August 1999 - USR-TC - mailman.xmission.com

RE: (usr-tc) Perhaps another simple question - HiperARC initial c onfiguration/ console cable
by Scott Trautman 17 Aug '99

17 Aug '99

Really.....someone with the time to do it (maybe me...who knows...) ought try this simple experiment. post to this list, call 3Com support at the same time with a medium-hard type question. This question would have been perfect. Any wagers as to where the first <correct> answer comes from? Also count number of reboots (not less than 3 and always during peak use), ask same question, phone system navigations, dolts you talk to in the evaluation, escalations, waits for callbacks, suggestions that it's "the chassis" & what's your freakin' contract number.... Remember I said <simple> experiment, not easy on the stress level.....:) I only call 3Com when I've already convinced myself I have bad equipment; then proceed directly to RMA dept. Really, let's not get into the whole bitching thing on 3Com support; it is what it is. The RMA process really is decent enough, pretty good turnaround, know that you ought to be keeping spare equipment around anyway, and with this list, get everything answered, so "no worries". Leave 3Com support/contracts for the clueless corporate people with time&money to burn for the most part. The TC's really are the best thing out there, dings and all, from what I've seen. 'nuff said! SMT PS: A composite "gems of wisdom" document with many of the problems/solutions here would be really really cool....if someone had the time (right!) to put one together.... -----Original Message----- From: Marty Elliott [mailto:marty@2assetrecovery.com] Sent: Monday, August 16, 1999 3:53 PM To: usr-tc(a)lists.xmission.com Subject: RE: (usr-tc) Perhaps another simple question - HiperARC initial configuration/ console cable Scott -- as the vendor, I'm glad to see the cards are OK! Just got a shipment from 3Com that's the wrong cards and they are blaming me. Of course they forgot the fact that they told me the p/n to order! Much better support on the list than from 3Com! Thanks for the business! Regards, Marty At 03:39 PM 8/16/99 -0500, you wrote: >You are godlike. That did the trick. DS 5 is the one! > >SMT > >-----Original Message----- >From: Mike Andrews [mailto:mandrews@bit0.com] >Sent: Monday, August 16, 1999 3:10 PM >To: usr-tc(a)lists.xmission.com >Subject: Re: (usr-tc) Perhaps another simple question - HiperARC initial >configuration/ console cable > > >Ooops. Make that Dip Switch *5*. Not 6. > >Dip Switch 5 overrides the need for things like carrier detect on the >cable. We cooked up custom cables on ours (so we could hook them to a >terminal server for reverse telnet) and ran into this on ARC 4.1.x >releases. Your other ARCs were probably set up with 4.0.x software which >didn't care. > > >Mike Andrews (MA12) -=-=- VP & Sysadmin, Digital Crescent, Frankfort KY >mandrews(a)dcr.net -=--=- mandrews(a)bit0.com -=--=- http://www.bit0.com >"If you're not part of the solution.... you're part of the precipitate." > >On Mon, 16 Aug 1999, Mike Andrews wrote: > >> Turn on dip switch 6, especially if you made your own serial cable... >> >> On Mon, 16 Aug 1999, Scott Trautman wrote: >> >> > I just got 3 new HiperARC's. Yippee for me. >> > >> > My means of configuring them is usually to put the console cable on and >> > configure from there. >> > And I've done several other ARC's this way. >> > >> > This batch, however, I am getting as far as PROM vers 1.16 made June 16 >> > 1998..., Loading System .....OK >> > and that's the last I see--- >> > >> > So I'm rather stuck. Per my NMC, it does load okay (all green), yet I >can't >> > get into it to set anything. >> > Tried the usual disconnect, reconnect to the comm port, nope >> > Tried the also usual Control-C,D,X,[,] for some kind of breakout >> > >> > Nothing...nada....NMC says it's all good, but no more console output or >> > input happening... >> > >> > Any ideas? I'm hoping it's just as stupid a problem as I feel. >> > Short work once I'm in.... >> > >> > SMT >> > >> > >> > >> > >> > >> > >> > Scott Trautman 608-240-4638,4637fax >> > Global Dialog Internet www.gdinet.com >> > 2810 Crossroads, STE LL2 >> > Madison WI 53718 >> > >> > >> > >> > - >> > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" >> > with "unsubscribe usr-tc" in the body of the message. >> > For information on digests or retrieving files and old messages send >> > "help" to the same address. Do not use quotes in your message. >> > >> >> > > >- > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > >- > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message. - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

