New Reader Tip - UPDATE:
PIX Pre-Shared Key Recovery
Note: All tips published in the Cisco Technical Services Newsletter are
reviewed by Cisco technical support engineers. However, the Cisco Technical Services
Newsletter and Cisco cannot guarantee the accuracy or completeness of these tips.
There are times you will need to add configuration or make changes to a live PIX Firewall or ASA.
It is common for the original pre-shared keys used in site-to-site VPNs to be mislaid or forgotten. For example, perhaps the previous manager has left the company.
It is not possible to see a copy of the configuration with the keys viewable as they are hidden as ******.
The answer is to save a copy of the configuration to a TFTP server. This file can then be viewed using any simple text document. It can also be used to re-configure the device back to its original state if necessary.
-Tony Holmes, Cistek Solutions Ltd, Cheltenham, Glos, England, UK
Also, starting with version 7.0, administrators can optionally use the "copy" command to copy either the startup-config or running-config to either a TFTP or FTP server.
CCIE Central - UPDATE:
Revised Routing and Switching Written Exam Released
The CCIE Routing and Switching written exam v3.0 was recently released at all testing locations worldwide. The new version will replace the current version and will include previously untested topics, such as MPLS and IPv6. Candidates preparing for the Routing and Switching written exam on or after
this date should refer to the CCIE RS for a detailed outline of topics that will be covered.
Passing the Routing and Switching written exam qualifies a candidate to schedule the CCIE Routing and Switching lab in addition to meeting recertification requirements where applicable.
View the CCIE Routing and Switching Written Exam Blueprint v3.0 at:
www.cisco.com/web/learning/le3/ccie/rs/wr_exam_blueprint_v3.html
To find out more about scheduling CCIE exams, visit:
www.cisco.com/web/learning/le3/ccie/exam/index.html
Cisco Marketplace - UPDATE:
Get the Product Documentation You Need Now
"What's New in Cisco Product Documentation" is an online publication that provides information about the latest documentation releases for Cisco products. Updated monthly, this online publication is organized by product category to direct you quickly to the documentation for your products.
You can view the latest release of "What's New in Cisco Product Documentation" at:
www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Visit the Product Documentation Store today at:
www.cisco.com/go/marketplace/WN0607
(available only to registered users)
Networking Professionals Connection - UPDATE:
Upcoming "Ask the Expert" Events and TechTalks
Networking Professionals Connection is an interactive Website where you can discuss Cisco networking products and technologies with Cisco experts and networking professionals around the world.
Upcoming events on Networking Professionals Connection include:
- "Ask the Expert" events, which allow you to discuss specific
networking issues online with Cisco engineers:
www.cisco.com/go/AsktheExpert
- "Campus Mobility: Voice Over WLAN," now through June 29
- "IPCC Express," now through June 29
- "Group Encrypted Transport (GET VPN)," July 2-13
- "Configuring and Troubleshooting Cisco AS5x00 Access Servers for ISDN/Modems/PPP Connectivity," July 2-13
Note: "Ask the Expert" events are subject to rescheduling. Please refer to the URL above for the most current schedule.
- TechTalks are online Webcasts that focus on particular technology
subjects. You can view the latest event schedule, register to attend
a live session, and view archived presentations on the Web any time:
www.cisco.com/go/techtalk
To attend an event or participate in a discussion forum, visit Networking Professionals Connection at:
www.cisco.com/discuss/networking
DIAL
Tech Note:
Customer Dial-In Lab (San Jose, USA)
www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a008083c88c.shtml
Tech Note:
Customer Dial-In Lab (San Jose, USA) Configuration
www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a008083c886.shtml
TAC Case Collection Solution:
User has Difficulty Getting ISDN Equipment to Make a Connection Dialing International Calls due to a Call Type Mismatch
www.ciscotaccc.com/accessdial/showcase?case=K72565621
LAN Switching
Configuration Example:
Communication Media Module IP Connectivity
www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080837b12.shtml
Configuration Example:
Catalyst Layer 3 Switch for Wake-On-LAN Support across VLANs
www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186a008084b55c.shtml
Cisco TAC Case Collection Solution:
Unable to Display QoS Information at the Port Level with the "show policy-map interface" Command in Catalyst 3750 Switch
www.ciscotaccc.com/lanswitching/showcase?case=K84703505
Security and VPN
Configuration Example:
