Password Recovery Procedure Cisco WS-C2960C

Password Recovery Cisco WS-C2960C

1. Connect to the switch with the console cable
2. Unplug the AC adapter from the switch.
3. Press and hold the Mode button
4. Insert AC adapter to the switch but keep the Mode button pressed
5. The SYST LED will flash, after about 45 seconds, the SYST LED will either turn off or stay solid.  
6. Release the Mode button.
7. The console will show a switch: prompt.
8. Initialize the flash sequence.
   flash_init
9. Show the contents of flash.
   dir flash:
10. Rename config.text to config.old
    rename flash:config.text flash:config.old
11. Boot the system back up.
    boot
12. Exit the initial configuration dialog. It will prompt [yes/no]: 
    n
13. Enter enable mode.
    en
14. Rename the configuration file back to its original name.
    rename flash:config.old flash:config.textEnter to confirm.
15. Copy the configuration into memory.
    copy flash:config.text system:running-configEnter to confirm.

Factory Restore Defaults

1. Erase the startup config and reload the switch.
   erase startup-configPress Enter to confirm.
reloadDo not save the system configuration if it prompts for yes or no. Press Enter to confirm reload.
2. Delete the vlan configuration.
   delete flash:vlan.datEnter twice to confirm.
   reloadPress Enter to confirm.
3. Check your the VLAN’s have been reset to default configuration.
   show vlan

Fortinet Expired Certificate 5.4.8

Fortinet Certificate

SSH certificate expired for VPN users.

Here's what was done

(Fortinet 500D 5.4.8 1183)

SYSTEM -> CERTIFICATES

Select GENERATE

Fill in your information in the page and click on OK

Select the certificate that you just created, and select download (you'll see it in the STATUS as "pending" with a small clock icon.

Send that cert off to your authority to get authorized (godaddy or whatever)

When the .crt file is available, click on IMPORT
Import the cert

Once the cert is imported (it should now show "OK"_

goto the location you need this cert applied.
In my instance it was SSL VPN, so i went to VPN -> SSLVPN SETTINGS

Then in the drop down box by SERVER CERTIFICATE I selected the name. and then pressed apply.

Grandstream GXW4216 GXW42XX

Some of this might apply to a GXW42XX series, the 16 port version is the one I've used it on.

RECOVERY MODE

Upgraded or done something to your unit where a normal reset wouldn't recover it?  I applied a firmware that had a bug and got completely locked out.  The resolution was to go into recovery mode, which has a limited capability to upload another firmware directly to the unit.

The key to this..patience.  Patience

If you are not a patient person, this procedure will just fail for you and you'll waste time doing it over and over until you are finally patient.

Current Firmware can be found (at time of blogging) at this location
http://www.grandstream.com/support/firmware

Legacy Firmware can be found here
http://www.grandstream.com/support/firmware/previousfirmware


To get into recovery mode if your firmware messes up, this is how you do it.

• Power it off completely.
• Directly plug the network cable from the GXW42XX into a computer.
• Set the IP of the computer to 192.168.1.235
• Set the mask to 255.255.255.0
  Gateway and DNS are not needed

• Now start a continuous ping to 192.168.1.234In windows CMD prompt, type in ping 192.168.1.234 -t

• You'll see the ping fail, like the above example, but this is normal.
• With the power OFF, press and hold down the reset button that is in this hole.
  You will need something like a paperclip or small pin to trigger the reset of the unit.
  
• While keeping that button pressed, power on the unit (can be a challenge) 
• KEEP the button pressed
• After about 15 seconds, your ping should start responding.

• Once you get positive replies from the ip of 192.168.1.234 (at least 5 in a row first), you can release the reset button.
• Open a web browser and go to http://192.168.1.234

• You will be prompted for a login screen.  use " admin "
• Now you can select a new firmware to upload

• Press the upload button.

• WAIT.
• Wait for the firmware to upload....

The UPLOADING... text blinked and in the corner (Chrome) the uploading percentage slowly increased.

• wait, this part normally takes at least a minute.
• The screen will change after a minute or so, might even go blank.
• Just wait

• and indicate the unit is rebooting.
• WAIT for at least another couple of minutes.
• The screen should say "please log into the device as normal"

Now plug the unit into your network as normal and you should be able to access it.  Possible you might need to wait 60 seconds or more to get an IP address. 