1 0

RE: (usr-tc) Link dead after 8 Days
by Blake Fithen 17 Aug '99

17 Aug '99

Identical problems here with PRI's from Southwestern Bell and KMC Telecom. On a fully loaded chassis/one ARC two PS's Running DSP 1.2.5,1.2.59 and ARC 4.1.59. Started about a month ago and it's really pissing customers off. We can't find any patterns of failure. blake > -----Original Message----- > From: Clint R. Sparks [mailto:csparks@cqc.com] > Sent: Monday, August 16, 1999 4:23 PM > To: usr-tc(a)lists.xmission.com > Subject: Re: (usr-tc) Link dead after 8 Days > > > Krish, > > Since you seem to be so helpful with the total control stuff, > I wanted to > ask you a couple of questions. We use the total control Hiper > DSP - Hiper > Arc version using Hiper DSP code 1.2.43 and Hiper Arc code > 4.1.59-6, we ran > into a problem last week where two modems on our 3rd card > decided to stop > letting people in, it would answer then have a strange > handshaking tone and > disconnect the customer. I tried resetting the two modems > numerous times > with no luck so I busied them out until I could look into it > more, the next > day when the modems before the busied ones got to them we got > a busy on that > number, there was still plenty of modems available after the > two busied > ones. I ended up doing a Hardware Reset of the whole card and the two > previously bad modems started working again and we have not > had a problem in > the last few days. > > I guess my question is can you explain why the modems would > quit working and > why we were getting busies after I did a soft busy of the two > bad modems? > > Also, what Hiper DSP and Hiper Arc code do you recommend > running right now? > > Any insight you can give would be appreciated. > > Thank you, > > Clint R. Sparks > ComQuest Internet Services > csparks(a)cqc.com > > > ----- Original Message ----- > From: Tatai SV Krishnan <tkrishna(a)bubba.ae.usr.com> > To: Sam Lowe <slowe(a)universalcom.net> > Cc: <usr-tc(a)lists.xmission.com> > Sent: Sunday, August 15, 1999 11:29 PM > Subject: Re: (usr-tc) Link dead after 8 Days > > > > > > On Mon, 16 Aug 1999, Sam Lowe wrote: > > > > > The original post is getting kind of lengthy. I'll try > to address all > > > Krish's questions. > > > > > > 1. The problem cannot be replicated/reproduced on demand. > > > > > Good that is nice - we can have it reproduce on demand > > > > > 2. The versions of code: HiPer DSP: 1.2.59, HiPer ARC: 4.1.59, > NMC:5.5.5 > > > > > > > I would suggest the latest DSP code, 1.2.59 DSP code is > really old and > > had some issues - you need the latest 2.0.x code. > > > > > 3. I understand these problems can take time to fix, I am just > frustrated > > > with the 3Com responses through last Thursday evening. > The response > from > > > Krish was the first real help I've gotten. > > > > > > 4. We have implemented the MTU change. If Krish can contact me > > > (850-337-016), we have a locked up system right now. > > > > > I would be more than willing to call you but the above > phone number is > > not correct. > > Send me the correct the number. > > > > krish > > > > > > > > > ----- Original Message ----- > > > From: Tatai SV Krishnan <tkrishna(a)bubba.ae.usr.com> > > > To: K Mitchell <mitch(a)keyconn.net> > > > Cc: <usr-tc(a)lists.xmission.com> > > > Sent: Sunday, August 15, 1999 10:25 AM > > > Subject: Re: (usr-tc) Link dead after 8 Days > > > > > > > > > > > > > > > > > - > > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > > with "unsubscribe usr-tc" in the body of the message. > > For information on digests or retrieving files and old > messages send > > "help" to the same address. Do not use quotes in your message. > > > > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

