Friday, February 11, 2011

It's time to Cisco

I'm proud to report that i've got a new job, as a full-time network admin. No user support, no more installing XP boxes, only the phat tubes. Yeah.
And it's a university, so we've got plenty of chicks...

It's a Cisco place, with some HP boxes, so i won't play with Juniper gear for a while, apart my own Netscreen at home. Oh well...

An interesting upcoming project is with an Aruba Mobility Controller, a centrally managed WiFi solution. Brochures say it's cool, user guide says it's cool, maybe it'll be cool. Stay tuned for details as we progress.
On a related note, Juniper just put up it's new Wireless fundamentals e-learning course.

What we learned today: if you're upgrading a Cisco MARS appliance from 4.2.2 to 4.2.3, read the release notes first, and check out the MARS blog.
To gain root access to the box: reboot, hold right Shift key during POST and Lilo, when Lilo prompt appears, press any key, like 'A'. Boot with 'linux init=/bin/bash', remount the root fs in rw mode, and passwd with a smile. Reboot, after pnadmin login, use the 'expert' command.
After that, you can clean up the /u01 partition, so the failed 4.2.3 upgrade can start again...

Thursday, December 30, 2010

Cisco 2811 and Asterisk/FreePBX

A few months ago I had to install an analog fax machine in one of our offices (could we forget about fax machines on a global scale, by the way?).
We use a FreePBX server and SIP-based Grandstream phones, and we don't have a phone line in that office, so I wanted to use our VOIP system. Luckily, we had an idle Cisco 2811 in that office with this config:

System image file is "flash:c2800nm-advipservicesk9-mz.124-9.T7.bin"
Cisco 2811 (revision 53.51) with 237568K/24576K bytes of memory.

Processor board ID XXXXXXXXXX
2 FastEthernet interfaces
1 Serial(sync/async) interface
3 ISDN Basic Rate interfaces
1 Virtual Private Network (VPN) Module
4 Voice FXS interfaces



Here's what the config looks like on the IOS side:

!
voice-port 1/1/0
input gain 10
output attenuation 10
no comfort-noise
cptone HU
!
dial-peer voice 399 voip
destination-pattern .T
session protocol sipv2
session target ipv4:192.168.13.248
session transport udp
dtmf-relay rtp-nte
codec g711ulaw
fax protocol t38 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
!
dial-peer voice 100 pots
destination-pattern 3399
port 1/1/0
authentication username 3399 password 01234567891234
!
sip-ua
retry invite 3
retry response 3
retry bye 3
retry cancel 3
timers trying 1000
mwi-server ipv4:192.168.13.248 expires 3600 port 5060 transport udp unsolicited
registrar ipv4:192.168.13.248 expires 300
sip-server ipv4:192.168.13.248
!



and on the Asterisk side:

[3399]
deny=0.0.0.0/0.0.0.0
secret=xxxxxxx
dtmfmode=rfc2833
canreinvite=no
context=from-internal
host=dynamic
type=friend
nat=yes
port=5060
qualify=yes
callgroup=
pickupgroup=
dial=SIP/3399
mailbox=3399@device
permit=0.0.0.0/0.0.0.0
callerid=device <3399>
call-limit=50


A few things the IOS is bitchy about:
  • you must have a SIP secret. Our standard phones login without one, but IOS needs a secret.
  • the SIP username must be at least 4 chars long. We use 3 char names by default, so I had to prepend an additional '3' character.
As for the config: 192.168.13.248 is the FreePBX server of course, and you might have to play around with the destination-pattern.

Monday, October 25, 2010

Shameless advertising

Okay, so here's the deal: you should sign up on www.tozsdezz.hu and start trading. There's a fat chance to win that ride. Seriously.