Possibly will need to reboot it again

Block and Unblock users UNIFI 5.6

In Unifi controller you can block users but selecting the machine and then selecting the machine you want to block off your network, then selecting the BLOCK icon in the properties window

To unblock it is less intuitive for some reason.

Select the insights icon on the screen (looks like an old school lightbulb icon)
Then select KNOWN clients from the first drop down box
Then select the time frame, my example is the last 24 hours
Then select the BLOCKED button on the right corer

You'll see a list of blocked devices, to the right will be an "UNBLOCK" link.
Click on each device you want to unblock.

The device should now be removed from the list

PUBLIC DNS SERVERS

Google and OpenDNS provide public DNS servers that you can use in conjunction or lieu of your ISP's DNS.

GOOGLE DNS
8.8.8.8
8.8.4.4

OPENDNS (Regular)
208.67.222.222
208.67.220.220


OPEN DNS overs an automatic "family" DNS service.  Pointing your router's DNS settings for DHCP to these two IPS will do an automatic block on a LOT of malicious and adult oriented sites that require DNS to resolve.  For Example "pornhub.com" will fail.  Goto  htttp://www.opendns.org for infomraiton on how to make it work in detail.

OPENDNS (FAMILY ORIENTED) Automatic blocking
208.67.222.123
208.67.220.123

Asterisk - target all calls on trunk to specific destination

Lets say you have a bunch of different trunks, sometimes you need to send calls to a specific destination and NOT use DID routing.

This example has calls that come in on a specific trunk, regardless of what the DID is, caller ID or any other identifying manner, will send the call to an internal number.  This could be a ring group that points to an IVR, or a queue etc.

This was tested in FREEPBX distro but should work in most versions of asterisk.  You might need to use the extensions.conf file instead of the override file outlined below for non-freepbx gui users.

Create your trunk in asterisk and at least verify it works.
then in your context for your trunk put this line in:

context=from-yourcustomdestination

then open up /etc/asterisk/extensions_override_freepbx.conf

put this in as an example: (this one dials extension/ringgroup/queue # of 6990.  Just changed the 6990 number to a destination number.

[from-yourcustomdestination]
exten => s,1,Dial(local/6990@from-internal/n,)

save your changes and exit the editor

type in

asterisk -rx 'core reload'

Call your trunk and test.

When you place a call to that trunk, the trunk should dial 6990. 

Audiocodes MP-112 firmware recovery

Have you lost communication to the box because of a pooched firmware upgrade? 
Here is a possible way to salvage it.

AudioCodes boxes, upon boot up will do a BootP process, meaning it will do a call out the network immediately on power up to see if it can download a firmware.

Find the program called the "AudioCodes BootP " or ACbootP.  Google should be able to resolve the app

Now you'll need your firmware files. Essentially the .cmp file for your device.

I was not able to make this update process work reliably on Windows 10 at time of writing.

The same process worked perfectly on Windows 7, so FYI.

1>
Install the ACBootP application on your computer.

2>
Download the appropriate firmware files and put them into a folder.
Here are some firmware files that might help too MP-1XX firmware

3>
Set your PC's network interface to 10.1.10.11 as a local IP.  (AudioCodes box uses .10 as their default)

4>
Disable any AntiVirus you may be running.  These can cause conflicts

5>
Launch the ACBootP app.

6>
Set your TFTP directory to point at the folder that you stored your firmware in.

7>
Make sure the default network for new cliwent has the right Ethernet adapter selected.
yours SHOULD show 10.1.10.11  (my screen shot was done later on, my bad).  You are the server.

8>
Press APPLY.

9>
Now click on "CLIENT CONFIGURATION" at the bottom left

10>
Select ADD NEW CLIENT and the stuff below will appear.

11>
Enter in the MAC address of your AudioCodes device (usually written on the bottom of the box)

CLIENT IP is likely the default ip of 10.1.10.10 (this is the IP that the audiocodes box defaults too usually)
subnet 255.255.255.0
gateway shouldn't matter

TFTP SERVER IP is the ip of your computer that has the TFTP on it.

CMP file is the file of your upgrade you want

12>
Hit APPLY.

Connect the AudioCodes box to your laptop via a network cable and power it up.

If all goes well, your device should boot and start downloading

It will flash pretty quick...and should be basically immediately available via Web Browser.

13>
Log in then "burn" the image when done to make sure it has saved properly.