2 1

RE: (usr-tc) Perhaps another simple question - HiperARC initial configuration/ console cable
by Marty Elliott 16 Aug '99

16 Aug '99

Scott -- as the vendor, I'm glad to see the cards are OK! Just got a shipment from 3Com that's the wrong cards and they are blaming me. Of course they forgot the fact that they told me the p/n to order! Much better support on the list than from 3Com! Thanks for the business! Regards, Marty At 03:39 PM 8/16/99 -0500, you wrote: >You are godlike. That did the trick. DS 5 is the one! > >SMT > >-----Original Message----- >From: Mike Andrews [mailto:mandrews@bit0.com] >Sent: Monday, August 16, 1999 3:10 PM >To: usr-tc(a)lists.xmission.com >Subject: Re: (usr-tc) Perhaps another simple question - HiperARC initial >configuration/ console cable > > >Ooops. Make that Dip Switch *5*. Not 6. > >Dip Switch 5 overrides the need for things like carrier detect on the >cable. We cooked up custom cables on ours (so we could hook them to a >terminal server for reverse telnet) and ran into this on ARC 4.1.x >releases. Your other ARCs were probably set up with 4.0.x software which >didn't care. > > >Mike Andrews (MA12) -=-=- VP & Sysadmin, Digital Crescent, Frankfort KY >mandrews(a)dcr.net -=--=- mandrews(a)bit0.com -=--=- http://www.bit0.com >"If you're not part of the solution.... you're part of the precipitate." > >On Mon, 16 Aug 1999, Mike Andrews wrote: > >> Turn on dip switch 6, especially if you made your own serial cable... >> >> On Mon, 16 Aug 1999, Scott Trautman wrote: >> >> > I just got 3 new HiperARC's. Yippee for me. >> > >> > My means of configuring them is usually to put the console cable on and >> > configure from there. >> > And I've done several other ARC's this way. >> > >> > This batch, however, I am getting as far as PROM vers 1.16 made June 16 >> > 1998..., Loading System .....OK >> > and that's the last I see--- >> > >> > So I'm rather stuck. Per my NMC, it does load okay (all green), yet I >can't >> > get into it to set anything. >> > Tried the usual disconnect, reconnect to the comm port, nope >> > Tried the also usual Control-C,D,X,[,] for some kind of breakout >> > >> > Nothing...nada....NMC says it's all good, but no more console output or >> > input happening... >> > >> > Any ideas? I'm hoping it's just as stupid a problem as I feel. >> > Short work once I'm in.... >> > >> > SMT >> > >> > >> > >> > >> > >> > >> > Scott Trautman 608-240-4638,4637fax >> > Global Dialog Internet www.gdinet.com >> > 2810 Crossroads, STE LL2 >> > Madison WI 53718 >> > >> > >> > >> > - >> > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" >> > with "unsubscribe usr-tc" in the body of the message. >> > For information on digests or retrieving files and old messages send >> > "help" to the same address. Do not use quotes in your message. >> > >> >> > > >- > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > >- > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

1 0

RE: (usr-tc) Perhaps another simple question - HiperARC initial c onfiguration/ console cable
by Scott Trautman 16 Aug '99