Migration from PIX 500 Series Security Appliances to ASA 5500 Series Adaptive Security Appliances
www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808554ed.shtml
Configuration Example:
PIX/ASA 7.x: Active/Active Failover
www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080834058.shtml
Tech Note:
Cisco NAC Appliance (Clean Access): Software Upgrade from 3.x to 4.0(x)
www.cisco.com/en/US/products/ps6128/products_tech_note09186a00808579c4.shtml
Tech Note:
CSM 3.x: Set Up User Permission and Roles
www.cisco.com/en/US/products/ps6498/products_tech_note09186a008084fd45.shtml
Tech Note:
IPS 5.x and Later: Tuning the Signature with Event Action Filter Using CLI and IDM
www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a00808518b2.shtml
Tech Note:
Cisco Security Manager 3.0.1: Generate a Self-Signed Certificate for Post Server Installation
www.cisco.com/en/US/products/ps6498/products_tech_note09186a0080851f9c.shtml
Tech Note:
PIX/ASA 7.X: Disable Default Global Inspection and Enable Non-Default Application Inspection
www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008085283d.shtml
Tech Note:
IPS 6.X: Enable/Disable the Summary of a Specific Event Using IDM
www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080838bcf.shtml
Tech Note:
NAC(CCA) 4.x: Map Users to Certain Roles Using LDAP Configuration Example
www.cisco.com/en/US/products/ps6128/products_tech_note09186a0080846d7a.shtml
Tech Note:
Cisco Security Manager 3.x: Steps to Install the License for Various Options
www.cisco.com/en/US/products/ps6498/products_tech_note09186a0080849150.shtml
Tech Note:
PIX/ASA 7.x: Traffic Management Using QoS Policies
www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml
Tech Note:
CSM 3.x: Add IDS Sensors and Modules to Security Manager Inventory
www.cisco.com/en/US/products/ps6498/products_tech_note09186a0080846d67.shtml
TAC Case Collection Solution:
How to Clear the Logs on the VMS Server
www.ciscotaccc.com/security/showcase?case=K12383458
Voice and Unified Communications
Configuration Example:
Enhanced Transcoding and Conferencing for IOS Voice Gateways in a CallMananger Network Using DSP Resources
www.cisco.com/en/US/products/sw/voicesw/ps556/products_configuration_example09186a008084fe1f.shtml
Tech Note:
Troubleshooting Cisco Unified Communications Manager MOH Error Message
www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a008084ec31.shtml
Tech Note:
IPCC-TAPS Troubleshoot
www.cisco.com/en/US/products/sw/custcosw/ps1846/products_tech_note09186a008084321e.shtml
Tech Note:
Recommended Trace Levels for IVR Translation Routing
www.cisco.com/en/US/products/sw/custcosw/ps1846/products_tech_note09186a00808344b9.shtml
Tech Note:
Logger Restart Generates Old SNMP Traps
www.cisco.com/en/US/products/sw/custcosw/ps1001/products_tech_note09186a008083ad77.shtml
Tech Note:
Unity Failover Error Messages
www.cisco.com/en/US/products/sw/voicesw/ps2237/products_tech_note09186a0080837de4.shtml
Tech Note:
How to Deploy a Voice Application from Cisco Unified Call Studio to Cisco Unified Call Services
www.cisco.com/en/US/products/ps7234/products_tech_note09186a0080841cba.shtml
Tech Note:
2007 U.S. Daylight Savings Time (DST) Changes and Cisco Unified Call Services, Universal Edition, and Cisco Unified Call Studio, Universal Edition
www.cisco.com/en/US/products/ps7234/products_tech_note09186a00808409d5.shtml
Tech Note:
Unified Communications Manager: "kCtiIncompatibleProtocolVersion - Incompatible Protocol Version" Error Message in Event Log
www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a008084de1a.shtml
Cisco TAC Case Collection Solution:
How to Enable Teaming or Failover for Two NICs on the Cisco CallManager 5.x Appliance for Fault Tolerance
www.ciscotaccc.com/voice/showcase?case=K49023175
Wireless
Configuration Example:
Unified Wireless Network Local EAP Server
www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080851b42.shtml
Configuration Example:
MAC Filters with Wireless LAN Controllers (WLCs)
www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml
Tech Note:
Cisco Unified Wireless Network TACACS+ Configuration
www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a0080851f7c.shtml
Tech Note:
Troubleshoot and Configure Initial Wireless Services Module (WiSM) Setup
www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a00808330a9.shtml
TAC Case Collection Solution:
What Is the Limit Client Power Setting in an Access Point?
www.ciscotaccc.com/wireless/showcase?case=K35366804
LAN Switching
Field Notices:
WS-C4948-10GE May Reset due to Multibit ECC Error
www.cisco.com/en/US/products/ps6021/products_field_notice09186a0080856964.shtml
Network Management
Field Notice:
HSE/HSS Does Not Support the Netmask Parameter in CSM Virtual Server Configuration
www.cisco.com/en/US/products/sw/cscowork/ps150/products_field_notice09186a0080842169.shtml
TAC Case Collection Solution:
Why Does Campus Manager Overwrite the DisplayNames of Devices in DCR with the IP Address?
