Dlink & uPnP

Product : dLink DCS 2100 & dLink DI-624
Part Involved : Port 1900 (UpNp)
Summary: With no appearently reason your LAN activity has increased a burst of broadcast
Scenario : There are some delays inserted into you LAN connections.
Company : National Cancer Institute of Peru (INEN).
Reference Date : February 2008 to April 2008.

There is a hidden knowledge that is only enough to assign an ip address an every equipment connect to our LAN connections, but what happen is this device saves to itself additional functions of routing tasks when at the begining was buyed to fullfill another function ?

But it works perfectly, after your plugged it on the outlet LAN (it is sure that you are going to forget it!), and that is according to my experience in the case of this two models, but monitored with the help of WinDump application in order to identify the device connected and the ports used, when and how.

I have attached two procedures videos to detect the activity to these ports related to this issues and the later steps to disable UpNp in the device.

I sure you, that this type broadcast will not become again, at least not for this reason !

Assign IP to CISCO 2960

Product : CISCO 2960
Part Involved : Switching equipment.
Summary: Procedure of Ip configuration of switching equipment.
Scenario : Previous tasks to consider before to install switching equipment in tele room
Company : National Cancer Institute of Peru (INEN).
Reference Date : April 2008.

It is not possible to exploit the overall options of the switching equipment if this one previously is not defined and assigned the ip configuration, with this little step ensures the remote management of the equipment as the other hand you dispose : Open the conecction with the equipment to connect it by using internet explorer browser and telnet with cli commands.

As we can check, the video is based over the reviewing of the next concepts :
(1) The factory ip assigned of the switching equipment is 10.0.0.1
(2) The Pc is configured using the ip 10.0.0.200 in order to establish a connection with switching equipment.
(3) The Ip of the switching equipment is saved with the value 192.168.88.31
(4) the pc is reconfigured using the ip 192.168.88.200 with the purpose to establish connection with switching equipment and check its update of ip configuration.
(5) Check the video to confirm these steps.

! Remember, if you you do not proceed with the change of ip address of every new switching equipment you can crash your LAN connections because there are ip conflicts !

Later in another articles, I will take some ways to show you How to catch up some troubleshooting issues linked with this issue.

Handing RJ45 Jacks

Product : RJ45 Jacks connectors over cat6.
Part Involved : Infrastructure of telecomunication room.
Summary: Management the ending of the horizontal cabling inside telecomunication rooms.
Scenario : A burst growing of the LAN data ports in your company.
Company : National Institute of Cancer of Peru (INEN).
Reference Date : April 2008.

Although add new data ports to the current structured cabling involved civil works in order to tending the cable, then another bottleneck does not consider the most time is the distribution of the space inside of the telecomunication room. Check with the next video , how the ending cable cat6 is not easy to hand -the cable is not soft, can be damaged if there is no previous precaution during tending task - and when this point is reached certainly the personnel assigned to this job come very dirty.

It is important to clear that pin wire assigned color of RJ45 jack connector of the telecomunication room should be fix with the RJ45 jack connector of the outlet box (office) assigned to that cabling connection.

The first part of video shows the procedure to insert the wire into RJ45 Jack connector following the color code based on Code A or Code B -assigning the same to telecomunication room and office- and put the connector inside of the patch panel, while the second part is focused on the front view of the telecomunication room to connect the patch cord from the patch panel port to the free switch port.

The full version is available on "YouTube videos hosted by German Medina" at the bottom right side of this page.

Warning with MSN chat

Product : Trojan Virus
Part Involved : Security Issue.
Summary: A new virus threat has been hidden between MSN chat.
Scenario : Chat has changed our daily lives and imagine if that security is broken.
Company : Owner.
Reference Date : March 2007.

We are exposed to the most strange broadcast virus, it slides quickly between MSN chat conversation in every moment; the impact is very dangerous, because it hides itself behind the MSN chat conversation, then you appearently answer and following the main issue of your MSN chat conversation, when suddenly you receive an invitation to download some file (containing some pictures) adding a text like as "check my pictures taken on some place" and then you are ready to fire the cold chain.

I have seen when you are warn to receive the download file (appearently from your contact or friend) the contact disappear from the contact list (the virus disconnect him or her) while at the same time is inviting you to confirm to download the miracle file. Up to here, you are not consciosnous that you have lost the connection with your contact and you are close to open an unknown file. Imagine That !

In the extreme case when you download that file an execute it then you will notice that you lost the mouse control while the MSN chat window starts to flash and the another application flashs too. Then I recomend this :

1.- Unplug your LAN connection, then you will focus the control of mouse and every thing into desktop.

2.- Reset your computer and boot on safe mode and execute your AntiVirus system as first step

3.- Reset your computer and boot on normal mode and execute too your AntiVirus system as your next step.

The virus is identified as back door trojan and it saves a file named myspace-layout(1).jpg into the cookies and temporal carpets of Internet explorer.