16 Aug '99

You are godlike. That did the trick. DS 5 is the one! SMT -----Original Message----- From: Mike Andrews [mailto:mandrews@bit0.com] Sent: Monday, August 16, 1999 3:10 PM To: usr-tc(a)lists.xmission.com Subject: Re: (usr-tc) Perhaps another simple question - HiperARC initial configuration/ console cable Ooops. Make that Dip Switch *5*. Not 6. Dip Switch 5 overrides the need for things like carrier detect on the cable. We cooked up custom cables on ours (so we could hook them to a terminal server for reverse telnet) and ran into this on ARC 4.1.x releases. Your other ARCs were probably set up with 4.0.x software which didn't care. Mike Andrews (MA12) -=-=- VP & Sysadmin, Digital Crescent, Frankfort KY mandrews(a)dcr.net -=--=- mandrews(a)bit0.com -=--=- http://www.bit0.com "If you're not part of the solution.... you're part of the precipitate." On Mon, 16 Aug 1999, Mike Andrews wrote: > Turn on dip switch 6, especially if you made your own serial cable... > > On Mon, 16 Aug 1999, Scott Trautman wrote: > > > I just got 3 new HiperARC's. Yippee for me. > > > > My means of configuring them is usually to put the console cable on and > > configure from there. > > And I've done several other ARC's this way. > > > > This batch, however, I am getting as far as PROM vers 1.16 made June 16 > > 1998..., Loading System .....OK > > and that's the last I see--- > > > > So I'm rather stuck. Per my NMC, it does load okay (all green), yet I can't > > get into it to set anything. > > Tried the usual disconnect, reconnect to the comm port, nope > > Tried the also usual Control-C,D,X,[,] for some kind of breakout > > > > Nothing...nada....NMC says it's all good, but no more console output or > > input happening... > > > > Any ideas? I'm hoping it's just as stupid a problem as I feel. > > Short work once I'm in.... > > > > SMT > > > > > > > > > > > > > > Scott Trautman 608-240-4638,4637fax > > Global Dialog Internet www.gdinet.com > > 2810 Crossroads, STE LL2 > > Madison WI 53718 > > > > > > > > - > > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > > with "unsubscribe usr-tc" in the body of the message. > > For information on digests or retrieving files and old messages send > > "help" to the same address. Do not use quotes in your message. > > > > - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message. - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

1 0

(usr-tc) Perhaps another simple question - HiperARC initial configuration/ console cable
by Scott Trautman 16 Aug '99

16 Aug '99

I just got 3 new HiperARC's. Yippee for me. My means of configuring them is usually to put the console cable on and configure from there. And I've done several other ARC's this way. This batch, however, I am getting as far as PROM vers 1.16 made June 16 1998..., Loading System .....OK and that's the last I see--- So I'm rather stuck. Per my NMC, it does load okay (all green), yet I can't get into it to set anything. Tried the usual disconnect, reconnect to the comm port, nope Tried the also usual Control-C,D,X,[,] for some kind of breakout Nothing...nada....NMC says it's all good, but no more console output or input happening... Any ideas? I'm hoping it's just as stupid a problem as I feel. Short work once I'm in.... SMT Scott Trautman 608-240-4638,4637fax Global Dialog Internet www.gdinet.com 2810 Crossroads, STE LL2 Madison WI 53718 - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

2 2

(usr-tc) simple question
by Stainforth, Matthew 16 Aug '99

16 Aug '99

Ok, at the risk of sounding stupid, how do I change the NMC community names from TCM and make them stick? I have tried changing them in the Security, Community Names box and telling the NMC to Save Chassis to NVRAM but they always go back to the previous values for some reason. I have always done this with the CLI before installing the chassis but, in this case, I want to avoid the 3 hour drive if possible. I had a quick look on 3KB and the TCM guide and nothing jumped out at me... Thanks, Matthew... - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

2 1

(usr-tc) stalling
by Jamie Orzechowski 16 Aug '99

16 Aug '99

Many of our users seem to be having a "stalling" problem. They will be going fine and all of the sudden there is a 2 minute stop. They are not disconnected ... they bytes in/out just stop ... then 2 minutes later it picks up again and everything is fine ... then another stoppage at a random time ... any ideas?? DSP -> 2.0.70 ARC -> 4.2.29 - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

