- NZNOG - lists.nznog.org

Re: [jamesr@rd.bbc.co.uk: Warning: Cisco RW community backdoor.]
by Andy Linton 26 Feb '01

26 Feb '01

At 14:44 27/02/2001 +1300, David Robb wrote: >On Tue, 27 Feb 2001, Chris Wedgwood wrote: > > > Unless you have IOS 11.1 where this doesn't work :) > > > > "no snmp-server" > >11.2 seems to require the same treatment. I tried the "patch" on IOS 11.2 and 11.3 boxes such as 2500s and 2924 switches. I had to leave out the "log'" option on the access list. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cisco IOS ILMI/SNMP
by Roger De Salis 26 Feb '01

26 Feb '01

Gentlefolks, Cisco has become aware of an issue with ILMI (and there is is another advisory pending) across several versions of IOS. Please look at the PSAT pages on www.cisco.com, as info will be available very shortly with full details. Rgds Roger De Salis James A.T. Rice wrote > Its looks like parts of my earlier email are somewhat misleading, > the ILMI community appears to only allow RW access to the system > object and possibly some more objects. Its not a 'standard' open > RW community. hence the damage caused by this backdoor is limited. > There is still some write access however, so the fix mentioned > below is still highly recommended. > > And of course - it allows people to read what IOS/model cisco > you have, which could be used to find exploitable bugs in that > particular release. Oh I wonder what the chances of having a > router stolen due to discovery of system.sysLocation is! :-) > > Warm Regards > James -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L8, ASB Tower, 2 Hunter St /) +64 4 496 9003 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[jamesr@rd.bbc.co.uk: Warning: Cisco RW community backdoor.]
by Joe Abley 26 Feb '01

26 Feb '01

----- Forwarded message from "James A. T. Rice" <jamesr(a)rd.bbc.co.uk> ----- Date: Tue, 27 Feb 2001 00:39:38 +0000 (GMT) From: "James A. T. Rice" <jamesr(a)rd.bbc.co.uk> X-Sender: <jamesr(a)inet15> To: <members(a)lonap.net>, <ops(a)linx.net> Subject: Warning: Cisco RW community backdoor. Precedence: bulk If your router responds to `snmpwalk router.isp.net.uk ILMI`, you probabally will want to do the following to disable it: conf t snmp-server community ILMI RO 99 access-list 99 deny any log (pick another spare access-list if 99 isn't available) If you dont, assuming your ios/hardware combination supports it, (most of the bigger routers do) anyone can do things like: `snmpset router.isp.net.uk ILMI system.sysName.0 s \ "ALL YOUR ROUTER ARE BELONG TO US."` Thats a harmless example. You can do almost anything with RW snmp. Warm Regards James -- James A. T. Rice | Email: jamesr(a)rd.bbc.co.uk Internet Operations Engineer | Phone: 01737 839 737 BBC Internet Services, Kingswood Warren, Tadworth, Surrey, UK. ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

IOS & BGP
by James Tyson 26 Feb '01

26 Feb '01

Does anyone know what version of IOS the "bgp go faster you bitch" command appears in? It doesnt appear to be in 12.0(14)S. Sigh. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: ATM card in Cisco 4500
by Scott, Arron 26 Feb '01

26 Feb '01

Not speaking on behalf of any company in particular, I just wanted to say I know of a number of 4500's and 4700's running in production with the ATM card. Their throughput is limited by the CPU performance, but you can expect to get upwards of 40Mbps through it. If you want more than an OC3 I would suggest you look at something like a 7600 OSR, not speaking on behalf of any company in particular of course. Now we just need a Telco or three in NZ to support ATM at STM-4 rates. Arron Scott -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Dennis Su Sent: Tuesday, 20 February 2001 7:04 p.m. To: nznog(a)list.waikato.ac.nz Subject: ATM card in Cisco 4500 Hi, We would like to purchase a ATM card for a Cisco 4500. Someone has mentioned to us that its ATM card is not very stable, although I doubt it. 4500 series router has been on the market for such a long time after all. I wonder if anyone can give us some previous experience. Good or bad and what type, all welcome. Thanks, Dennis ------------------------------------------------------------------------ ---- ----------------- Dennis Su, BSc MSc Network+ MCP CCNA CCDA CCNP CCDP Team Leader, Network Admin and Development IT Infrastructure, ITS, University of Waikato Hamilton, New Zealand phone:64 7 838 4183 email:d.su(a)waikato.ac.nz http://network-services.its.waikato.ac.nz/people/dennis.html --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 11

