Catalyst 3750 Series Switches in the stack do not boot with the new image after a software upgrade.

I faced with this issue after upgrading IOSs on my 3750 series switches stack. Stack consists of 4 catalyst 3750 series. After I have copied anf setting new IOS file as a boot file on has failed to boot and I got "Switch is not usable" error.

My solution.

• I have removed stack cables from the switch that has failed to boot
• I have set the new IOS with boot sytem .... command.
• I ensured that the switch booted up with new IOS
• I have powered off the switch.
• I have connected stack cables and power on the switch.

Read more...

List domain user's folder access permissions

Download to tool from link.  Install it to your computer,

Go to the folder that you install subinacl from command prompt and execute the command.


subinacl /testmode /noverbose /outputlog=c:\permission.TXT /subdirectories=directoriesonly h:\*.* /findsid=domain\username
Read more...

MS SQL Server DB Security Auditing

You can use the command below for ISO 27001 requirements checking.

MS SQL Server Version

SELECT @@version

List of Databases on MS SQL Server

select * from sys.databases

List of All Users on MS SQL Server

SELECT * FROM sysusers where islogin = 1

List of Users that have DBA authorization

sp_helprolemember db_owner

List of Users that have authorization beyond Select command

SELECT a.*, b.* ,*

FROM sys.database_principals a

INNER JOIN sys.database_permissions b ON b.grantee_principal_id = a.principal_id

WHERE b.permission_name not like '%SELECT%'

 

List of users that their passwords are empty

 

select name

from sys.sql_logins

where pwdcompare('', password_hash) = 1

 

 

Check if password and expiration policy is applying to users

 

select name ,is_expiration_checked,is_policy_checked ,*

from sys.sql_logins where is_expiration_checked = 0 or is_policy_checked= 0

 

List of SYNONYMs

 

If you create public synonyms all users can read tables, so synonyms usement is not suitable for data secuirity.

 

select * from sysobjects where xtype = 'SN'

 

 

 

 

 

Read more...

Enable SSH and disable Telnet on Cisco Catalyst series switches

Enable SSH and disable Telnet on Cisco Catalyst series switches


Conf t
aaa new model
username cisco password yourpassword
ip domain name yourdomain.com
crypto key generate rsa
(you can choose size of key modules from 360 to 2048)
end
line vty 0 4
transport input ssh
end

to prevent telnet access to switch


access-list 110 permit tcp any host 192.6.1.7(your switch ip)  eq 22
access-list 110 deny tcp any host 192.6.1.7
access-list 110 permit tcp any any
interface range  gigabitethernet1/0/1-24
ip access-group 110 in
end
copy run start




Read more...

Cisco Catalyst 3750 IOS Upgrade

Cisco Catalyst 3750 IOS Upgrade Steps (by using TFTP)

1. Download suitable ios image file from CISCO web site.(do not forget to Check the DRAM and flash memory requirements)
2. Copy releated file to flash memory by using copy tftp:filename flash:  command

Example

copy tftp:c3750-ipbasek9-mz.122-55.SE6.bin flash

3) if you havent got enough free space in flash memory you should delete the old boot file by using;

delete /f /r flash:filename command before copying new one.

Example

delete /f /r flash:c3750-ipbase-mz.122-50.SE5.bin

4) Verify the MD5 checksum of a file by using verify /md5 flash:filename command

Example

verifiy /md5 flash: c3750-ipbasek9-mz.122-55.SE6.bin

5) set the new file as boot file;

conf t
boot system switch all flash:c3750-ipbasek9-mz.122-55.SE6.bin
write memory
reload







Read more...

Error reading flash (is a directory)

This error means that the file you want to copy from flash to tftp is under a directory.

Follow the steps below

• execute sh flash command

CiscoSw#sh flash
Directory of flash:/c3750-ipbase-mz.122-50.SE5/
    5  drwx        4608   Mar 1 1993 03:09:56 +03:00  html
  424  -rwx     9574343   Mar 1 1993 03:13:20 +03:00  c3750-ipbase-mz.122-50.SE5
  425  -rwx         643   Mar 1 1993 03:13:20 +03:00  info
15998976 bytes total (3625472 bytes free)

• execute command cd flash:c3750-ipbase.mz.122-50
• execute dir

CiscoSw#dir
Directory of flash:/c3750-ipbase-mz.122-50.SE5/
    5  drwx        4608   Mar 1 1993 03:09:56 +03:00  html
  424  -rwx     9574343   Mar 1 1993 03:13:20 +03:00  c3750-ipbase-mz.122-50.SE5.bin
  425  -rwx         643   Mar 1 1993 03:13:20 +03:00  info

• then you can copy ios file to tftp by usinf copy flash tftp command as stated below;

CiscoSw#copy flash:c3750-ipbase-mz.122-50.SE5.bin tftp:
Address or name of remote host []? 192.6.1.57
Destination filename [c3750-ipbase-mz.122-50.SE5.bin]?
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
9574343 bytes copied in 36.054 secs (265556 bytes/sec)

Read more...

Creating Cisco command aliases

You can use command aliases as a shortcut in Cisco Network Devices.

Example

alias exec save copy run start
alias configuration save copy run start
alias interface save copy run start
alias line save copy run start

After executing command above. You can use save command instead of copy run start command on exec, configuration, interface and line levels.
Read more...