Cisco ASA – DNS Doctoring
Jan01

Cisco ASA – DNS Doctoring

KB ID 0001113 Problem Cisco DNS doctoring is a process that intercepts a DNS response packet as it comes back into the network, and changes the IP address in the response. Why Would you want to do this? Well lets say you have a web server on your network, and its public IP is 111.111.111.111, and on your LAN its internal IP address is 192.168.1.100, its public DNS name, (or URL) is www.yoursite.com. When a user types www.yoursite.com...

Read More
HP – Switches The IP (or subnet) Already Exists
Apr16

HP – Switches The IP (or subnet) Already Exists

KB ID 0001176  Problem I was changing a clients LAN subnet this week, (dropping the mask from /24 to /16). When I attempted to change the management IP on the clients HP switches this happened; HP2510-24G(config)# vlan 1 HP2510-24G(vlan-1)# ip address 10.0.0.250 255.255.0.0 The IP address (or subnet) 10.0.0.250/16 already exists. HP2510-24G(vlan-1)# At first I though the switch was complaining because the IP was remaining the same, I...

Read More
Cisco Firepower Services – Change IP and DNS Addresses
Apr07

Cisco Firepower Services – Change IP and DNS Addresses

KB ID 0001173  Problem If you change your internal LAN addresses its easy to re-ip the firewall but what about the FirePOWER module? If you manage your SFR from the ASDM it will tell you what the IP is, but it won’t let you change it?   Solution Change the FirePOWER Module IP Address Log into the firewall, then open a session with the SFR module. find the physical address of the module (usually eth0, but check). Petes-ASA#...

Read More