software required -- could be urgent
by Chris Wedgwood 24 Feb '01

24 Feb '01

... but probably it's not. Serious network software required. Only the network part isn't completely true :) I _need_ RollCage or RollCage II -- if I don't get this I'm sure something serious will happen; the entire Internet will stop routing or something. I am sure it will. I can feel it. I know the former was for sale at the warehouse for 20 bucks or so, but I can't find it now... the later, no idea. They are both old games by todays standards. Someone somewhere must have either both or one of these games. ... please ... :) --cw P.S. SPAM SPAM SPAM SPAM SPAM SPAM SPAM! --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: ATM card in Cisco 4500
by Scott, Arron 23 Feb '01

23 Feb '01

ATM is FAR WORSE than that, but it helps sell stuff in New Zealand ;-) Arron Scott Not speaking for any company in particular -----Original Message----- From: Joe Abley [mailto:jabley(a)automagic.org] Sent: Friday, 23 February 2001 3:49 a.m. To: Scott, Arron Cc: Dennis Su; nznog(a)list.waikato.ac.nz Subject: Re: ATM card in Cisco 4500 On Thu, Feb 22, 2001 at 02:17:09PM +1100, Scott, Arron wrote: > Now we just need a Telco or three in NZ to support ATM at STM-4 > rates. Is anybody really waiting for that? If you're shifting an STM-4s worth of data around, it's probably a stream of packets, and it's probably IP, and you probably want to use POS. You probably don't want the additional complexity, cost, operational overhead, cell tax and SAR latency that using ATM would involve. Also, ATM is the work of Satan, which should be mentioned, for the record. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

RE: ATM card in Cisco 4500
by Scott, Arron 22 Feb '01

22 Feb '01

Yeah yeah ... we're all telling the Service Providers that Broadband is critical, but that still doesn't change the fact that ATM aggregation, ADSL/FR access, legacy support, and the ability to run a fair bit of point-to-point bandwidth over an STM-4 ATM access is still quite attractive for a market like NZ. And being one who had to fight VERY hard to get POS inside a certain Telco here at all, I would love to see more widespread use of it. STM/4 ATM gives my customers what they want and need, not what I want to sell !!! Arron Scott -----Original Message----- From: dean(a)flatnet.gen.nz [mailto:dean(a)flatnet.gen.nz] Sent: Friday, 23 February 2001 4:45 p.m. To: Scott, Arron Cc: Joe Abley; nznog(a)list.waikato.ac.nz Subject: Re: ATM card in Cisco 4500 I'd rather sell something that had a future, and not cripple networking in NZ any more than it already is. No matter how much easier it made the sale. Customers listen to what vendors have to say. Vendors should be telling them the truth, not just what they think will make the sale. Long live POS =) Dean Not speaking for, or about, any company in particular On Fri, Feb 23, 2001 at 02:01:55PM +1100, Scott, Arron wrote: > ATM is FAR WORSE than that, but it helps sell stuff in New Zealand ;-) > > Arron Scott > Not speaking for any company in particular > > -----Original Message----- > From: Joe Abley [mailto:jabley(a)automagic.org] > Sent: Friday, 23 February 2001 3:49 a.m. > To: Scott, Arron > Cc: Dennis Su; nznog(a)list.waikato.ac.nz > Subject: Re: ATM card in Cisco 4500 > > > On Thu, Feb 22, 2001 at 02:17:09PM +1100, Scott, Arron wrote: > > Now we just need a Telco or three in NZ to support ATM at STM-4 > > rates. > > Is anybody really waiting for that? If you're shifting an STM-4s worth > of data around, it's probably a stream of packets, and it's probably IP, > and you probably want to use POS. You probably don't want the additional > complexity, cost, operational overhead, cell tax and SAR latency that > using ATM would involve. > > Also, ATM is the work of Satan, which should be mentioned, for the > record. > > > Joe > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: ATM card in Cisco 4500
by dean＠flatnet.gen.nz 21 Feb '01

