RelatedI have been looking at grading the IOS version on our 6509-E however there is not enough space on disk:0 to upgrade to the version I need to install. The question I would like to ask is - is it possible to boot the IOS from a TFTP server? If this is possible what configuration do I need on the 6509 to enable this. How does the 6509 know about the TFTP server as an IOS is not installed and therefore it will not have a network configuration
View 2 Replies View RelatedI have a Cisco 831 router (c831-k9o3y6-mz.124-5c.bin) that cannot backup the config to a local tftp server. I have seen this behavior on a few different Cisco devices over the years and have never found a solution. The connection is made to the tftp server (in this case tftpd but similar behavior on any tftp server) and a blank file is created on the target machine file system, but the data is never transferred.
The router shows %Error opening tftp://192.168.0.2/router-confg (Timed out) [Failed]
The tftpd log shows 5 repeated attempts at the file write.
Connection received from 192.168.0.1 on port 53570 [25/05 11:56:40.922]
Write request for file <router-confg>. Mode octet [25/05 11:56:40.922]
Using local port 61607 [25/05 11:56:40.922]
<router-confg>: rcvd 0 blk, 0 bytes in 3 s. 0 blk resent [25/05 11:56:43.922]
Connection received from 192.168.0.1 on port 53570 [25/05 11:56:43.923]
[Code]...
This is also stopping me upgrading the image on the router as I cannot transfer in the other direction either.
I'm on my 3rd Virgin media 615 today, the last one arrived yesterday and I opened the box to fine a rev d with old bios installed, throw hands in air and all that and then proceeded to upgrade to 4.13 which I have found to be stable and work ok, the other two grow to have the wireless failure issue, I could moan here about VM but hey there's no point so I have come here for adviseafter I found the last one wireless going down, daily trips from the kids down to me to ask why the internet isn't working etc etc I started to investigate, I found the 4.13 and gened up a bit, looked at the 3rd party code and came back to Dlinks own code, anyway I have seen in the last few days hundreds of similar port scans. [code]
Now is the the router being a little sensitive to harmless software companys scans to see if products installed etc or are they something to worry about now I know whats going on if its the latter, and I don't think anyones got in yet but I would like to ban these ip's and to be honest I'm not sure of the best way also I noted a UDP active session that not a part of my subnet too mine being a standard 192.168.0.*and the other being 192.168.4.*.
I need to transfer a config from a TFTP Server to a 4507 and a 6513. When I transfer the config to both those switches, does it require a reboot?
View 5 Replies View RelatedI am trying to copy IOS from my TFTP server which is on my laptop to cisco 2960 switch
I am able to ping to switch from my laptop, connectivity is fine, tftp server is running
Current Image on Switch --> C2960-LANBASE-MZ.122-25.SEE3.bin --> trying to upgrade to --> c2960-lanbasek9-mz.122-53.SE2
I am getting below error when trying to upgarde IOS:
2960-SW#copy tftp: flash:
Address or name of remote host []? 10.1.x.x
Source filename []? c2960-lanbasek9-mz.122-53.SE2
[Code].....
how can i take backup of startup config to tftp server through tftpd server.I am using 4506e switch
View 2 Replies View RelatedI have a dir-655 Firmware Version 2.00, hardware:B1 It's a new wireless router and it's just a week ago I got it.My problem is that the wireless is just stopping to work, it just disappear.When I do a rescan of wireless AP's the ssid and my AP is not showing up.I have to reboot the router the hard way by unplugging the power source.I have multiple computers and wireless devices, and they all loose connection and no one even see the ssid (AP) defined on my dir-655.It's connected to a cable modem switch (without nat), I'm running dhcmp on my router. No Qos engine is enabled.This happens when I'm working from home with a VPN tunnel from my pc to my companies network.I've tried to make a ticket on this on dlink support pages, but their support system only works on IE7, and the password is anyway rejected. how to solve the termination of my wifi ap?
View 9 Replies View RelatedConnected our Brother MFC-8820D printer/scanner/fax directly to one of the 4 Ethernet ports on the back of the DIR-655 in our new install with this router, and all computers can print to it, whether connected via an Ethernet cable or via wireless, but none of the printers can scan. We just get an error message. Scanner driver is installed on all computers. Same printer worked fine via Ethernet on a Windows small business server for printing and scanning. Windows server no longer used or connected. Only DIR-655 as we are dumbing down and getting rid of our Windows server and have gone to a NAS solution connected to the DIR-655.
What can we do to make the scanning work on our Multifunction printer?
i am gettinfg the following error while copy the configuration from 6590 to tftp server %Error opening tftp://x.x.x.x/yyyy (Timed out)
1) The file is getting created in the TFTP server but it is empty and a Zero Kb file
2 ) I can able to ping to the FTTP server from the switch
3) I can able to ping to switch from the tftp server
4) The same tftp server is working wih all another Switches (i have checked with anothed TFTP softwares also but the same problem)
5) The switch is in the different subnet, the switch is having several SVIs. Also Configured the command "ip tftp source interface vlan361" (This interface can able to ping from the tftp server and also can do extended Ping from this IP to the tftp server)
6)The communication between Ftp server and the switch want to cross Point to Point WAN link (Another switches can communicate with the tftp server through the same wan link)
7)If i run FTP server on the same System and try to copy running config from 6509 to FTP some times it is working and some times it is giving the error.
I am running Cisco ACS 5.1 802.1x with certificate based authentication for Wired and Wireless connections. The issue that I am having is that when a user comes in from home with their laptop the wireless connection works, they pass the authentication and have network access fine. But when the plug the laptop into a docking station the LAN connection fails and gets put in the Auth Failure Vlan. A reboot of the phone/ shut/no shut fixes this, but I really need to find a resolution.This is an intermittent fault and only effects users with both LAN and WLAN enabled. Running ACS 5.1.0.44, all Cisco 3750s - c3750-ipservicesk9-mz.122-55.SE.Certificates are issues by group policy and only using computer authentication.
View 2 Replies View RelatedMy Vista computer and my XP computer had been happily "talking" to each other, sharing files and printers. I got tired of paying $70 a year for Norton Internet Security, so I uninstalled it (using the Norton removal tool) and selected the Windows Firewall. I also installed Avast! and SuperAntiSpyware. Now neither computer talks to the other. When I run "\FamilyRoomHPOfficeJet" I get "Windows cannot access \FamilyRoomHPOfficeJet" . Check spelling, etc. Get error code 0x800704b3 "The network path was either typed incorrectly, does not exist or the network provider is not currently available..." What have I messed up by going from the Norton firewall to the Windows one.
[code]....
My IE 8 willnot open pages secured with ssl128 encryption. i can not open my account at[URL].. A box appears with "OK" message at the centre and "!" sign at the left side. it carries the following web address-[URL]
View 2 Replies View Related