Although I have checked that virus can send message into spanish and english, like as next pictures :

Export LAN configuration

Product : Parameters used into LAN.
Part Involved : LAN configuration..
Summary: It is an interesting short procedure to export into a file all the parameters related with LAN configuration of your Pc.
Scenario : Adding diversity to use the file exported.
Company : National Institute of Cancer of Peru (INEN).
Reference Date : March 2008.

I suggest to some people to use next procedure to backup their LAN configuration, if your day to day is necessary changing LAN configuration then fixs you. Then from the command prompt windows (DOS) then type :

netsh dump>C:\IpConfiguration.txt

Here begin an example of that file ******
#========================
#Configuraci¢n de interfaz
#========================
pushd interface
reset all
popd
# Fin de la configuraci¢n de interfaz
#==========================
#Configuraci¢n de interfaz
#==========================
pushd interface ipv6
uninstall
popd
# Fin de la configuraci¢n de interfaz
# ------------------------------------
# Configuraci¢n de ISATAP
# ----------------------------------
pushd interface ipv6 isatap
popd
# Fin de configuraci¢n de ISATAP
# ----------------------------------
# Configuraci¢n de 6to4
# ----------------------------------
pushd interface ipv6 6to4
reset
popd
# Final de la configuraci¢n de 6to4
#==================================
# Configuraci¢n del puerto de proxy
#==================================
pushd interface portproxy
reset
popd
# Fin de configuraci¢n del puerto de proxy
# ---------------------------------------------
# Configuraci¢n de la interfaz IP
# ---------------------------------------------
pushd interface ip
# Configuraci¢n de la interfaz IP para "Conexi¢n de rea local"
set address name="Conexi¢n de rea local" source=static addr=192.168.31.11 mask=255.255.224.0
set dns name="Conexi¢n de rea local" source=static addr=none register=PRIMARY
set wins name="Conexi¢n de rea local" source=static addr=none
popd
# Fin de la configuraci¢n de la interfaz IP
# =========================================
# Configuraci¢n RAS
# =========================================
pushd ras
set authmode mode = standard
delete authtype type = PAP
delete authtype type = SPAP
delete authtype type = MD5CHAP
delete authtype type = MSCHAP
delete authtype type = MSCHAPv2
delete authtype type = EAP
add authtype type = MSCHAP
delete link type = SWC
delete link type = LCP
add link type = SWC
add link type = LCP
delete multilink type = MULTI
delete multilink type = BACP
add multilink type = MULTI
add multilink type = BACP
set user name = Administrador dialin = policy cbpolicy = none
set user name = Asistente de ayuda dialin = policy cbpolicy = none
set user name = Invitado dialin = policy cbpolicy = none
set user name = SUPPORT_388945a0 dialin = policy cbpolicy = none
set user name = VUSR_FILESERVER dialin = policy cbpolicy = none
set tracing component = * state = disabled
popd
# Final de la configuraci¢n RAS .
# -----------------------------------------
# Configuraci¢n de acceso remoto de AppleTalk
# -----------------------------------------
pushd ras appletalk
set negotiation mode = allowset access mode = all
popd
# Fin de la configuraci¢n de acceso remoto de AppleTalk.
# -----------------------------------------
# Configuraci¢n IP RAS
# -----------------------------------------
pushd ras ip
delete pool
set negotiation mode = allow
set access mode = all
set addrreq mode = deny
set broadcastnameresolution mode = disabled
set addrassign method = auto
popd
# Fin de la configuraci¢n IP RAS.
# -----------------------------------------
#Configuraci¢n IPX RAS
# -----------------------------------------
pushd ras ipx
set negotiation mode = allow
set access mode = all
set nodereq mode = allow
set netassign method = autosame
popd
# Fin de la configuraci¢n IPX RAS.
# -----------------------------------------
# Configuraci¢n NBF RAS
# -----------------------------------------
pushd ras netbeui
set negotiation mode = allow
set access mode = all
popd
# Fin de la configuraci¢n NBF RAS.
# -----------------------------------------
# Configuraci¢n RAS AAAA
# -----------------------------------------
pushd ras aaaa
set authentication provider = windows
set accounting provider = windows
delete authserver name = *delete acctserver name = *
popd
# Fin de configuraci¢n RAS AAAA.
# Configuraci¢n de enrutamiento
pushd routing
reset
popd
#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
## ## ANTES de ejecutar esta secuencia de comandos ## #
# Para restaurar la configuraci¢n del enrutador IPX #
# DESINSTALE IPX desde la carpeta Conexiones de red y #
# vuelva a instalarlo. ##
## Esto eliminar la anterior configuraci¢n del #
# enrutador IPX y la restaurar a sus valores #
# predeterminados ##
##!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#
#----------------------------------------------------------
# Configuraci¢n IPX
#----------------------------------------------------------
pushd routing ipx
#----------------------------------------------------------
# Configuraci¢n de la interfaz IPX
#----------------------------------------------------------
#----------------------------------------------------------
# Configuraci¢n del filtro de tr fico IPX
#----------------------------------------------------------
#----------------------------------------------------------
# Configuraci¢n de la ruta est tica IPX
#----------------------------------------------------------
#----------------------------------------------------------
# Configuraci¢n del servicio est tico IPX
#----------------------------------------------------------
popd
# Fin de la configuraci¢n IPX
#----------------------------------------------------------
# Configuraci¢n RIP IPX
#----------------------------------------------------------
pushd routing ipx rip
popd
# Fin de la configuraci¢n IPX RIP
#----------------------------------------------------------
# Configuraci¢n SAP IPX
#----------------------------------------------------------
pushd routing ipx sap
popd
# Fin de la configuraci¢n IPX SAP
#----------------------------------------------------------
# Configuraci¢n NETBIOS IPX
#----------------------------------------------------------
pushd routing ipx netbios
popd
# Fin de la configuraci¢n IPX NB
N§ de configuraci¢n IP
pushd routing ip
reset
set loglevel error
add preferenceforprotocol proto=LOCAL preflevel=1
add preferenceforprotocol proto=STATIC preflevel=3
add preferenceforprotocol proto=NONDOD preflevel=5
add preferenceforprotocol proto=AUTOSTATIC preflevel=7
add preferenceforprotocol proto=NetMgmt preflevel=10
add preferenceforprotocol proto=OSPF preflevel=110
add preferenceforprotocol proto=RIP preflevel=120
add interface name="Conexi¢n de rea local" state=enable
set filter name="Conexi¢n de rea local" fragcheck=disable
add interface name="{657F0909-4AD3-489F-9D92-31F8F9100540}" state=enable
set filter name="{657F0909-4AD3-489F-9D92-31F8F9100540}" fragcheck=disable
add interface name="{E5329AA6-02CF-4A1E-AE97-26DCA879A372}" state=enable
set filter name="{E5329AA6-02CF-4A1E-AE97-26DCA879A372}" fragcheck=disable
add interface name="Bucle invertido" state=enable
set filter name="Bucle invertido" fragcheck=disable
add interface name="Interno" state=enable
set filter name="Interno" fragcheck=disable
popd
# Fin de la configuraci¢n IP
# ----------------------------------
# Configuraci¢n proxy DNS
# ----------------------------------
pushd routing ip dnsproxy
uninstall
popd
# Fin de configuraci¢n proxy DNS

