February 2002 - USR-TC - mailman.xmission.com

Re: [USR-TC] CERT Advisory CA-2002-03: SNMPv1 Vulnerabilities
by Thomas_Goodman＠3com.com 16 Feb '02

16 Feb '02

CERT Advisory Response On February 12th, 2002, the Computer Emergency Response Team Coordination Center, CERT®, issued Advisory CA-2002-03 which describes numerous vulnerabilities in multiple vendors' SNMP implementations. CERT® is the Internet security oversight organization, which monitors Internet security conditions and advises Internet users of vulnerability conditions. CommWorks Corporation is currently assessing the impact of these vulnerabilities on CommWorks products. As an immediate precaution, customers should review the solutions suggested in Section III at http://www.cert.org/advisories/CA-2002-03.html, and implement those appropriate to their network environment. In particular, CommWorks advises isolating the management network from the user data network in order to minimize vulnerability and service impact related to any security breach. CommWorks customers should monitor http://totalservice.commworks.com/cert_update.cfm for updated information addressing this advisory, as well as information on available patches for CommWorks products. Carl Litt <carl(a)execulink.com>@mailman.xmission.com on 02/13/2002 01:29:00 PM Sent by: usr-tc-admin(a)mailman.xmission.com To: usr-tc(a)lists.xmission.com cc: Subject: [USR-TC] CERT Advisory CA-2002-03: SNMPv1 Vulnerabilities CERT has just released an advisory concerning vulnerabilities in SNMPv1 which exist in many vendor implementations, including 3Com. 3Com has acknowledged that several switches are are vulnerable, but there has been no news about the Total Control series. Does anyone know if the SNMP implementation on the ARC/NMC cards is safe? For reference: http://www.kb.cert.org/vuls/id/854306 http://www.kb.cert.org/vuls/id/107186 Carl Litt Network Administrator Execulink Internet _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

RE: [USR-TC] DSP Down
by Kirk Mitchell 16 Feb '02

16 Feb '02

At 03:48 PM 2/15/02 -0500, SWujek(a)solunet.com wrote: >You can also try doing a "Load From" from within TCM software if your PRIs >are configured the same as on your other cards. If you have another DSP card >that is functioning properly and the PRI has the same settings load from >that DSP to your DSP you're having problems with, reboot it and see if it >begins taking calls. Tried that. Went through settings, then loaded from a known good card and checked again. Saved to NVRAM and rebooted, no change. Double-checked settings to make sure they held through reboot, fine. >The T1 plug mentioned by Charles is a great tool to rule out a hardware >problem on the card for D-channel too. If it goes "green" I would look to >Verizon. >The easiest thing to do if your PRIs are configured the same way is to swap >one from a known working card. You will drop all the calls on the card but >that is the quickest and easiest way. Then you can go directly to Verizon >and tell them without a doubt they have it configured wrong without going >through all their loopback tests. Was finally able to do this this morning. The problem followed the line to new slot and good line in "bad" slot came up fine. It's definately Verizon's problem. Thanks, -- Kirk Mitchell-General Manager mitch(a)keyconn.net Keystone Connect Unlock Your World Altoona, PA 814-941-5000 http://www.keyconn.net

1 0

RE: [USR-TC] hyperARC reboot
by RickL＠solunet.com 16 Feb '02

16 Feb '02

Tom, If you have a HiPer ARC card that is constantly failing or rebooting you can do a crash dump on the HiPer ARC's CLI so that higher level engineers can determine what's happening to the card before it fails or reboots. 1. Telnet or make a console connection to the Hiper ARC 2. At the command line type: show board crashdump 3. Copy and paste the information to notepad, wordpad, Microsoft Word, etc. before the card reboots again. 4. The bad news: you need a contract to have this deciphered. You can shot-gun the problem and just try reloading the code, but if the flash is bad..this won't do much good. Maybe someone on the list reads crash dumps? :) Rick Team Solunet -----Original Message----- From: thomas [mailto:thomas@mana.pf] Sent: Friday, February 15, 2002 4:15 PM To: usr-tc(a)mailman.xmission.com Subject: [USR-TC] hyperARC reboot greetings, I have some hyperARC reloading randomly. I don't know why and where it come from. has anyone already got this problem too and resolved it ! can anyone give me ideas to identify the problem ? _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

2 1

hyperARC reboot
by thomas 15 Feb '02

15 Feb '02

greetings, I have some hyperARC reloading randomly. I don't know why and where it come from. has anyone already got this problem too and resolved it ! can anyone give me ideas to identify the problem ?

