Wednesday, February 12, 2020

ISE Posture Required Time Based Line List

MACOS
After return from sleep

    22:58:34    Searching for policy server.
    22:58:34    Checking for product updates...
    22:58:35    The AnyConnect Downloader is performing update checks...
    22:58:35    Checking for profile updates...
    22:58:35    Checking for product updates...
    22:58:35    Checking for customization updates...
    22:58:35    Performing any required updates...
    22:58:35    The AnyConnect Downloader updates have been completed.
    22:58:35    Update complete.
    22:58:35    Scanning system ... 
    22:58:37    Checking requirement 1 of 2. 
    22:58:37    Checking requirement 2 of 2. 
    22:58:37    Compliant.



4 sec

Thursday, October 3, 2019

Friday, November 4, 2016

Tipping Point SMS version 4.x Password Recovery

Password Recovery for vSMS

When Starting mgmt is displayed, select the P key (capital or lowercase). IMPORTANT! The P must be entered within three seconds to trigger password recovery. If this method of password recovery is successfully initiated, the "Password recovery enabled" message is displayed.




When the SMS completes the boot sequence, the factory SuperUser account is reactivated and the password is the serial number of your SMS.


Monday, March 10, 2014

GNS able to virtualize ASA



please use asdm-715-100.bin to support latest java.

Remember to edit preference to preview command to learn how ASDM push command to CLI






P:S
Share IOS file.

most useful of ASDM is see live log when troubleshooting production network,



Autonomous mode

Deploy standalone Access point

AP nowadays come with Controller(WLC) based IOS, however that is possible to convert the access point to standalone access point (save $)

CAP-2602I
Controller based AP.

LAP-1042
Lightweight  Access point


Using a TFTP Server to Return to a Previous Release
http://www.cisco.com/en/US/i/templates/note.gif

Note http://www.cisco.com/en/US/i/templates/blank.gifThis section does not apply to Cisco C3201WMIC and Cisco C3201LAP.

Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:

Step 1 http://www.cisco.com/en/US/i/templates/blank.gifThe static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
Step 2 http://www.cisco.com/en/US/i/templates/blank.gifMake sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
Step 3 http://www.cisco.com/en/US/i/templates/blank.gifSet the timeout value on the TFTP server to 30 seconds.
Step 4 http://www.cisco.com/en/US/i/templates/blank.gifOn the PC where the TFTP server is located, perform these steps:
a. http://www.cisco.com/en/US/i/templates/blank.gifDisable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.
b. http://www.cisco.com/en/US/i/templates/blank.gifEnsure all Windows files are visible. From Windows Explorer, clickTools > Folder Options > View; then uncheck the Hide extensions for known file types check box.
Step 5 http://www.cisco.com/en/US/i/templates/blank.gifRename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.
Step 6 http://www.cisco.com/en/US/i/templates/blank.gifConnect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
Step 7 http://www.cisco.com/en/US/i/templates/blank.gifDisconnect power from the access point.
Step 8 http://www.cisco.com/en/US/i/templates/blank.gifPress and hold MODE while you reconnect power to the access point.
Step 9 http://www.cisco.com/en/US/i/templates/blank.gifHold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
Step 10 http://www.cisco.com/en/US/i/templates/blank.gifWait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
Step 11 http://www.cisco.com/en/US/i/templates/blank.gifAfter the access point reboots, reconfigure it using the GUI or the CLI.

Scenario
C3750X –-- CAP-2601I

·         1 vlan 1 SSID


Switch configuration
switchport access vlan xxx Just 1 vlan switch will control
switchport mode access

·         Multiple vlan & SSID,
Note: If have multiple Vlan/SSID Trunk needed to configure on the switch port

Switch configuration
switchport trunk encapsulation dot1q
switchport mode trunk
switchport allowed vlan xx, xx, xx
switchport trunk native vlan xx Usually the management IP for the AP

Access Point Configuration

show run
Building configuration...
dot11 ssid GLBSYM
   authentication open
   guest-mode Broscast SSID
!
!
dot11 guest
!
interface Dot11Radio0 2.4Ghz Radio
no ip address
!
encryption key 1 size 128bit 7 6A074B7F357E124C750C1F17280E transmit-key
encryption mode wep mandatory
 !
ssid GLBSYM
!
stbc
channel 2437
!
interface Dot11Radio1 5Ghz Radio
no ip address
!
encryption key 1 size 128bit 7 6A074B7F357E124C750C1F17280E transmit-key
encryption mode wep mandatory
 !
ssid GLBSYM
!
stbc
speed  basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
power local 11
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1 bridge virtual interface <- the management IP address
ip address 10.93.107.220 255.255.255.128
!
ip default-gateway 10.93.107.129 <- Gateway IP address, normally point to DHCP server or DHCP relay
all
!

End