3 2

Re: (usr-tc) HiperARC - Dangerous HiperBomb
by Rick 16 Aug '99

16 Aug '99

I can confirm this security-bug EXISTS. I compiled the source of hyper-nuke and did indeed reboot some of my arcs (4.1.59-6). As others have stated I would suggest implementing accesslists on your routers that deny all telnet (tcp-25) traffic to your arcs. Ed Taylor wrote: > For HiperBomb code check out: > > http://www.securityfocus.com/templates/archive.pike?list=1 > > It is very serious and reboots the HiperArc's from anywhere. > > Ed > > ---------- Original Message ---------------------------------- > From: "Jamie Orzechowski" <mhz(a)ripnet.com> > Reply-To: usr-tc(a)lists.xmission.com > Date: Fri, 13 Aug 1999 19:03:36 -0400 > > >Just reading my Securityfocus email list and attacked was a new "Remote > HiPER ARC nuking program" > > I have the source if anyone cares to have it ... > > ----- Original Message ----- > From: Jonathan Chapman <jchapman(a)1ST.NET> > To: <BUGTRAQ(a)SECURITYFOCUS.COM> > Sent: Thursday, August 12, 1999 6:10 PM > Subject: 3com hiperarch flaw [hiperbomb.c] > > > Hello, > > > > The attached program will reboot a 3com HiperARC. I made an attempt to > > contact 3com before posting this report, however, I received no response. > > By flooding the telnet port of a 3com HiperARC using the provided program, > > the HiperARC unconditionally reboots. This program is effective over all > > interfaces, including a dialup. > > > > Regards, > > > > Jonathan Chapman > > Director of Network Security > > FIRST Incorporated > > jchapman(a)1st.net www.1st.net > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rick Allan / rick(a)monmouth.com | Connect to a Backbone not a Wishbone Head of Network Engineering | Monmouth Internet Corporation 732-842-5366=====extension 102 | http://www.monmouth.com -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

8 13

(usr-tc) Security and Accounting Server vs. SAM questions
by Howard Reeves 15 Aug '99

15 Aug '99

I am trying to decide whether to enter my users in the Security and Accounting database or to proxy against the NT database. I am currently entering the username in both NT and S&A and using the NT password. I did this because my only server at the time had been setup as a standalone server instead of a PDC so I could not proxy to the NT database. Also, I use NT Mail and by using the NT database, NT Mail could authenicate against the NT database. I am now adding an additional server that has been setup as a PDC. I plan to reconfigure the standalone server as a BDC when I have the new server up and running. This is why I am currently contemplating this question. I want to make the best decision that I can so that it works now and in the future as I add to the network. I do not want to just do what is easiest right now. However, I can not afford to invest in new RADIUS software at this time which is what I would probably really like to do, and do not now enough about Liniux to switch which is what I would probably really really like to do. My reasons for wanting to use NT database. 1. NT Mail can authenicate against NT database reducing the amount of setup required for each user. 2. Can remotely administer username and passwords with web interface. 3. Can operate a back up server. My reasons for not wanting to use NT database. 1. I have no way that I know of to print information about users i.e. username, Name, Address, Telephone Number, etc. 2. No way to limit concurrent users. 3. Concerns about the security of using NT database. My reasons for wanting to use S&A 1. Can print information about users from access reports. 2. Supposedly can limit concurrent users. 3. Believe that it is more secure than using NT database. My reasons for not wanting to use S&A 1. Can not administer user names and passwords through a web interface. 2. Not sure if I can operate a backup server. 3. Do not know how to set NT Mail to authenicate against S&A database. I believe that it can be done with a DLL file, but I have not found any documentation to explain how to do it. I am very open to any ideas or suggestion that anyone might have including other RADIUS software that might meet my needs. Any help will be appreciated. Howard Reeves hreeves(a)altamontks.com - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

1 0

(usr-tc) disabling telnet
by Jamie Orzechowski 14 Aug '99

14 Aug '99

what is the command to disable telnet on an arc anyways?? - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

3 2