1 0

RE: [USR-TC] DSP Down
by SWujek＠solunet.com 15 Feb '02

15 Feb '02

You can also try doing a "Load From" from within TCM software if your PRIs are configured the same as on your other cards. If you have another DSP card that is functioning properly and the PRI has the same settings load from that DSP to your DSP you're having problems with, reboot it and see if it begins taking calls. The T1 plug mentioned by Charles is a great tool to rule out a hardware problem on the card for D-channel too. If it goes "green" I would look to Verizon. The easiest thing to do if your PRIs are configured the same way is to swap one from a known working card. You will drop all the calls on the card but that is the quickest and easiest way. Then you can go directly to Verizon and tell them without a doubt they have it configured wrong without going through all their loopback tests. Thanks, Steve -----Original Message----- From: Charles Sprickman [mailto:spork@inch.com] Sent: Wednesday, February 13, 2002 10:48 AM To: Kirk Mitchell Cc: usr-tc(a)lists.xmission.com Subject: Re: [USR-TC] DSP Down On Tue, 12 Feb 2002, Kirk Mitchell wrote: > I have a DSP card with a constant D alarm/Loopback indication. Verizon ^^^^^^^ There's your problem :) No really, it might take you less time to get a tester on the phone and have him verify a few things. Is there a smartjack on the circuit? If so, can he loop that? Is there any carrier at all (regardless of D channel status, is the line in alarm?) To eliminate your equipment, try the following: -get the tester on the blower and have him try to loop the csu -stick a loopback plug on your demarc point -ask him if he sees a loop -if not, it's the line and your equipment is OK. You can make a loopback plug by connecting pin 1 on a rj45 to pin 4 and pin 2 to pin 5. (someone please double-check if polarity matters) Charles > says there's nothing wrong with the line, but they can't loop the CSU. > Yeah, I know they're liars and frauds that cheat on their grandmothers, but > I'm stuck eliminating everything else before going back to them. DSP is > 0.49.0 hardware running 2.0.81, ARC running 4.2.32. I've gone over all the > settings with a fine tooth comb, nothing is amiss. The only test I haven't > run yet is to swap the PRI into another card, I haven't had an empty card > to swap to yet. > Anything I might be missing? > > Thanks, > > -- > Kirk Mitchell-General Manager mitch(a)keyconn.net > Keystone Connect Unlock Your World > Altoona, PA 814-941-5000 http://www.keyconn.net > > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

FS: Total Control
by Stephen Rivera - WRCA.Net 15 Feb '02

15 Feb '02

WRCA.NET Has the following available: HIPER DSP CARD SETS $1100 HIPER ARC CARD SETS $1200 ARC II $3600 WTB: Hiper NMC's. ADSL AxCell card set $550 VIPER MODEMS W/ POWER 48 port HIPER BUNDLES $3500 48 port V90 QUAD BUNDLES $950 Anything Total Control.....I got it! All pricing negotiable. Look forward to talking with you. Steve Rivera 732-833-2111 x102 IM: srivera711 732-833-2115 fax for more product info got www.wrca.net Jackson, NJ 08527 (USA)

1 0

RE: [USR-TC] Memory for HiperArc
by SWujek＠solunet.com 15 Feb '02

15 Feb '02

Only one correction.... The Hiper ARC shiped with 64MB upgradeable to 128MB Thanks, Steve Wujek SoluNet Technical Support -----Original Message----- From: MPuras(a)solunet.com [mailto:MPuras@solunet.com] Sent: Thursday, February 14, 2002 10:07 AM To: kev(a)ida.net; USR-TC(a)mailman.xmission.com Subject: RE: [USR-TC] Memory for HiperArc 128MB EDO 168pin BUFFERED 3.3v ECC Thanks, Mario Puras SoluNet Technical Support Customer Support Engineer -----Original Message----- From: Kevin Hemsley [mailto:kev@ida.net] Sent: Wednesday, February 13, 2002 9:07 PM To: USR-TC(a)mailman.xmission.com Subject: [USR-TC] Memory for HiperArc Does anyone have the specs for Hiperarc memory? I thought I had it somewhere, but I can't find it. Thanks, Kevin. ------------------------------------------------------ Kevin Hemsley Systems Engineer Microserv Computer Technologies, Inc. kev(a)ida.net KB7TYA _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

Help, how to change default route on ospf
by Tom Swenson 15 Feb '02

15 Feb '02

My TC has been running so long I no longer remember how to change things on the ospf interface. It won't let me do a: set ip defaultroute gateway command, so I think I have to do it in the ospf. I have found the Designated Router Address as being set to my existing router. I want to change it to a different one. I have been searching my hard drive and also the commworks site for answers but can't seem to find any. Anyone out there know how to do this and save me a huge amount of time. Thanks. Tom Swenson NetConX - Internet Access - Client Managed Web Database Applications Wireless - Virus Blocking - Spam Blocking tom(a)netconx.net http://www.netconx.net (641) 421-4170 - Voice (641) 423-3351 - FAX

2 3

Re: [USR-TC] CERT Advisory CA-2002-03: SNMPv1 Vulnerabilities
by Thomas_Goodman＠3com.com 14 Feb '02

14 Feb '02

New NMC code has been posted on http://totalservice.commworks.com . The following NMC codes provide protection from possible Denial Of Service (DoS) attacks via SNMP. These concerns were raised by a CERT advisory issued today (see http://www.kb.cert.org/vuls/id/854306) To find the NMC code do the following: 1)Go to the Software Library Link located under the Software section of the totalservice web page 2) Choose the Enhanced Data Services (RAS) icon 3) Then Click on the drop down arrow and choose Network Management Cards 4) The NMC code is posted as follows: HM080296: HiPerNMC v8.2.96. This code is based on version 8.2.97 and includes fixes to prevent NMC reboots that might be caused by certain SNMP requests. HH080396: NMC-333 v8.3.96. This code is based on version 8.3.97 and includes fixes to prevent NMC reboots that might be caused by certain SNMP requests. The NMC code is also posted under the TCS 4.3 software suite located under the same drop down arrow as the Network Management Cards. Please note: This issue has been fixed on the TCS 4.5 Beta load.

2 1

RE: [USR-TC] Memory for HiperArc
by MPuras＠solunet.com 14 Feb '02

14 Feb '02

128MB EDO 168pin BUFFERED 3.3v ECC Thanks, Mario Puras SoluNet Technical Support Customer Support Engineer -----Original Message----- From: Kevin Hemsley [mailto:kev@ida.net] Sent: Wednesday, February 13, 2002 9:07 PM To: USR-TC(a)mailman.xmission.com Subject: [USR-TC] Memory for HiperArc Does anyone have the specs for Hiperarc memory? I thought I had it somewhere, but I can't find it. Thanks, Kevin. ------------------------------------------------------ Kevin Hemsley Systems Engineer Microserv Computer Technologies, Inc. kev(a)ida.net KB7TYA _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0