# ----------------------------------
# Configuraci¢n IGMP
# ----------------------------------
pushd routing ip igmp
uninstall
popd
# Fin de configuraci¢n IGMP

# ----------------------------------
# Configuraci¢n NAT
# ----------------------------------
pushd routing ip nat
uninstall
popd

# ----------------------------------
# Configuraci¢n OSPF
# ----------------------------------
pushd routing ip ospf
uninstall
popd
# Fin de configuraci¢n OSPF

# -----------------------------------
# Config. del Agente de retrans. DHCP
# -----------------------------------
pushd routing ip relay
uninstall
popd
# Fin de la configuraci¢n Agente de retransmisi¢n DHCP

# ----------------------------------
# Configuraci¢n RIP
# ----------------------------------
pushd routing ip rip
uninstall
popd
# Fin de configuraci¢n RIP

# -------------------------------------------------------------------------
# Configuraci¢n de descubrimiento de enrutadores
# -------------------------------------------------------------------------
pushd routing ip routerdiscovery
uninstall
add interface name="Conexi¢n de rea local" disc=disable minint=7 maxint=10 life=30 level=0
add interface name="{657F0909-4AD3-489F-9D92-31F8F9100540}" disc=disable minint=7 maxint=10 life=30 level=0
add interface name="{E5329AA6-02CF-4A1E-AE97-26DCA879A372}" disc=disable minint=7 maxint=10 life=30 level=0
add interface name="Bucle invertido" disc=disable minint=7 maxint=10 life=30 level=0
add interface name="Interno" disc=disable minint=7 maxint=10 life=30 level=0
popd
# ----------------------------------
# Configuraci¢n de asignador DHCP
# ----------------------------------
pushd routing ip autodhcp
uninstall
popd# Fin de configuraci¢n de asignador DHCP
# ------------------------------------
# Configuraci¢n de puente (no compatible)
# ------------------------------------
# ------------------------------------
# Final de la configuraci¢n del puente
# ------------------------------------
Here is the end of the example file ******

Following the purpose of my example, I have changed the ip address parameter painted in the above script (mark as blue font), then after saved that, and finally in order to update that configuration, run next command :

netsh exec C:\IpConfiguration.txt

Remember, this procedure is available too into "YouTube Videos hosted by German Medina -at the right side of this page-), like as the next video :