21 Feb '01

Having a look on the Cisco Web site it seems that the fastest interface is an oc3. http://www.cisco.com/univercd/cc/td/doc/pcat/4700m.htm It might be an old website though. If it were me I would POC this to death before I bought it. The 4500 is pretty old and MAY not be able to feed an oc12 and do everything that you want it to do. Dean (Who does not speak on behalf of any employer) On Thu, Feb 22, 2001 at 11:40:17AM +1300, Lindsay Druett wrote: > OC12 > > -----Original Message----- > From: dean(a)flatnet.gen.nz [mailto:dean(a)flatnet.gen.nz] > Sent: Thursday, 22 February 2001 11:39 > To: nznog(a)list.waikato.ac.nz > Subject: Re: ATM card in Cisco 4500 > > > > On Wed, Feb 21, 2001 at 04:04:21PM +1300, Dennis Su wrote: > > > We would like to purchase a ATM card for a Cisco 4500. Someone has > > > mentioned to us that its ATM card is not very stable, although I doubt > it. > > > 4500 series router has been on the market for such a long time after > all. I > > > wonder if anyone can give us some previous experience. Good or bad and > what > > > type, all welcome. > > What speed ATM are you talking here? > > > Dean > (Who does not speak on behalf of any employer) > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Re: ATM card in Cisco 4500
by dean＠flatnet.gen.nz 21 Feb '01

21 Feb '01

=) No Problems. I'd still POC it, But thats just me. Dean (Who does not speak on behalf of any employer) On Thu, Feb 22, 2001 at 12:06:03PM +1300, Lindsay Druett wrote: > I beg your pardon, it is an OC3 indeed (what was I thinking ?) > > -----Original Message----- > From: dean(a)flatnet.gen.nz [mailto:dean(a)flatnet.gen.nz] > Sent: Thursday, 22 February 2001 11:50 > To: Lindsay Druett; nznog(a)list.waikato.ac.nz > Subject: Re: ATM card in Cisco 4500 > > > > Having a look on the Cisco Web site it seems that the fastest interface is > an oc3. > http://www.cisco.com/univercd/cc/td/doc/pcat/4700m.htm > > It might be an old website though. > > If it were me I would POC this to death before I bought it. The 4500 is > pretty old and MAY not be able to feed an oc12 and do everything that you > want it to do. > > > Dean > (Who does not speak on behalf of any employer) > > On Thu, Feb 22, 2001 at 11:40:17AM +1300, Lindsay Druett wrote: > > OC12 > > > > -----Original Message----- > > From: dean(a)flatnet.gen.nz [mailto:dean(a)flatnet.gen.nz] > > Sent: Thursday, 22 February 2001 11:39 > > To: nznog(a)list.waikato.ac.nz > > Subject: Re: ATM card in Cisco 4500 > > > > > > > On Wed, Feb 21, 2001 at 04:04:21PM +1300, Dennis Su wrote: > > > > We would like to purchase a ATM card for a Cisco 4500. Someone has > > > > mentioned to us that its ATM card is not very stable, although I doubt > > it. > > > > 4500 series router has been on the market for such a long time after > > all. I > > > > wonder if anyone can give us some previous experience. Good or bad and > > what > > > > type, all welcome. > > > > What speed ATM are you talking here? > > > > > > Dean > > (Who does not speak on behalf of any employer) > > --------- > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > where the body of your message reads: > > unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0