www.ciscotaccc.com/nms/showcase?case=K185712725
Routers
Field Notice:
CRS16 - Grille Has Loose Louvres Which May Rattle when CRS Fans Are Operating - Procedure to Fix the Louvres Is Available
www.cisco.com/en/US/products/ps5763/products_field_notice09186a0080857ae2.shtml
Field Notice:
MWR1941-DC Fan Failures - Replace Unit
www.cisco.com/en/US/products/hw/routers/ps4062/products_field_notice09186a0080856525.shtml
Field Notice:
GSR 12000-SIP Cards with SPAs May Fail to Load due to Incorrect IOS Clock Setting - Software Upgrade Required
www.cisco.com/en/US/products/hw/routers/ps167/products_field_notice09186a00808559f1.shtml
Field Notice:
GSR OC192E/POS-SR-SC or 4OC48E/POS-SR-SC Fails to Upgrade MBUS during Install - Replace Affected Hardware
www.cisco.com/en/US/products/hw/routers/ps167/products_field_notice09186a0080846eb4.shtml
TAC Case Collection Solution:
How to Determine the Amount of Flash and DRAM on a Router
www.ciscotaccc.com/core/showcase?case=K20663316
Security and VPN
Field Notice:
Cisco Security Manager 3.1 - Software Removed from Cisco.com due to Upgrade Issue - New Software Forthcoming
www.cisco.com/en/US/products/ps6498/products_field_notice09186a00808434e7.shtml
Security Advisory:
LDAP and VPN Vulnerabilities in PIX and ASA Appliances
www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml
Security Advisory:
Combined IOS Table for May 22, 2007 Security Advisories
www.cisco.com/en/US/products/products_security_advisory09186a0080847c2b.shtml
Security Advisory:
Vulnerability in Crypto Library
www.cisco.com/en/US/products/products_security_advisory09186a0080847c5d.shtml
Security Advisory:
Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets
www.cisco.com/en/US/products/products_security_advisory09186a0080847c49.shtml
Security Advisory:
Multiple Vulnerabilities in the IOS FTP Server
www.cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml
Service Exchange
Field Notice:
SCE SCOS - SSH Activity Might Cause System Instability
www.cisco.com/en/US/products/ps6150/products_field_notice09186a008083b2a6.shtml
Storage Networking
Field Notice:
DS-C9140-K9 Switches with SAN-OS Release 3.0.x May Reload after Running for about 233 Days - Software Upgrade Required
www.cisco.com/en/US/products/ps5987/products_field_notice09186a008084a631.shtml
Video
Field Notice:
Cisco DME-1000/2000 Encoder Properties Not Saved - Recommended Software Fix Is Available
www.cisco.com/en/US/products/ps6681/products_field_notice09186a00808518bc.shtml
Voice and Unified Communications
Field Notice:
Windows 2003 Service Pack 2 Install and CSA Compatibility with Unity on Certain Servers
www.cisco.com/en/US/products/sw/voicesw/ps2237/products_field_notice09186a0080851821.shtml
Field Notice:
Cisco Enterprise and Hosted Contact Center Products Notice for Microsoft May 2007 Security Updates
www.cisco.com/en/US/products/sw/custcosw/ps1973/products_field_notice09186a008083ad68.shtml
Field Notice:
Cisco Unified IP Conference Station 7936 Fails to Upgrade - Upgrade Hangs at 50 Percent Done
www.cisco.com/en/US/products/hw/phones/ps379/products_field_notice09186a008084b947.shtml
WAN
Field Notice:
MGX - SES-PXM-CNTL2T3E3 - New Minimum Software Release Needed to Ensure Forward Compatibility of SES-PXM - Software Upgrade Available
www.cisco.com/en/US/products/hw/switches/ps525/products_field_notice09186a008085599f.shtml
Wireless
Field Notice:
Printed MAC Barcode Is Incorrect for All AIR-BR1310Gs and AIR-LAP1310Gs with Serial Number Week Codes Prior to March 18, 2007
www.cisco.com/en/US/products/ps5861/products_field_notice09186a008083b0d6.shtml
Field Notice:
AIR-WLC2006 - Intermittent Low Level Power Supply Failure
www.cisco.com/en/US/products/ps6308/products_field_notice09186a008084461e.shtml
If you would like to view Technical Tips that have recently received major updates, visit the Document Updates page at:
www.cisco.com/public/news_training/tech_tips.html
(available to non-registered users)
www.cisco.com/kobayashi/news_training/tech_tips.html
(available only to registered users)
Forget Your User ID or Password?
Your user ID is usually your first initial followed by your last name; for example, John Doe's user ID might be "jdoe." If you cannot remember your password, send a blank e-mail message to cco-locksmith@cisco.com. An automatic check will verify that your e-
mail address is registered with Cisco.com. Account details with a new random password will be sent in an e-mail to you.
Important Notices:
© 1992-2007 Cisco Systems, Inc. All rights reserved.
Terms and Conditions, Privacy Statement, Cookie Policy, and Trademarks of Cisco Systems, Inc.